Privacy Policy
Last updated 28 October 2026
🚧 Pre-launch version. Caffo is in development and not open to the public yet. This page will be updated before launch; we'll announce important changes.
The short version
- 💬 We never read your messages. Caffo only notices that a message was sent, to give chat XP.
- 🎮 We store your Discord ID and your game progress, and nothing more about you than the game needs.
- 🙈 You choose what others see with
/privacy. - 🚫 We don't sell your data or show ads.
- 🗑️ Email [email protected] to see or delete your data.
1. Who is responsible
Caffo is made by MoxNexus, which is responsible for your data (the "data controller"). Contact: [email protected].
2. What we collect, and why
| Data | Where it comes from | Why |
|---|---|---|
| Your Discord user ID | Using Caffo | To know whose progress is whose |
| Game progress: coins, XP, level, job, items, quests, achievements, badges, streaks, timers, tutorial, CiviBucks | Playing | To run the game |
| When you were last active in a server, and that a message was sent (never what it says) | Chatting | Chat XP and city activity |
| Your choices: privacy settings, badges | /privacy, /achievements, the website |
To respect them |
| Records of coin, item and CiviBuck changes | Every change | To prevent cheating, fix mistakes and handle support |
| Moderation cases: who, which moderator, the reason, when | Moderation commands | Server moderation history |
| Server details: ID, name, when Caffo first joined, text-channel names, settings, city stats | Servers that add Caffo | To run each city and the admin dashboard |
| Your café: its name, upgrades, boosts, income waiting, last hour's customers and totals | /cafe |
To run your café |
| Reminders you turned on, and when the next one is due (deleted once sent, or when you turn them off) | /reminders |
To send you a direct message when your shift or daily is ready |
| A blackjack hand in progress: your cards, the dealer's and your bet (deleted when the hand ends) | /casino |
So a hand survives a restart and your bet is never lost |
| The Discord ID of Caffo's owner, for the private owner console | The bot starting up | To let only the owner open it |
| Website login: username, avatar, a Discord access token, a hashed session token | Logging in to caffo.gg | To show your profile and the servers you manage |
We never collect message content. Caffo doesn't have Discord's message-content permission.
Website login asks Discord only for your basic profile (identify) and your server list (guilds).
3. Our legal basis
We use this data because it's needed to provide the game you chose to use, and for our legitimate interests in keeping Caffo fair, secure and working (UK GDPR Article 6(1)(b) and (f)).
4. What other people can see
- Other players can see your level, café and badges, and your balance unless you hide it with
/privacy. - If a server has a progression channel, your purchases, upgrades, level-ups and achievements are celebrated there,
unless you keep your progress quiet in
/privacy. - Servers appear on public leaderboards (name, icon, stats) only if their admins opt in.
/networthranks a server's players by coins and what they've put into their café; players who keep their balance private with/privacyaren't listed.- Server admins can see their own server's settings and moderation cases.
5. Who we share it with
- Discord, because Caffo runs on Discord (see Discord's Privacy Policy).
- Cloudflare, which delivers caffo.gg securely. It handles your connection, including your IP address, but we don't store IP addresses ourselves.
- Nobody else. We don't sell data or use advertising. We'd share data only if the law requires it.
Our servers are in the United Kingdom. Discord and Cloudflare may process data in other countries under their own safeguards.
6. Cookies
caffo.gg uses only cookies that are needed for it to work: a login cookie (lasts 7 days, or until you log out) and a cookie that protects the login process for 10 minutes. No tracking or advertising cookies.
7. How long we keep it
- Game data: while you play, so your progress is there when you come back. Ask us to delete it at any time.
- If a server removes Caffo, its city is kept so it can return if the bot is added again. Server owners can ask us to delete it.
- Website logins: end after 7 days, or when you log out.
- Moderation cases and change records: kept as long as the related server or account data exists.
8. Your rights
Under UK data protection law you can ask to see your data, correct it, delete it, limit or object to how we use it, or get a copy to take elsewhere. Email [email protected] from the address you'd like us to reply to, with your Discord user ID. We'll answer within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO).
9. Children
Caffo is for people old enough to use Discord (at least 13 in the UK). We don't knowingly collect data from anyone younger. If you think we have, email [email protected] and we'll delete it.
10. Security
The database is never exposed to the internet, website sessions are stored as hashes, and the website never holds the bot's credentials. No system is perfect: if a breach affects you, we'll tell you and the ICO where the law requires.
11. Changes
We'll update this policy when Caffo starts storing something new, and before purchases go live. The date at the top shows the latest version; important changes will be announced.