WhoBot Privacy Policy
Last updated: 2 October 2026
WhoBot is made by Kitchen Labs. It's a Discord bot that quotes a random old message from a channel in your server, and everyone guesses who wrote it. This page says, in plain English, what it reads, what it keeps, and how to remove it.
The short version
- WhoBot reads messages only in the one channel a server picks with
/setup, and only when someone starts a round with/guesswho. - It never stores the text of any message.
- It stores Discord ids (numbers) and scores: which channel your server picked, which messages have been played this session, who wrote the one in play, who guessed, and points.
/endgamedeletes everything it stored for your server.- No ads, no analytics, no tracking, no AI.
What WhoBot reads
Messages in the chosen channel, when a round starts. When someone runs /guesswho, WhoBot asks Discord for up to a few pages of messages (100 per page) from the channel your server picked with /setup, at random points in its history. From those it picks one message of five words or more, written by a person rather than a bot, that hasn't been played yet this session. It never reads any other channel, never reads messages in the background, and doesn't read anything between rounds.
The message it picked. Its text is posted in your server as the quote for the round. The text is sent straight from Discord into that post; it isn't saved anywhere by WhoBot.
/setup check. When you run /setup, WhoBot reads one message from the chosen channel only to check that it is allowed to read it.
Commands and picks. When someone uses a WhoBot command, presses its button or picks someone in its menu, Discord sends WhoBot that person's Discord id and the server's id, so it knows who guessed and in which server.
What WhoBot stores
On our database (hosted by Supabase), for each server that uses it:
- the id of the channel picked with
/setup; - for each round this session: the id of the message used, the id of its channel, the id of the person who wrote it (so a guess can be checked), whether the round was won, revealed or timed out, the id of the winner, and where the round was posted;
- for each guess: who guessed and whether it was right (each player gets one guess per round);
- scores: a player's id and their points.
These are numbers Discord assigns, plus point totals. WhoBot never stores message text, usernames, nicknames or avatars.
How long, and how to remove it
Everything stays until someone runs /endgame in your server, which shows the final scores and then deletes all of the above for that server at once. (By default only people with the Manage Server permission can run /setup and /endgame; server admins can change that in Server Settings → Integrations → WhoBot.)
To remove the bot, run /endgame, then kick WhoBot from your server (Server Settings → Integrations → WhoBot → Remove). If the bot was removed without /endgame, ask us through our contact page with your server's name and we'll delete its data.
Who else is involved
- Discord delivers commands to WhoBot and holds your messages; its own privacy policy applies.
- Vercel hosts WhoBot and this website. Like any host it keeps short-lived request logs (such as the time, the address requested and an IP address). WhoBot's own error messages there never include message text.
- Supabase hosts the database described above.
WhoBot doesn't use AI services, and doesn't sell or share data with anyone.
The website
The WhoBot website, including its demo round, runs in your browser with made-up messages. It has no accounts, no analytics and no tracking cookies. If you choose light or dark mode, your browser remembers that choice locally.
Children
WhoBot follows Discord's age rules and isn't directed at children under 13.
Changes and contact
If this policy changes, we'll update the date above. Questions? Send them through our contact page.