This is a translation. If the two versions differ, the French version prevails.
This policy explains what data Lunaya stores, why, and how to delete it. Lunaya sells no data, shows no ads and uses no tracking tools.
1. Controller
Loxy, a private individual, creator of Lunaya (see the legal notice, in French). Contact: contact@cmloxy.fr. The administrators of each server decide which modules are enabled and how they are used there.
2. Data stored
Lunaya only stores what its modules need, and nothing for a module that is disabled on your server.
| Data | Source | Purpose |
|---|---|---|
| Discord IDs (member, server, channels, roles, messages) | Discord | Knowing which member, server and message each piece of data belongs to |
| Server settings (modules, channels, roles, texts, embeds, scheduled messages, polls) | Administrators, through the dashboard | Running the modules the way the server wants |
| Warnings: reason, moderator, date | Server moderators | Moderation history of the server |
| Auto-moderation detections: member, channel, detected word, action taken | Calculated by the bot | Moderation and its statistics (the latest detections only) |
| Tickets: creator, ticket channel, date, staff member handling it | The member who opens the ticket | Following open tickets (the conversation itself stays in Discord) |
| Public support requests: title, description, steps, environment, author, status | The member who posts the request | Handling and following the request |
| Suggestions: title, description, category, author, status, attachment name | The member who suggests | Votes and follow-up of suggestions |
| Highlights: message excerpt, author name, links | Messages chosen by the community or the staff | Showing the highlights wall |
| Welcome language chosen (FR or EN) | The member, with the welcome button | Giving the right language role |
| AFK status: reason, original nickname, voice channel | The member who sets AFK | Showing the AFK status and restoring the nickname |
| Temporary voice channels: owner of each channel | Calculated by the bot | Letting the owner manage their channel, then deleting it |
| Token of your own bot (encrypted) | The administrator who connects it | Running the modules under the server’s own bot |
| Birthday (day, month, year if you give it) | You, with the birthday command | Wishing you a happy birthday, showing your age only if you choose to |
| Personal playlists (name, tracks, links) | You | Playing your playlists again |
| Blind test scores (points, games, wins) | Calculated by the bot | Blind test leaderboards |
| Technical logs (errors, actions taken in the dashboard) | The bot and its dashboard | Fixing bugs, protecting the service, knowing who changed a setting |
Lunaya does not store your email, password, private messages or IP address. Suggestions, highlights, support requests and birthday messages are visible to members of the server concerned.
3. Messages and logs
Lunaya reads messages in channels it can access for auto-moderation and custom commands. The content of these messages is not stored, except the excerpt of a message chosen as a highlight.
If administrators enable server logs, Lunaya posts the chosen events in a private channel of that server: members joining and leaving, roles, nicknames, sanctions, voice activity, and the content of edited or deleted messages. These logs stay in Discord, under the administrators’ control.
In voice channels, Lunaya plays music: it does not listen to or record voices.
4. Dashboard
Dashboard login goes through Discord with the “identify” and “guilds” scopes: Lunaya receives your ID, username, avatar and the list of your servers, to know which ones you can manage. It does not receive your email or password. Your session is kept in memory and expires on its own (8 hours by default) or when you log out. A technical session cookie is used for this and does not require consent.
5. Purposes and legal bases
- Providing Lunaya’s features (welcome, tickets, suggestions, roles, announcements, alerts…): performance of the service requested by the server and by you.
- Moderation and server logs: the server’s legitimate interest in protecting itself, decided by its administrators.
- Data you choose to give (AFK status, suggestions, support requests, birthday, playlists): your choice.
- Technical logs and security: legitimate interest in running and protecting the service.
6. Hosting and services used
Lunaya and its data are hosted by OVH SAS on a server located in France. To work, Lunaya contacts external services. It only sends what is needed, never your Discord ID:
- Discord: everything the bot does and dashboard login.
- Twitch, YouTube, TikTok, Spotify: the public accounts that administrators want to follow, for alerts.
- YouTube, SoundCloud, Spotify, Deezer, Apple Music: the search or link you request, to find and play the track.
Some of these services are located outside the European Union, notably in the United States. Their own privacy policies apply to the data they receive.
7. Retention and deletion
Data is kept as long as Lunaya is used on the server concerned, and deleted on request. Some data can be deleted directly:
- your AFK status: removed as soon as you send a message, or with the AFK command;
- a temporary voice channel: deleted when it becomes empty;
- warnings, suggestions, tickets, settings and the token of a custom bot: by the server’s administrators;
- your birthday: /anniversaire supprimer;
- your playlists: /playlist supprimer;
For anything else, or to delete all data of a server after removing Lunaya, email contact@cmloxy.fr or ask on the official bots Discord.
8. Security
Lunaya’s keys and passwords are stored separately from the code. Custom bot tokens are encrypted. The dashboard is served over HTTPS with a protected cookie. Server access is restricted to the operator. No system is 100% secure, but access to data is limited to what is strictly necessary.
9. Your rights
Under the GDPR, you can request access to your data, its correction, deletion or portability, restrict its processing or object to it. Email contact@cmloxy.fr with your Discord ID and, if needed, the server concerned. You will get an answer within one month at most. For a sanction or a log on a server, you can also contact its administrators. You can file a complaint with the French data protection authority, the CNIL.
10. Changes
This policy follows Lunaya’s evolution. The date at the top of the page is updated with each change. Important changes are announced on the official bots Discord.