Tirly Privacy Policy

01 Who we are #

Tirly (“Tirly”, “we”, “us”) is an independent service available at tirly.xyz and through a Discord application. We are responsible for the personal data processing described in this policy.

Privacy contact: pau@telluscoop.com.

Tirly runs on Discord but is a separate service. It is not affiliated with or operated by Discord Inc. Discord’s use of your data is governed by Discord’s own privacy policy.

02 Summary #

• Tirly detects what is being played in Discord servers where it is installed and turns that into events and community tools.
• Server owners see aggregated figures (for example, “34 members played this game”). Server owners see those totals in their dashboard. Public lists on tirly.xyz show, by default, each person's Discord name next to what they are playing right now, and next to what they are listening to right now.
• By default, Tirly shows live the song you are listening to on Spotify while it plays (“Now playing”), without saving any history. Your history and your music stats only start when you turn music on with /tirly music on or in Settings; with /tirly music off they stop and your history and top genre are deleted. Hide your name with /tirly name hide.
• In servers where Tirly is installed, the bot records which games members play and when.
• By default, your Discord name, avatar, current game and server can appear on public lists (“Playing now”, ranking, public profile). Hide your name at any time with /tirly name hide in Discord or with “Show my name on public lists” in your Tirly profile.
• The first time Tirly sees you play a new game you get +1 XP, even without a Tirly account; event XP and badges require joining events.
• When you claim a badge, Tirly may anchor a verification record on the Stellar test network (testnet). That record is not money and does not include Discord identifiers.
• The product is free for communities and players. A paid API is coming soon; its price will be announced before anything is charged. We do not sell your personal data.
• We do not read your messages, sell your data, or use it for advertising. Tirly does not train AI models with your data; Google processes the music data described in section 8 under its own terms.
• You can view, correct, request a copy of, or delete your data at any time.

03 Who this applies to #

04 What data we process #

What we do not process: the content of your messages, your direct messages, your voice or video, your Discord password, sensitive data such as health, ethnicity, beliefs, or sexual orientation. We do not request your Discord email as a separate field for Tirly accounts.

• Display name: if you set a custom display name in Tirly, we store it (display_name_custom) and show it instead of your Discord name. If you hide your name with /tirly name hide, you appear as Hidden player.
• Sign-in: You sign in to Tirly only with a passkey. Tirly does not use passwords. If you lose access to your passkey, you can recover your account through the Discord account you linked.
• Internal address: To create your account, Tirly assigns an internal address in the form <id>@users.tirly.xyz. It is used only as a technical identifier; we do not send emails to it or to you.

05 How we use your game activity #

This is the most important part of the policy. It works on two levels.

Music. By default, Tirly shows live the song you are listening to on Spotify while it plays (“Now playing”), without saving any history. Your history and your music stats only start when you turn music on with /tirly music on or in Settings; with /tirly music off they stop and your history and top genre are deleted. Once on, Tirly records the songs you share from Spotify on Discord (track, artist, when and in which server), counts your listening time for XP and stats, may show them on your profile and in public tops under the same name rules as games (you can appear as Hidden player with /tirly name hide), Turning it off deletes your listening history and your top genre. If you ask for recommendations, we send Gemini the ordered list of your most-played artists and songs (without your name or your Discord) to suggest music. This only happens with music on. Stored listening of people who never turned music on is not shown anywhere. /tirly delete removes everything else (section 10).

Music genre. Music genre is classified per artist with AI (Google Gemini); we do not send who listens. Whether or not your music is on, when Tirly sees an artist it does not know yet, it sends only the artist name to Google’s Gemini API, stores the genre in a shared artist catalogue and never asks about that artist again. Until then the artist shows as “other”.

Retention of music records. Individual listening records are kept for at most 12 months, counted in whole months; the purge runs monthly. After that they are folded into anonymous aggregate statistics (monthly totals per artist and track, with no personal data; groups of fewer than three people are grouped as “others”), and the individual records are deleted.

