HomePrivacy Policy
Legal Document
Privacy Policy
This document describes how WOS Control collects, uses, stores, and protects your personal data when you use our Telegram bot, Discord bot, or website.
EffectiveApril 16, 2026
Versionv1.0
Applies toAll services
Summary — Plain Language
- We collect your game player ID (FID), Telegram/Discord user ID, and basic game stats to power bot features.
- We never sell, rent, or share your data with advertisers or data brokers.
- Cookies are used only for login sessions and UI preferences — no tracking cookies.
- You can request full data export or deletion at any time.
- This service is not affiliated with Century Games, Elex Technology, Discord Inc., or Telegram Messenger.
The English version of this policy is the legally binding version.
1
Data We Collect
1.1 Game Identifiers
When you register with our bot or use our website, we collect the following data from the official game API:
| Player ID (FID) | Unique numeric player identifier | Required for all features |
| In-game Nickname | Your current display name in-game | Alliance management & search |
| Furnace Level | Your current furnace/chief level | Power calculations & filtering |
| Kingdom / State | The game server/state you reside in | State timeline, transfer tools |
| Avatar URL | Profile picture hosted by game CDN | Website profiles & leaderboards |
| Power Stats | Total power, hero power, troop power | Transfer & recruitment features |
1.2 Platform Account Identifiers
When you interact with our Telegram or Discord bot, we store your platform account ID:
| Telegram User ID | Numeric ID assigned by Telegram | Linking game profile; sending bot replies |
| Telegram Username | Your @username, if public | Contact for YouTuber/API notifications |
| Discord User ID | Numeric ID assigned by Discord | Linking game profile; sending bot replies |
| Discord Username | Your Discord tag | Contact for notifications |
We do not store your phone number, email address, or any other personal contact info from Telegram or Discord.
1.3 Usage Data
We log bot command interactions, gift code redemptions, API requests, and feature usage events. This data is stored in aggregate for service improvement and fair-use enforcement. Individual command logs are retained for 90 days.
1.4 User-Submitted Content
Content you voluntarily provide — such as recruitment listings, alliance descriptions, screenshots uploaded for AI analysis, or Google Form submissions — is stored and may be displayed publicly on the platform. You consent to this when you submit the content.
1.5 Technical Data
When you use our website, our server may log your IP address, browser type, and referrer URL for security and debugging purposes. These logs are retained for a maximum of 30 days and are not linked to your account.
2
How We Use Your Data
2.1 Core Bot Functionality
Your FID and game data power the following features: automatic gift code redemption, alliance member tracking, transfer power calculations, state timeline management, bear trap notifications, hero leaderboards, and recruitment marketplace. Without this data, these features cannot function.
2.2 Alliance Administration
Alliance administrators you are registered under can view your nickname, FID, furnace level, and gift code redemption history within their alliance dashboard. They cannot access your Telegram or Discord user IDs.
2.3 Notifications
We use your Telegram and/or Discord user ID to send you bot replies, gift code confirmations, event notifications (if enabled), and important account alerts. You can opt out of non-essential notifications at any time using bot commands.
2.4 Public Features
Your in-game nickname and game stats may appear on public leaderboards, alliance pages, or recruitment listings if you have created a public profile or been added to an alliance. You can request removal at any time.
2.5 Service Improvement
We analyse aggregated, anonymised usage patterns to improve bot commands, website performance, and server stability. No individual profiling or automated decision-making is applied to your personal data.
2.6 Legal Basis
We process your data under the following legal bases: (a) Contractual necessity — to provide the services you have signed up for; (b) Legitimate interests — to improve and secure our services; (c) Consent — for any marketing or optional communications.
3
Data Sharing
3.1 We Do Not Sell Your Data
WOS Control never sells, rents, or trades your personal data to third parties for commercial or advertising purposes.
3.2 Third-Party Service Integrations
We share minimum necessary data with the following integrated services:
| Telegram | Bot API communications | Telegram Privacy Policy |
| Discord | Bot API & slash commands | Discord Privacy Policy |
| Google (Forms/YouTube) | Google Forms auto-submit; YouTube API for YouTuber page | Google Privacy Policy |
| Stripe | Alliance plan subscription payments (no card data stored by us) | Stripe Privacy Policy |
| GitHub | Star-bonus system via GitHub API | GitHub Privacy Policy |
| WOS / KS Game API | Player data lookups via official game API | Century Games / Elex Technology |
3.3 Legal Disclosure
We may disclose personal data if required by applicable law, court order, or government request. We will notify affected users where legally permitted. We will challenge requests we believe are overbroad or unlawful.
3.4 Business Transfer
In the event of a merger, acquisition, or asset sale, user data may be transferred to the new entity. You will be notified via bot message before the transfer takes place, and you will have the option to delete your account.
