Alchemist Privacy Policy

Effective: 22/10/2024

Last updated: 03/08/2026

1. Introduction

Alchemist is operated by ("we") the developer .ddominik (ID: 302885091519234050). The developer is responsible for both the website and the bot Alchemist#7648 (ID: 890529286514180166).

The controller responsible for data processing within the meaning of the GDPR is Dominik Scheidel, c/o Postflex #5812, Emsdettener Str. 10, 48268 Greven, Germany. You can reach us at [email protected]. Further details are in our Legal Notice.

Your privacy matters to us. Please read this Privacy Policy carefully to understand how we handle your data when using our services.

2. Key Information

  • • We prioritize data minimization and only collect what's necessary for our services to function.
  • • Your data is used solely to improve and maintain our services.
  • • We do not sell your data, and we do not use it for advertising.
  • • Third-party sharing is limited to essential service providers.
  • • We never see or store your full payment card details.

3. Website and Dashboard Usage

  • • Signing in to the dashboard uses Discord OAuth. We receive your Discord ID, username, avatar and the list of servers you can manage.
  • • A login session is stored on our servers and in an essential cookie so that you stay signed in. Sessions expire automatically and are removed when you log out.
  • • We do not use advertising or tracking cookies, and we do not profile your browsing behaviour.
  • • Server configuration you change in the dashboard is saved to our database, because it has to persist for the bot to use it.

4. Discord Bot Features

  • • Data about your Discord account which is publicly available (Discord ID, shared servers)
  • • Server configuration data (IDs, settings, customizations)
  • • Social media notification settings for YouTube and Twitch integration
  • • Activity data used by bot features, such as experience points, levels, economy balances, owned items and achievements
  • • AI Moderation data when using OpenAI's services (message IDs and content are only stored in your designated server channels)

5. Premium Subscriptions and Payments

If you purchase a Premium subscription, additional data is processed so we can take payment and give you what you paid for.

  • • Payments made through our dashboard are handled by Stripe Payments Europe, Ltd. (Ireland). Payments made inside Discord are handled by Discord.
  • • Stripe receives your name, email address, billing address and payment details in order to process the payment. Card data is entered on Stripe's own hosted checkout page — it never reaches our servers.
  • • We store a record of your subscription: your Discord ID, the Stripe customer and subscription reference, the product purchased, its status, the billing period, and the amount and currency.
  • • Your Discord ID is attached to your payment record so we can grant your Premium benefits to the correct account. This links your Discord identity to your payment data.
  • • Invoices are generated and stored by Stripe and are available to you at any time through the billing portal on our dashboard.

6. Legal Bases for Processing

  • • Performance of a contract (Art. 6(1)(b) GDPR) — operating the bot and dashboard for you, and providing and billing Premium subscriptions.
  • • Legal obligation (Art. 6(1)(c) GDPR) — keeping invoices and payment records for the periods German tax and commercial law require.
  • • Legitimate interests (Art. 6(1)(f) GDPR) — keeping the service secure, preventing abuse and fraud, and diagnosing errors so we can fix them.
  • • Consent (Art. 6(1)(a) GDPR) — where you explicitly enable an optional feature, such as connecting a YouTube or Twitch account. You may withdraw consent at any time.

7. Data Collection and Storage

  • • The bot runs on a secured VPS in Germany at netcup
  • • We use a secured MySQL database for core functionality data
  • • Images for announcements are stored securely on our KVM server with proper hashing
  • • Data is collected through:
  • • Service providers that process data on our behalf:
    • • netcup GmbH (Germany) — hosting
    • • Stripe — payment processing and fraud prevention
    • • OpenAI — AI moderation and chat features, where enabled
    • • Error monitoring and performance monitoring tools, used to diagnose faults

8. International Data Transfers

  • • Our servers and database are located in Germany.
  • • Some of our service providers — including Discord, Stripe and OpenAI — may process data outside the European Economic Area, particularly in the United States.
  • • Where this happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

9. Security

  • • All servers and databases are protected from public access
  • • We implement industry-standard security measures
  • • While we strive for maximum security, no system is 100% secure

10. Data Retention and Deletion

  • • Bot removal triggers deletion of your server's data
  • • Backup and log data may be retained longer
  • • Invoices and payment records are an exception: German tax and commercial law (§ 147 AO, § 257 HGB) require us to keep them for up to ten years. We cannot delete these on request, but we do not use them for any other purpose.
  • • To request data deletion, either:

11. Your Rights

Under the GDPR you have the following rights regarding your personal data:

  • • Access — ask what data we hold about you. You can also use the /mydata command in Discord.
  • • Rectification — have inaccurate data corrected.
  • • Erasure — have your data deleted, subject to the retention obligations described above.
  • • Restriction and objection — limit or object to processing based on our legitimate interests.
  • • Data portability — receive your data in a machine-readable format.
  • • Withdraw consent — at any time, without affecting processing already carried out.
  • • Complain to a supervisory authority — you may lodge a complaint with your local data protection authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

Contact Information