Tirly annual summary. Before anonymizing, Tirly creates a “Tirly annual summary” for each person, using only their own data: the most-played game (in hours), the most-listened genre and the most-played song, plus the year. It is stored as a summary linked to your account (three values and the year), not as history. The game item is created unless you turned presence off; the genre and song are created only if music is on. It is not created for people who deleted their data, it is visible only on your profile unless you share it, and /tirly delete deletes it.

If you are a member of a server with Tirly and have not signed in to Tirly

• Tirly receives from Discord the game activity you already share in that server.
• We use it for aggregated server statistics and for public lists: by default your Discord name, avatar, current game and server can appear in “Playing now” and the ranking.
• The first time Tirly sees you play a new game you receive +1 XP, which places you in the ranking.
• Server owners see totals in their dashboard; anyone can see the public lists on tirly.xyz.
• Session-level activity records not tied to a Tirly account are kept for no more than 30 days; ranking XP is kept while Tirly is installed in one of your servers, or until you ask us to delete it.

If you signed in to Tirly

• When you join an event, we use your game activity during that event to help verify your participation.
• From that participation we calculate your XP, rank, badges, and ranking position.
• We remind you of this when you join each event.

How to stop Tirly from seeing your activity

• In Discord, turn off activity sharing globally or for a specific server. Tirly only receives what Discord shares.
• Hide your name but keep anonymous stats: /tirly name hide (show it again with /tirly name show). Stop being tracked in a server: /tirly presence off. Delete your data (see section 10): /tirly delete.
• Turn music off at any time with /tirly music off or the “Show music on my profile” switch in Settings: your listening history and top genre are deleted.
• After /tirly delete, Tirly does not record you again in any server unless you opt in again yourself, for example with /tirly presence on or by accepting consent again.
• Ask us to exclude you at pau@telluscoop.com or from your profile settings in Tirly.

06 Why we use the data and on what basis #

We do not make automated decisions that produce legal effects about you.

07 What other people can see #

• Server owners and moderators: aggregated statistics for their server, and the list of players who joined their events, with check-in and participation for those events.
• Other players and visitors: By default: your name, avatar, current game, server, rank, badges and ranking position. If you hide your name, those lists show you as Hidden player.
• On Discord: messages the bot posts about an event (announcement, results) are visible to anyone who can see that channel.

08 Who we share data with #

• Service providers that host Tirly and store data for us, currently including Vercel (hosting) and Supabase (database and auth). They process data only on our behalf and under confidentiality obligations.
• Google (Gemini API), only for music features. To classify an artist’s genre we send only the artist name — never who listens, and regardless of your music setting. To suggest music, only after you turn music on and only when you ask for recommendations, we send the ordered list of your most-played artists and songs, without your name, Discord ID or email. On Google’s free tier, Google may use these requests to provide, improve and develop its products and models, and human reviewers may read them; see Google’s Gemini API terms.
• Discord, to the extent the bot publishes messages and events on the platform.
• Authorities, when a valid law or court order requires it.

We do not sell or rent your data. We do not give it to advertising networks or data brokers. Tirly does not use it to train AI models; Google processes the music data described in section 8 under its own terms. We do not contact you outside Discord using data obtained from Discord.

09 Transfers outside Chile #

Our providers may host data outside Chile, including in the United States and other regions where they operate. In those cases we require by contract a level of protection consistent with this policy.

10 How long we keep the data #

Listening recorded before version 1.2 was converted into anonymous aggregated statistics (monthly totals per artist and track, grouped when fewer than three people listened), and the individual records were deleted.

If you delete your account, we delete or anonymize your personal data within 30 days, except where the law requires us to keep it.

Deleting your data from Discord (/tirly delete, with a confirmation step)

This acts immediately: the 30 days above apply only to deleting your account.

