Privacy Policy

1. Who we are

Loothound is an independent Discord bot and website operated from India. As the entity that decides why and how your personal data is processed, we are the Data Fiduciary under the DPDP Act. You — the individual whose data we process — are the Data Principal.

2. Personal data we collect

• Discord identifiers — your Discord user ID, and the server (guild) and channel IDs where you use the bot.
• Game & account data — balances, inventory, stats, cooldowns, quests, your companion, and a ledger of processed purchases, all tied to your Discord user ID.
• Command content — to support prefix commands, the bot reads message content only to detect and parse its own commands; your message text is not stored or logged.
• Payment data — for crypto purchases we process on-chain transaction details (amount, transaction hash, and the wallet involved). We never receive or store your card details or private keys.

3. Purpose & lawful basis

We process your data only for the purposes for which you provide it — to save your progress, run game features, deliver purchases you request, keep the service secure, and prevent abuse. For users in India, our lawful basis is your consent (given when you add and use the bot) together with the “certain legitimate uses” the DPDP Act permits, such as providing a service you have asked for. We practise data minimisation — we collect only what these purposes require, and we do not process your data for any incompatible purpose.

4. How we use data

We use your data solely to operate the game — to save progress, run features, deliver purchases, and prevent abuse. We do not sell your personal data, share it for money, use it for advertising, or carry out behavioural profiling or targeted advertising.

5. Service providers & processors

We rely on a few providers, who act as our Data Processors and handle your data only on our instructions and for the purposes above:

• Discord — the platform the bot operates on, subject to Discord’s own Privacy Policy.
• Database & hosting — your game data is stored in a managed database and the bot runs on a cloud host.
• Blockchain node provider — used to verify crypto payments; transactions also exist on public blockchains.

6. Cross-border transfers

Some providers (for example, Discord and our cloud host) may store or process data on servers outside India. Where this happens we take reasonable steps to keep your data protected, and we only transfer personal data in a manner permitted by the DPDP Act and the rules made under it.

7. Data retention & erasure

We retain your personal data only for as long as needed to provide the service, or as required by law. When the purpose is served, when you withdraw consent, or when you ask us to erase your data, we delete the personal data tied to your Discord user ID — except limited information we are legally required to keep or need to prevent fraud and abuse.

8. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we hold about you and how we process it;
• Correction & erasure — correct inaccurate or incomplete data, and erase data no longer needed for its purpose;
• Grievance redressal — a readily available means to raise and resolve concerns (see our Grievance Officer below);
• Nomination — nominate another individual to exercise your rights on your behalf in the event of death or incapacity;
• Withdraw consent — at any time, as easily as you gave it.

To exercise any right, contact us at support@loothound.xyz or through our support server. We verify and action valid requests within the timelines required by law — and in any case within 30 days. You can also stop all further collection by removing the bot from your servers and no longer using its commands.

9. Withdrawing consent

You may withdraw your consent at any time by contacting us, or by removing the bot and ceasing to use it. Withdrawal does not affect processing already carried out on the basis of your earlier consent, and some features will stop working once consent is withdrawn.

10. Grievance Officer

If you have a complaint about how your personal data is handled, you may contact our Grievance Officer at support@loothound.xyz. We aim to acknowledge and resolve grievances within the timelines set by the DPDP Act. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

11. Children’s data

Loothound is intended for users who meet Discord’s minimum age (13, or higher where local law requires) and are permitted to use it. We do not knowingly process the personal data of a child (a person under 18) in India without the verifiable consent of a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

12. Security safeguards

We take reasonable technical and organisational safeguards to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Data breach

In the event of a personal data breach, we will take prompt remedial action and, where required by the DPDP Act, notify both the Data Protection Board of India and the affected Data Principals.

14. Changes to this Policy

We may update this Policy from time to time; material changes are reflected by the “Last updated” date above. Where the law requires, we will seek fresh consent for materially new processing.

15. Governing law & contact

This Policy is governed by the laws of India, including the DPDP Act, 2023 and its rules. Loothound also operates within Discord and complies with Discord’s Developer Terms of Service and Developer Policy. For any privacy question, data request, or grievance, reach us at support@loothound.xyz or in our support server.

16. Cookies & Local Storage

Loothound uses cookies and browser local storage (such as our Service Worker CacheStorage) solely for essential website functionality — specifically to cache creature emojis, game icons, and brand logos locally so that repeat page visits and creature browsing load in 0ms without consuming redundant network bandwidth.

We do not deploy third-party advertising cookies, invasive tracking scripts, or cross-site profiling tools. You can view or adjust your preferences at any time by clicking Cookie Preferences or via the link in the site footer.