Privacy Policy

Privacy Policy for Kage

Last updated: 12 October 2026

1. Data Controller

The controller responsible for processing personal data in connection with Kage is:

Michael Gruhl – Kage
c/o buchimpressum.de GmbH
Königsberger Weg 8
53859 Niederkassel
Germany

Email: kagebotofficial@gmail.com
Website: https://kage-bot.com

2. General Information on Data Processing

We process personal data only where necessary to operate Kage, provide the requested features, communicate with users, process payments or comply with legal obligations.

Processing is carried out in accordance with the General Data Protection Regulation (GDPR). Depending on the specific processing activity, the legal basis may be the performance of a contract or pre-contractual measures, compliance with a legal obligation, consent or legitimate interests.

Personal data is not stored for longer than necessary for the relevant purpose, unless statutory retention obligations or other legal reasons require longer storage.

3. Website Access and Technical Data

When a website is accessed, technical data may be processed to deliver the website to the user's device and protect it against disruptions or attacks.

This may include:

• date and time of access;
• pages and resources requested;
• information about the browser and operating system used;
• technical connection data, including the IP address transmitted;
• information about errors and security events.

This data is processed to provide, maintain and secure the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Technical log data is stored only for as long as necessary for these purposes and is then deleted or, where possible, anonymised, unless further retention is necessary for security or legal reasons.

4. Login Through Discord

Users may sign in through Discord or connect their Discord account to Kage to access certain features.

Depending on the permissions granted and the features used, the following data may be processed:

• Discord user ID;
• Discord username and, where provided, display name;
• profile picture, where provided by Discord and used by Kage;
• information about Discord servers the user can access;
• role and permission information required for the relevant feature;
• information voluntarily provided by the user when using Kage.

This processing allows us to associate users with their accounts, provide access to protected features and deliver the Discord functionality requested by the user.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the requested service. Any additional processing is based on another applicable legal basis, including consent where required.

Discord is involved as a third-party provider in authentication and certain features. Further information about Discord's data processing is available at https://discord.com/privacy.

5. Discord Bot and Modules

When the Kage bot and its modules are used, data necessary for the relevant features may be processed. The specific data depends on the modules enabled and the settings of the relevant Discord server.

This may include:

• Discord server IDs and technical configuration data;
• Discord user, role and channel IDs;
• moderation, administration and automation settings;
• actions initiated by users and necessary status information;
• content and metadata required for specific features, such as tickets or support requests;
• statistics and activity data where relevant analytics features are enabled;
• data entered by users through community or gaming modules.

This data is processed to provide the features enabled by the server operator, save settings, execute automated processes and display statistics.

Server operators are responsible for obtaining the permissions necessary to use Kage on their Discord servers and for informing their members about the use of bots and enabled modules where legally required.

Data is deleted when it is no longer required for its purpose and no statutory retention requirement or other legitimate reason requires further storage. Certain data may remain stored until an account, server configuration or module is deleted where this is necessary to provide the service.

6. Dashboard and Configuration

The Kage dashboard allows users to connect servers, configure features and manage settings. Information entered through the dashboard is processed to save the selected settings and provide the requested functionality.

This may include server configurations, role and channel assignments, module options and other settings entered by the user.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the service.

7. Subscriptions and Payments Through Stripe

Stripe is used as the payment service provider for paid subscriptions.

As part of payment processing, data may be transferred to Stripe and processed there, including:

• information about the selected plan and payment amount;
• transaction details and payment status;
• necessary contact and billing information;
• information required for payment processing, fraud prevention and legal compliance.

Payment-related data is processed to collect payments, manage subscriptions and comply with legal obligations.

The legal basis is Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR where processing is required by law.

Further information about Stripe's data processing is available at https://stripe.com/privacy.

8. Hosting and Technical Service Providers

Kage operates on technical server infrastructure. The hosting provider used is host-unlimited.de.

Personal data may be processed as necessary to provide, maintain and secure the technical infrastructure. This may include technical connection data, system logs and information about errors or security incidents.

The legal basis is Article 6(1)(b) GDPR where processing is necessary for the performance of a contract and, where applicable, Article 6(1)(f) GDPR based on our legitimate interest in operating a secure service.

Where a service provider processes personal data on our behalf, the applicable data protection requirements must be met.

9. Website Statistics

The website may collect statistics about page views and clicks to understand how the website is used and improve its content and usability.

The intended functionality is to evaluate aggregated usage figures without creating names or user profiles for this purpose.

Technical data processed independently for website delivery and security must be distinguished from these statistics.

10. Communication by Email

When you contact us by email, we process your email address, the content of your message and any information you voluntarily provide in order to respond to your enquiry and, where necessary, ask follow-up questions.

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures. Otherwise, processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in responding to enquiries.

The data is deleted once the enquiry has been fully handled, unless statutory retention obligations or other legitimate reasons require further storage.

11. Cookies and Similar Technologies

Kage uses only cookies or similar technologies that are necessary for technical delivery, security, authentication or a feature explicitly requested by the user, where such technologies are used.

Technologies that are not strictly necessary may be used only to the extent permitted by law and, where required, after prior consent.

You can manage cookies through your browser settings and delete cookies already stored. Disabling necessary cookies may prevent certain website or dashboard features from functioning properly.

12. Recipients and International Transfers

Personal data is transferred to third parties only where necessary to provide Kage, process payments, operate the technical infrastructure, respond to enquiries or comply with legal obligations.

Relevant service providers may include Discord, Stripe and technical hosting providers.

When using international providers, processing outside the European Economic Area cannot be ruled out. Such transfers take place only where the requirements of applicable data protection law are met, for example through an adequacy decision or appropriate safeguards under Articles 44 et seq. GDPR.

Further information about the relevant processing is available in the privacy notices of the respective providers.

13. Storage Periods and Deletion

Personal data is deleted when the purpose of processing no longer applies and no statutory retention obligation or other legal basis requires continued storage.

Data required to perform a contract may be stored for the duration of the contract and thereafter where necessary to resolve outstanding matters, establish or defend legal claims, or comply with statutory retention obligations.

Business and accounting records subject to statutory retention requirements are stored for the applicable periods. They are deleted after those periods expire unless another legal basis requires continued storage.

14. Your Rights

Subject to the applicable legal requirements, you have the following rights:

• the right to access your personal data;
• the right to rectification of inaccurate data;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to certain processing activities;
• the right to withdraw consent at any time with effect for the future.

To exercise your rights, contact us at kagebotofficial@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

15. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing, you have the right to object to that processing at any time.

16. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unlawful alteration and unauthorised disclosure.

As data transmission over the internet cannot be guaranteed to be completely secure, absolute security cannot be guaranteed.

17. Changes to This Privacy Policy

This Privacy Policy may be updated if data processing practices, Kage features or legal requirements change.

The version published on the website at the relevant time applies.