Privacy Policy

Last updated: October 25, 2026

This policy explains what data TheTower.lol collects, why, who it is shared with, and how to have it deleted. TheTower.lol is an independent community project for players of The Tower, operated by TheDisasterFish. It covers the statistics website at thetower.lol, the account and verification site at account.thetower.lol, and the TheTower.lol Discord bot ("the Services").

1. What we collect

Tournament data. The statistics site shows results from The Tower's tournaments: in-game player IDs, in-game names, tournament placements, and waves reached. This comes from the game's tournament data, not from you, and it is shown publicly.

Signing in. When you sign in to account.thetower.lol with Discord, we receive your Discord user ID, username, and avatar. When you sign in with Reddit, we receive your Reddit username and ID. A session cookie keeps you signed in. We do not use advertising or tracking cookies.

Verification. When you verify, on the website or with the bot's /verify command, we store:

• the in-game player ID(s) you submit;
• the screenshot you upload, and the text read from it automatically;
• the review outcome and any moderator notes; and
• the link between your Discord or Reddit account and your player ID, including the account ID, display name, and date verified.

The Discord bot.

• Server members and roles. To give verified players their roles and keep tournament roles up to date, the bot receives the member list and role changes of the servers it is in. This is held in memory only and is not stored.
• Message content. Only the vote-counting feature (VoteScan) reads message text, and only when a server's staff run it on a channel they choose. Messages are checked in memory to count matches of the staff's search phrases. Message text is never stored. The result (user ID, name, vote count, and which search phrases matched) is sent only to the staff member who ran the scan.
• Things you set up. Tournament reminder preferences (your user ID and reminder times), server advertisements you post, and settings changes made by server admins (we record who made each change).
• Usage statistics. We count which commands, buttons, and menus are used, and in which servers, so we can see which features are useful. We do not record who used them. To count how many different people used a feature each day, user IDs are held only in temporary memory, never written to permanent storage, and deleted at the end of that day.

Moderation records. We maintain records of banned players.

Logs. Our servers keep technical logs, which can include Discord user and server IDs.

2. How we use it

We use this data only to run the Services:

• showing tournament statistics;
• verifying players and assigning Discord roles;
• detecting cheating and impersonation;
• sending reminders you asked for;
• running features that server staff turn on;
• understanding which features are used, to improve the Services; and
• keeping the Services working and secure.

We do not sell data, use it for advertising, build profiles of users, or use message content to train AI or machine-learning models.

Where data-protection law applies, we process data to provide the features you ask for (such as verification), and for our legitimate interest in running fair community tools and preventing cheating and impersonation.

3. Who we share it with

• The public. Tournament results and statistics are public. Moderation decisions can affect whether a player appears on leaderboards.
• People who view your profile, if you choose. You can make any of your linked accounts, such as your Reddit username, public. Public accounts are shown on your player page on the statistics site and in the bot's player lookups. Accounts are private unless you change this, and you can switch them back at any time on your account page or with /profile in Discord. Discord accounts you link are shown in the bot's player lookups inside Discord whatever you choose.
• Discord. Verification screenshots are posted to a verification log channel in The Tower Discord server, where members of that server may be able to see them. Server moderators can review verification submissions.
• Tech Tree Games. When we report a player for suspected cheating, we send their in-game player ID and the reason for the report to Tech Tree Games, the developer of The Tower.
• Service providers that help us run the Services, such as providers for server hosting, networking, and backups, and Anthropic, which writes summaries of public tournament results. Anthropic receives only public tournament data, never Discord data or screenshots.
• When the law requires it.

4. How long we keep it

Data	Kept
Linked accounts and verification records	Until you ask us to delete them
Verification screenshots	Kept to detect impersonation (someone reusing another player's screenshot), until you ask us to delete them
Message content	Never stored
Server member lists and roles	In memory only
Usage statistics	Individual events: 30 days. Daily totals, which identify no one: kept permanently
Server logs	Rotated automatically, generally within about a month
Database backups	Deleted after at most 13 months. Data you ask us to delete disappears from backups as they expire.
Records of banned players	Kept permanently

5. Your choices and rights

To access or correct your data, email [email protected]. We may ask you to confirm the request from the Discord or Reddit account it concerns.

Showing your accounts. On your account page, or with /profile in Discord, you can choose which of your linked accounts other people see.

Deleting your data. You can ask us to delete your data at the same address, and we will honor the request.

• What we delete: your linked accounts, verification records, and screenshots (including copies the bot posted in Discord). We also remove your verified and tournament roles.
• What a deletion request does not cover:
  • Game data, such as in-game player IDs, in-game names, and tournament results. Tech Tree Games publishes this with every tournament, and it stays on the statistics site. Once your data is deleted, it is no longer linked to your Discord or Reddit account.
  • Records of banned players.
• What it means for you: verification is how the community confirms who players are. After deletion, you may no longer be able to take part in parts of the community that require verification, and you may be removed from The Tower Discord server.

Depending on where you live (for example the EU, UK, or California), you may also have the right to object to processing or to complain to your local data-protection authority.

Server owners can remove the bot at any time. Members can leave a server to stop the bot processing their data there.

6. Security

Access to our servers and data is limited to the project's operators, and all connections to the Services use HTTPS.

7. Children

The Services are not for anyone under 13, or the minimum age in their country. If we learn that we hold data from someone below that age, we delete it.

8. Changes

We may update this policy. The date at the top shows when it last changed. If we make significant changes, we will announce them on the site or in Discord.

9. Contact

[email protected]