Last updated 1 November 2026

Privacy Policy

Grindhold is a game you play in Discord, made by AY Games. This policy explains what we keep about you when you play, why we keep it, who sees it, and what you can do about it. It covers the Grindhold bot and this website, grindhold.aygames.gg.

Who we are

Grindhold is run by AY Games, which decides what data the game keeps and how it's used. You can reach us at support@aygames.gg.

What we keep, and why

When you play

What	Why
Your Discord user id	To know it's you, and keep your progress under it
The name Discord shows for you: your display name, or your username if you haven't set one	So the game can name you to other players: the village they raid, or who raided theirs. It's kept up to date each time you use a command
Your progress: coins, your bank, gems, items, level, streak, village, pets, army, your heroes and how far your adventure has gone, the quests you've claimed, your brew on the fire, what's on your workbench, and what you've unlocked	It's the game
The history of what you've done in the game: each action, and every coin, gem and item it moved, in or out of your bank too	To keep the game fair, find cheating, and fix mistakes
Battles you fight or defend: the armies, a snapshot of the village each was fought on, and the result	For replays, defense logs and revenge
Your trades: who you traded with, what each of you offered and got, and when	To carry out the trade, and to keep trading fair
Your orders on the market: what each is for, its price, what it holds and what was taken from it, and when	To run the market, and to tell you what your orders sold
Your shows with /perform: the tale you told, the crowd, the presses and what they paid, and when	To run the show, and to know when your next one can start
Each vote for the game you claim with /vote: the site, when you voted there and could vote again, as the site told us, and what it paid	To pay each vote once, count your votes this month, and remind you when you can vote again
The Veilkeeper's requests you claim with /emissary: which ones, the Otherhaven account that claimed them, and when you linked or unlinked it	To pay each one once
Gifts from our team: what each gave you, the message that came with it, and when you saw it	To give it to you once, and tell you about it after your next command
Your Lord and their family: the looks you made or changed them with, and the names you gave your Lord, your spouse and your children	To draw your Lord and their family in your Great Hall, on your village and on your profile
The ids of the Discord servers you play in, and when you last played in each	For what happens between players in a server, such as /rob
Reports you send with /report, exactly as you wrote them	To look into what you tell us about
A command's interaction token, briefly, while a battle's replay is drawn	To post the replay in the right message. It's deleted once the replay is posted, or after 15 minutes

When you buy gems

What	Why
Each purchase: Tebex's transaction id, the pack, the gems it brought, the price and currency Tebex charged, when it reached us, and when its gems were added or taken back	To add the gems you paid for, once, to take them back after a refund, and to help you if something goes wrong
Gems owed after a refund, when some were already spent	To settle them from gems you get later

Tebex sells the gems for us: it takes your payment, and your name, email address, billing details and card stay with Tebex, under its own privacy policy. We never see your card. Buy sends Tebex your Discord user id and the pack with your checkout, so the gems go to your account, and your IP address, which Tebex asks a store's server for, so that it judges the buyer and not the server. Tebex's message to us about your payment names you, with your email address, IP address and country: we keep it only until the bot has checked it and added or taken back your gems, normally a few seconds and never more than a week, and then delete it. We don't keep your name, email or address.

Discord sends your username, display name and avatar with each command, so the bot can show you. We keep the one name Discord shows for you, as the table says. Your avatar is used for that reply only, and we don't store it.

Logs

Our servers keep short-lived logs, to keep the game running and find problems. For each command, a log line says which command it was, your Discord user id, the server's id, whether it worked and how long it took. For this website, a log line says which page was asked for and whether it worked, and never includes your IP address. To stop anyone flooding the login and the dashboard, the website counts their requests from each IP address for a minute, in memory, without writing the address down. Old log lines are overwritten automatically as new ones come in.

On this website

Looking around this website sets no cookies. It uses no analytics or trackers, and it loads nothing from other companies: its fonts and pictures come from our own server.

If you log in with Discord to see your dashboard:

• Discord tells us your user id, username, display name and avatar, and nothing else. We only ask for Discord's identify permission, so we never see your email address or your servers.
• We keep those in a cookie in your browser, so the dashboard knows it's you. It lasts 30 days from your last visit, or until you log out. We don't store any of it on our side, and we don't keep the access token Discord gives us once you're logged in.
• While you log in, a second, short-lived cookie checks that Discord's answer is the one you asked for. It's removed as soon as you're in.
• Your dashboard shows your avatar from Discord's own image server, which sees that your browser asked for it.
• The dashboard shows only your own data. The one thing it changes in the game is where things stand in your village and your Pet Garden, when you move them there. Each move is kept in your history, like one made in Discord.