5
Data Retention
5.1 Retention Periods
| Game profile (FID, nickname, stats) | Until account deletion requested | — |
| Telegram / Discord user ID | Until account deletion requested | — |
| Command & usage logs | 90 days | Auto-deleted |
| Gift code redemption history | 2 years | Aggregate may be retained longer |
| API request logs | 90 days | Auto-deleted |
| Server access logs (IP) | 30 days | Auto-deleted |
| Payment records | 7 years | Legal requirement |
| User-submitted content (listings, screenshots) | Until manually deleted by user | — |
5.2 After Account Deletion
When you request account deletion, all personally identifiable data is removed within 30 days. Aggregated, anonymised data may be retained indefinitely. Alliance gift code logs referencing your actions are also anonymised.
6
Security
6.1 Technical Safeguards
🔒TLS Encryption
All data in transit encrypted via HTTPS/TLS 1.3
🗄️EU Database
PostgreSQL hosted within the European Union
🔑Key Hashing
API keys stored as hashes — never plain text
🛡️Access Control
DB access restricted to authorised systems only
📋Audit Logging
Administrative actions are logged and reviewed
🔄Regular Backups
Daily encrypted backups retained for 14 days
6.2 Data Breach Response
In the event of a confirmed data breach that puts your personal data at risk, we will notify affected users via Telegram/Discord bot message and relevant supervisory authorities within 72 hours of becoming aware of the breach.
7
Your Rights
7.1 Rights You Have
| Right of Access | Request a copy of all data we hold about you | Contact us — delivered within 30 days |
| Right to Rectification | Request correction of inaccurate data | Use /update command or contact us |
| Right to Erasure | Request deletion of your account and all associated data | Contact us — processed within 30 days |
| Right to Restrict Processing | Ask us to stop processing your data for certain purposes | Contact us |
| Right to Data Portability | Receive your data in a machine-readable format (JSON) | Contact us — delivered within 30 days |
| Right to Object | Object to data processing based on legitimate interests | Contact us |
| Right to Withdraw Consent | Withdraw consent for optional communications at any time | Bot commands or contact us |
7.2 How to Exercise Your Rights
To exercise any of the above rights, contact us via the Telegram bot (@WhiteoutGuildBot) or the support chat on our website. We will verify your identity before processing the request. All requests will be fulfilled within 30 calendar days.
7.3 Supervisory Authority
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.
8
Discord & Telegram
Discord
WOS Control's Discord bot operates under the Discord Developer Policy and Discord Terms of Service. We request only the minimum necessary permissions to function.
- We request only necessary bot permissions (guilds, messages, slash commands)
- We do not read private DMs without explicit user interaction
- We do not store message content beyond what is necessary for command execution
- Discord User ID and guild ID are stored only to enable bot functionality
Telegram
WOS Control's Telegram bot operates under the Telegram Bot API Terms. Bot interactions are subject to Telegram's privacy policy as the platform operator.
- We process only messages directed to the bot (commands and replies)
- We do not log full message history in groups
- Telegram User ID is stored only to link your game account
- Phone numbers are never accessible to or stored by our bot
8.1 Data Accessed via Telegram
Via the Telegram Bot API, our bot can see: your user ID, first name, last name (if set), username (if set), and language code. We store only the user ID and username. First and last names are not stored.
8.2 Data Accessed via Discord
Via the Discord Bot API, our bot can see: your user ID, username, discriminator, avatar hash, and the guild IDs of servers where the bot is present. We store only the user ID and username. Guild administrators can remove the bot at any time.
9
Third-Party Services
The following third-party services are integrated into WOS Control. Each operates under its own privacy policy. We encourage you to review them.
Stripe
Secure payment processing for premium subscriptions. WOS Control does not store card details.
Privacy PolicyGoogle APIs
YouTube Data API v3 for YouTuber page; Google Forms API for auto-form submission
Privacy PolicyCentury Games / Elex Technology
Official Whiteout Survival & Kingshot API for player data lookups. We are not affiliated with them.
10
Children's Privacy
10.1 Age Restriction
WOS Control is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately and we will delete the information within 7 days.
10.2 Whiteout Survival & Kingshot Age Requirements
The underlying games (Whiteout Survival and Kingshot) have their own age requirements. Users of our bot and website must comply with the age requirements of the respective games and platforms (Telegram: 13+, Discord: 13+).
11
Policy Changes
11.1 How We Notify You
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Effective" date shown at the top of this page
- Notify all registered users via Telegram and Discord bot message for material changes
- Post a changelog notice on this page listing what changed
11.2 Continued Use
Continued use of WOS Control services after the updated policy takes effect constitutes acceptance of the new policy. If you do not agree with the changes, you may request account deletion before the effective date.
12
Contact Us
For any privacy-related requests — including data access, correction, deletion, or general questions — please reach out. We aim to respond within 5 business days.