Privacy Policy

Lumei never stores the content of your messages.We award XP and currency based on the fact that activity happened — not on what was said. The text of your members' messages is read in memory to measure engagement, then discarded; it is never written to our database, never logged, and never used to train anything.

For each member of a server where Lumei is installed, we keep:

• Your Discord account identifiers — your user ID, username, and avatar hash, so we can render leaderboards, rank cards, and your dashboard.
• Your progression and economy state — XP, level, prestige, streaks, wallet and bank balances, and per-server quest and season progress.
• An economy ledger — an append-only record of currency movements (the amount, kind, and the other party for a payment). This is how balances stay auditable and double-spends are impossible. It records outcomes, never message text.
• Shop and inventory — items a server offers and what members own or have used.
• Server configuration— the settings a server's admins choose (XP curves, rewards, shop items, quests), and an audit log of who changed what in the dashboard.

We do not store message content, message history, direct messages, voice recordings, email addresses, payment card numbers, or IP address logs beyond what our hosting providers retain transiently for security.

When you sign in, we use Discord's OAuth. We request only the identify and guildsscopes — enough to know who you are and which servers you can manage. We re-check that you have the Manage Server permission on the server side before showing you any server's settings. We store a session cookie to keep you signed in; that is the only cookie Lumei sets.

We don't sell your data or share it for advertising. We use a small set of infrastructure providers to run the service:

• Discord — the platform Lumei operates on (authentication and bot connection).
• Neon— managed PostgreSQL database (AWS, US West), where the data above is stored.
• Upstash — managed Redis, used for short-lived caches, counters, and cooldowns.
• Vercel — hosts the web dashboard and provides cookieless, privacy-friendly traffic analytics.
• Fly.io — hosts the bot process.
• Sentry — error monitoring, so we can fix crashes. We send it diagnostic context only, not your stored data.

We keep your data while Lumei is installed on a server you belong to, so your progress persists. If Lumei is removed from a server, that server's operational data may be retained for a short period in case the bot is re-added, then becomes eligible for deletion. Encrypted database backups are retained for up to 30 days for disaster recovery.

You can ask us to access or delete the data we hold about you. Email admin@arrowplane.ca from an address we can verify, or contact a server admin, and we will:

• delete your member records — XP, level, balances, inventory, and quest and season progress — and your stored Discord identifiers;
• anonymize your references in the economy ledger, so the financial record stays consistent but is no longer tied to your identity;
• complete the request within 30 days.

A server's owner can request deletion of that entire server's data. A self-serve deletion command is on our roadmap; until then we handle requests manually so a human verifies them.

Lumei follows Discord's Terms of Service, which require all users to meet Discord's minimum age (at least 13, or older where local law requires). Lumei is not directed at children under that age.

Lumei is in active development; we may update this policy as the product evolves, and we'll revise the date at the top when we do. Questions about privacy or a data request? Email admin@arrowplane.ca.