What we don't collect

• Your messages. The bot doesn't have access to message content: it only sees the commands you send it.
• Your email address, real name, location, or payment details, even when you buy gems: Tebex keeps those, and the message it sends us about your payment, which names you, is deleted as soon as the bot has read it. If you email us, we have your address for that conversation only.
• Anything for advertising. There are no ads and no trackers, in the game or on this site.

The bot doesn't send direct messages.

Who sees your data

• Other players see your village, your Pet Garden, your battles against them, and your name as Discord shows it, when they look in Discord. For example, /village with your name shows them your village.
• The player you trade with sees your name and what you offer, and so does anyone in the channel where you trade: the trade happens there. On the market, orders show no names: other players see what an order is for and its price, never who posted it.
• Anyone can see the leaderboards, which show your name as Discord shows it and the title you wear, beside your level, your trophies, your coins and how many times you've done each grind. In Discord, /leaderboard shows everyone's, and each server's for the players who played there in the last 30 days. On this website, the leaderboard shows the top 50 of everyone's. You can turn the leaderboards off for yourself with /settings in Discord, and you're on none of them.
• Our team sees what's needed to run the game and help players. Reports are posted to a private channel in our team's Discord server, so we can act on them.
• Otherhaven, our other game, gets your Discord user id if you press Link in /emissary, each time you open it, try again or claim there after that, when you press Unlink, and when you delete your data if you were linked, so it stops sharing. It tells us your account's number, which we keep so each request pays once, and your character's name, skill levels, quests finished and boss kills, which we show you and don't keep. Nothing goes to Otherhaven until you press Link, and Unlink stops it at any time.
• Our service providers handle data only to provide their service to us: Discord, the platform the game runs on (its own privacy policy covers your Discord account), PebbleHost, whose server in Montreal, Canada, stores the game's data, Tebex, which sells the gems you buy and gets your Discord user id and IP address with your checkout, and Discordify and Top.gg, the bot lists you vote on, each of which gets your Discord user id when you claim a vote there with /vote, so it can tell us whether you voted.

We don't sell or rent your data, and we don't share it with anyone for advertising. Beyond the providers above, we'd only hand it over if the law requires us to.

Where it's kept, and how it's protected

The game's data is stored on a server in Montreal, Canada. Only our team can reach the server, the database can't be reached from the internet, and connections to Discord and to this website are encrypted. Backups are kept on the same server for 48 hours.

How long we keep it

• Your progress and history: for as long as you play. If you stop, they stay, so you can pick up where you left off, until you delete them.
• When you use /delete-my-data: everything tied to you is deleted at once, and it's gone from backups within 48 hours. In other players' battle logs you're shown as "a deleted player". A trade still open is cancelled, and your open orders close, what they held going with the rest. A trade you made, or an order someone took from, stays in the other player's history, with you as "a deleted player".
• Which Otherhaven account has claimed which of the Veilkeeper's requests stays after /delete-my-data, tied to nothing of yours here, so a request is paid once however an account comes back.
• If you were banned, we keep your Discord user id and the reason for the ban, so deleting your data can't be used to get around it.
• Your purchases in the store: deleting your data takes your Discord user id off them, and the gems go with the rest, and so does any message of Tebex's about them still kept. The purchases themselves stay, as "a deleted player"'s, because Tebex's records of your payments point at them.
• Logs: until they're overwritten, which usually takes days.
• Interaction tokens: until the replay is posted, and never more than 15 minutes.

Your choices and rights

• See your data. /profile, /inventory, /village, /pets, /army and /adventure show your progress, and so does your dashboard on this website. For a full copy of what we keep about you, email us.
• Leave the leaderboards. /settings in Discord takes you off every leaderboard, in Discord and on this website.
• Delete your data. Use /delete-my-data in Discord, or email us.
• Correct your data. If something's wrong, tell us with /report or by email.
• Object or complain. Write to us first, and we'll do our best to sort it out. You can also complain to the data protection authority where you live.

We answer requests within 30 days. We may ask you to confirm the request from your Discord account, so we know it's really you.

Children

To play, you must meet Discord's minimum age where you live: 13 in most countries, and older in some. We don't knowingly keep data about anyone younger. If you think a child under that age is playing, email us and we'll delete their data.

Changes to this policy

If we change this policy, we'll post the new version on this page with its date at the top.

Contact

AY Games. Email support@aygames.gg, ask in our support server, or use /report in Discord.