About & privacy

What the bot counts

• Messages: how many, per member, per channel and per hour.
• Reactions and emoji: which ones are used, and by whom.
• Voice: how long members spend in voice channels.
• Games: from your Discord status, the name of the game you are playing or competing in, or that you are streaming, and for how long, per day. The game's Discord application id is kept with the game, not with you, to show its icon. Nothing else from your status is stored: no rich presence details, no Spotify songs, no custom status.
• League ranks: only if you link your League account with /lol link, Riot's official tier, division and LP for Solo/Duo and Flex, every 3 hours. They show on your profile and on the Ranked page of your servers. /lol unlink deletes them.
• League games: with a linked account, your ranked and normal games of the last 10 days (the champion you played and when), every 6 hours, for the weekly report, the Ranked page and your profile (your most played champion). Custom games are never fetched./lol unlink deletes them.
• Riftbound cards: only what you enter yourself on the Cards page or with /collection add, how many of each you own (finish, condition and language), how many are for trade and how many you lend. Your profile's Collection tab shows totals per set, rarity and language. We keep the language you last added in, so the next entry starts in it. With /collection lending on, members of your servers see your copies to lend on a card's page, unless your profile is private.
• Riftbound loans: when you record one with /lend, which of your cards a member has, until when, and whether they confirmed or disputed it (with what they wrote);/return closes it. Loans are never edited: a correction is a new loan that replaces the old one. Only you and the other member see a loan, on your profiles' Loans tab. The bot sends the borrower one reminder on the due date, if they accept DMs. A deck lent whole (/lend with a deck, or on its page) is one loan that also keeps the deck's name.
• Riftbound decks: the decks you build on the Decks page, with their cards, Legend, Chosen Champion, language and notes. A deck is private unless you share it with the members of your servers, or with anyone logged in who has its link. A deck you mark not for lending keeps its cards out of what you offer to lend.
• Riftbound wishlist: the cards you add to it by hand with how many you want, and per deck whether its cards count towards it. What you still want is worked out from those, your decks and your collection when the page is shown, on your profile's Wishlist tab, for whoever may see your profile.
• Riftbound trades: once you mark cards for trade, members of your servers whose wishlist has them see your name, how many you have for trade and where you could meet (an event you are both going to, a store you are both regulars at, or a store in a city you play in, never an address) on the server's Trades page, unless your profile is private. The bot DMs them once per match, if they accept DMs, and keeps which matches it told them about. No prices or payments go through the bot.
• Joins and leaves.

Along with those counts it keeps ids, timestamps, and server, channel and member names and avatars. It never stores what a message says: the bot does not even have Discord's permission to read message content.

Who can see what

Logged out, you only see totals across all servers: no server names, no member names, nothing about a single person.

Logged in with Discord, you see the servers you are a member of, and only those. Other members of a server can see your name and stats on that server's pages. Game time is the exception: a server's game totals count everyone, but its Playing now list only names members whose profile is not private.

Your profile page, which brings your servers together, is private until you change it there or with /profile visibility: only you, people who share a server with you (for the servers you share), or anyone logged in (your name; stats only for the servers you share). While you are hidden with /hide-me in a server, nobody else sees it.

Logging in stores your Discord id, name, avatar and email address. The email comes with every Discord login through our login provider (Supabase); the site does not use it.

Hiding or deleting your data

Type /hide-me in a server to disappear from that server's lists and charts on the website. /show-me brings you back. It applies per server, so run it in each server you want to hide from. Your messages still count towards the server's totals, without your name. Game time is not counted at all while you are hidden in any server.

To have your data deleted instead, type /forget-me in any server and confirm. It deletes everything the bot stored about you, in every server: your message, reaction and voice counts, your game time, your name and avatar, your server memberships, your linked League account with its ranks and games, your Riftbound collection, decks, wishlist, trade matches and loans (they go for the other member too), your profile and lending settings and your /hide-me setting. Server totals such as messages per channel keep their counts, without anything that points to you. The bot then stops counting you, keeping only a scrambled (hashed) copy of your Discord id to recognise you by. Until you type /show-me, which starts counting you again, you also cannot open your servers' pages here.

To remove the bot from a server, a server admin can kick it like any member (or via Server Settings → Integrations). It stops counting immediately and the server disappears from the server picker. Statistics already collected are kept; ask below if you want them deleted.

Numbers about the site

To learn whether anyone visits and which pages matter, the website uses Vercel Web Analytics. It sets no cookies and does not follow you across sites or days: it counts page views per page, with the referring site, country, browser and device type. Server ids in the address are kept, so we can see how many servers are looked at each week; member ids are cut out first.

From the bot's own data we also watch, once a month: how many servers have the bot, how many set it up with /setup, and how many monthly recaps it posts.

Who runs it

ni han bao is a hobby project by Ruben. Questions, or a request to delete data? Open an issue on GitHub. The code is public there too.

ni-han-bao was created under Riot Games' "Legal Jibber Jabber" policy using assets owned by Riot Games. Riot Games does not endorse or sponsor this project.