Privacy Policy

Who operates the services

The services are operated by xudo, the administrator of xudo.lol. For privacy requests or questions, contact the operator through the xohoes Discord server. Please do not send passwords, OAuth tokens, or other secrets in a support message.

Information we handle

• Website visits: the profile view counter stores an aggregate count. The web host and security providers may also process request details such as IP address, time, requested page, browser information, and referrer for delivery, security, and troubleshooting.
• Dashboard sign-in: when you choose Discord sign-in, we receive your Discord user ID, username, avatar identifier, server IDs and names, server icons, and permission information. The dashboard uses Discord OAuth access and refresh tokens in a server-side session to keep sign-in working and re-check your server access.
• Dashboard session: a necessary, secure session cookie identifies your sign-in session. It is configured to expire after up to seven days; you can also sign out to end it sooner.
• Discord bot: the bot processes Discord IDs, server settings, channel and role IDs, and information needed for features you enable. Depending on how a server uses it, this can include economy balances, giveaway entries, reminders, temporary voice room ownership, custom-role settings, and content submitted to bot commands.
• API and client updates: the update service provides version information and files. The web host may process ordinary connection logs when a client checks for or downloads an update. The services do not ask you to submit Minecraft account credentials.

Why we use information

Information is used to provide features you request, authenticate and authorize dashboard access, save server configuration, operate the bot and update service, protect the services from abuse, and diagnose technical problems. Where applicable, processing is based on providing a requested service, your choices and authorizations, legitimate interests in keeping the services secure and reliable, or a legal obligation.

Cookies and external services

The dashboard uses an essential session cookie for Discord sign-in. The profile page may load Google Fonts, a Spotify player, and images hosted by Discord. Those providers may receive connection information from your browser when their content loads and handle it under their own policies.

The services are hosted on OVHcloud infrastructure and use Cloudflare network services. Discord provides OAuth and bot functionality. Their independent handling of data is described in their policies: Discord, OVHcloud, Cloudflare, Google, and Spotify.

Retention and security

Dashboard session data is kept only for the session, which expires after up to seven days or when you sign out. Bot settings and feature records are kept while needed to run the relevant server features; a server administrator can disable features or ask the operator to remove associated records. Origin web server logs rotate daily and retain up to 14 rotated files. Security providers may keep their own records under their separate retention rules.

We use access controls and encrypted connections to protect the services. No online service can guarantee perfect security.

Your choices and privacy requests

You can sign out of the dashboard at any time and revoke the app's authorization from your Discord settings. You may ask the operator to access, correct, restrict, or delete personal information held by these services, subject to applicable legal requirements. Some bot data is controlled by the Discord server and its administrators; ask the server administrator to remove the feature data they configured, or contact the operator through the Discord server above.

If you are in the European Economic Area, you may also have rights under the GDPR, including access, rectification, erasure, restriction, objection, and portability where applicable, and the right to complain to a supervisory authority.

Children and policy changes

These services are not directed to children below the minimum age required to use Discord or applicable local law. We may update this policy when the services or legal requirements change. The date at the top shows when it was last updated.