• Deleted: your game-activity and music-listening history, your server-membership records, your XP and rank progress, your event attendance and results, your music recommendations, your music consent, your Tirly annual summary, your answers to forms and, if you have no Tirly account, your linked Stellar wallet record. This applies in every server where Tirly is installed.
• Cleared: the profile data Tirly took from Discord (your display name, avatar and Discord handle) and your Discord membership flags. If you have no Tirly account, your username and your Discord identifier on your player profile are also cleared or replaced. If you have a Tirly account, your username is kept so the account keeps working, unless it was the same as your Discord handle, in which case it is replaced by a neutral one (player-xxxx) that you can edit again; your custom display name is cleared too, and your public profile is hidden and shows no Discord data until you turn it on again from your panel.
• Kept as proof: only your Discord ID and the date of the request. We keep it while the bot operates so Tirly does not record you again in any server. It is erased as soon as you run /tirly presence on to opt in again; opting in again does not restore anything that was deleted.
• Kept: your Tirly account, if you have one (sign-in methods and profile settings). Your custom name is cleared; you can choose a new one in My profile › Settings. You manage the account itself there too; to delete the account, write to pau@telluscoop.com. Aggregated statistics that do not identify anyone are kept.
• Cannot be erased: badges and other data already written to a public blockchain. We delete the off-chain data linked to them.
• Irreversible: once you confirm, the deletion cannot be undone.
• After /tirly delete, Tirly does not record you again in any server unless you opt in again yourself, for example with /tirly presence on or by accepting consent again. Music stays off until you also run /tirly music on.

11 Your rights #

You may, at any time and free of charge:

• Access the data we hold about you and obtain a copy.
• Correct inaccurate or outdated data.
• Delete your data (with /tirly delete, see section 10) and your account.
• Object to a processing, for example to your activity being used in statistics.
• Request portability of your data in a commonly used format.
• Withdraw your consent, without affecting processing already carried out lawfully.

How to exercise them: from My profile › Settings you can edit your profile and your custom name; from My profile you can also stop appearing on public lists; from Discord, /tirly delete deletes your activity data (section 10). To delete your account, write to pau@telluscoop.com. To request a copy of your data, write to pau@telluscoop.com; we will answer within 30 days. You can also write to us for any other request, and we will respond within the time required by applicable law.

If you believe we are not respecting your rights, you may complain to the Chilean personal-data authority or to the competent courts.

12 Children #

Tirly is not directed at children under 13, or at people who do not meet Discord’s minimum age in their country. If you are under 18, you should use Tirly with permission from a parent or guardian. If we learn that we process data of someone who does not meet these conditions, we will delete it.

13 Security #

We protect data with reasonable technical and organizational measures: encryption in transit, access limited to people who need it, and access logging where appropriate. Data at rest is protected by our hosting and database providers’ security controls. If a security breach affects your data, we will notify affected people, Discord, and the authority when required.

14 Cookies and analytics #

We use only cookies (or similar storage) needed to keep you signed in and remember preferences such as theme. We do not use advertising cookies. Tirly uses Vercel Web Analytics (cookieless, aggregated) on tirly.xyz to understand aggregate page traffic (for example, visits and which “Add to Discord” link was clicked). That tool is configured not to use advertising cookies; you can limit tracking with browser controls and Do Not Track where supported.

15 On-chain records (Stellar testnet) #

When you claim a badge, Tirly may write a verification record on the Stellar test network (testnet) so the badge cannot be quietly rewritten. Testnet records have no monetary value and may be reset by the network. That on-chain record is a participation anchor: it is not money, has no cash value, and does not publish your Discord user ID. Claiming and minting are opt-in product actions. If minting fails, your in-app badge and XP still follow the Privacy Policy retention rules above. Public blockchain data generally cannot be erased afterwards: badges and other data already written to a public blockchain cannot be erased. If you delete your Tirly account or use /tirly delete, we delete or anonymize the off-chain data linked to them, as described in section 10.

16 Changes to this policy #

If we change this policy in a material way, we will announce it on tirly.xyz and, when appropriate, inside Discord, at least 14 days in advance. The effective date and version appear at the top of this document.