This is a translation. If the two versions differ, the French version prevails.
This policy explains what data Noxya stores, why, and how to delete it. Noxya sells no data, shows no ads and uses no tracking tools.
1. Controller
Loxy, a private individual, creator of Noxya (see the legal notice, in French). Contact: contact@cmloxy.fr.
2. Data stored
Noxya only stores what its modules need, and nothing for a module that is disabled on your server.
| Data | Source | Purpose |
|---|---|---|
| Discord IDs (member, server, channels, roles) | Discord | Knowing which member and server each piece of data belongs to |
| Server settings (modules, channels, roles, messages, schedules) | Administrators, through the dashboard | Running the modules the way the server wants |
| XP and level, per server | Calculated by Noxya from your activity (messages and voice time), without keeping messages | Levels, /rang card and leaderboard |
| Birthday (day, month, year if you give it) | You, with the birthday command | Wishing you a happy birthday, showing your age only if you choose to |
| Personal playlists (name, tracks, links) | You | Playing your playlists again |
| Blind test scores (points, games, wins) | Calculated by Noxya | Blind test leaderboards |
| Linked League of Legends account (Riot ID, region) and chosen language | You, if you link your account | Showing your stats without typing your name again |
| Linked Fortnite name | You, if you link it | Showing your Fortnite stats |
| Technical logs (errors, actions taken in the dashboard) | Noxya and its dashboard | Fixing bugs, protecting the service, knowing who changed a setting |
Noxya does not store your email, password, private messages or IP address. Leaderboards, /rang cards and birthday messages are visible to members of the server concerned.
3. Messages and voice channels
Noxya reads messages in channels it can access to count XP, and messages in the music or blind test channel to understand a link, a title or an answer. The content of these messages is not stored. In voice channels, Noxya plays music and counts time spent for XP: it does not listen to or record voices.
4. Dashboard
Dashboard login goes through Discord with the “identify” and “guilds” scopes: Noxya receives your ID, username, avatar and the list of your servers, to know which ones you can manage. It does not receive your email or password. Your session is kept in memory and expires on its own (8 hours by default) or when you log out. A technical session cookie is used for this and does not require consent.
5. Purposes and legal bases
- Providing Noxya’s features (music, levels, birthdays, stats, news): performance of the service requested by the server and by you.
- Data you choose to give (birthday, linked game accounts, playlists): your choice, which you can withdraw at any time by deleting it.
- Logs and security: legitimate interest in running and protecting the service.
6. Hosting and services used
Noxya and its data are hosted by OVH SAS on a server located in France. To work, Noxya contacts external services. It only sends what is needed, never your Discord ID:
- Discord: everything the bot does and dashboard login.
- YouTube, SoundCloud, Spotify, Deezer, Apple Music: the search or link you request, to find and play the track.
- Riot Games: the requested Riot ID, for League of Legends stats.
- Fortnite-API: the requested Fortnite name, for stats and the item shop.
- Mojang, Epic Games, Modrinth, CurseForge: fetching news, with no data about you.
Some of these services are located outside the European Union, notably in the United States. Their own privacy policies apply to the data they receive.
7. Retention and deletion
Data is kept as long as Noxya is used on the server concerned, and deleted on request. You can delete some of it yourself, at any time:
- your birthday: /anniversaire supprimer;
- your playlists: /playlist supprimer;
- your League of Legends account: /lol delier;
- your Fortnite name: /fortnite delier;
- a server’s settings: its administrators, from the dashboard.
The monthly blind test leaderboard resets every month. To delete your XP, your scores or all data of a server after removing Noxya, email contact@cmloxy.fr or ask on the official bots Discord.
8. Security
Noxya’s keys and passwords are stored separately from the code. The dashboard is served over HTTPS with a protected cookie. Server access is restricted to the operator. No system is 100% secure, but access to data is limited to what is strictly necessary.
9. Your rights
Under the GDPR, you can request access to your data, its correction, deletion or portability, restrict its processing or object to it. Email contact@cmloxy.fr with your Discord ID and, if needed, the server concerned. You will get an answer within one month at most. You can also file a complaint with the French data protection authority, the CNIL.
10. Changes
This policy follows Noxya’s evolution. The date at the top of the page is updated with each change. Important changes are announced on the official bots Discord.