Nolvyn

Privacy Policy

Last updated 30 October 2026

This policy explains what personal data Nolvyn (the Discord bot, this website and the dashboard) collects, why, how long it is kept, and the rights you have. We collect only what the features need. We do not sell data, show ads, or use analytics or tracking tools.

Who is responsible

Nolvyn is operated by Adrian Hruška, based in the Slovak Republic, who is the data controller under the EU General Data Protection Regulation (GDPR). Contact for anything in this policy: [email protected].

What we collect

When you sign in to the dashboard

  • Your Discord user ID, username, display name and avatar, received from Discord when you sign in.
  • The list of Discord servers you belong to and your permissions in them, used to show the servers you may manage. It is cached for about one minute and not stored permanently.
  • Discord sign-in tokens, stored encrypted, so the dashboard can check your servers. We only request the identify and guilds scopes: we cannot read your messages or act as you.
  • A session record (a hashed session identifier and your browser's user-agent string) so you stay signed in.
  • An activity log of changes you make in the dashboard (for example "updated Moderation settings"), shown to the server's managers.

When Nolvyn is in a Discord server you use

Server managers choose which modules are on. Depending on that, Nolvyn stores:

  • Server details: server ID, name, icon, owner ID, member count and the server's Nolvyn settings.
  • Moderation: moderation cases (your user ID and tag, the moderator, the action, the reason and the time), including warnings and actions taken automatically by AutoMod.
  • Leveling and Voice Tracking: your user ID, username, avatar, XP, message count and time spent in voice channels.
  • Tickets: a text transcript of ticket channels when they close, including the messages and attachment links in them.
  • Giveaways and reminders: giveaway entries, and the text of reminders you set (deleted 7 days after delivery).
  • Server statistics: daily totals of messages, joins and leaves. These are counts only, not linked to any person.

Message content. When AutoMod is on, Nolvyn reads new messages to check them against the server's rules and keeps the last few messages per member in memory for up to about two minutes to detect spam. Message content is not stored in our database, except in ticket transcripts and in AutoMod reports that Nolvyn posts to the server's own log channel.

When you visit the website

Like any web server, ours processes your IP address and request details to deliver pages and to limit abuse (rate limiting). These appear in server logs that rotate automatically and are kept for a short time (typically days).

Why we use it (legal bases)

  • To provide the service you or your server requested (sign-in, the dashboard, bot features): performance of a contract, GDPR Art. 6(1)(b).
  • To run the community features server managers turn on (moderation, leveling, tickets and so on) and to keep the service secure and working (logs, rate limits, the activity log): our and the server's legitimate interests, Art. 6(1)(f).

We do not use your data for advertising, profiling or automated decisions with legal effects.

Cookies

We use only cookies that are strictly necessary, so we do not show a cookie banner:

  • __Host-nexora_session: keeps you signed in to the dashboard. Expires after 14 days or when you sign out.
  • nexora_oauth_state: protects the Discord sign-in against forgery. Expires after 10 minutes.

Who we share it with

We do not sell personal data. It is processed by these providers, only as needed to run Nolvyn:

  • Discord: the platform Nolvyn runs on. Avatars and server icons on this website load from Discord's servers.
  • Cloudflare: delivers this website securely (network and DDoS protection).
  • Our server hosting provider: stores the database and runs the bot.

Discord and Cloudflare are based in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Social notification feeds (YouTube, Twitch, RSS) are fetched by our server; no personal data is sent to them. We disclose data to authorities only where the law requires it.

How long we keep it

  • Sessions: until you sign out, or 14 days.
  • Dashboard activity log: 365 days.
  • Delivered reminders: 7 days.
  • Daily server statistics: about 13 months.
  • Your dashboard profile, and server data such as moderation cases, levels, voice time and ticket transcripts: while the server uses Nolvyn. If Nolvyn is removed from a server, its settings are kept so they return if it is added again. Ask us and we will delete them.
  • Server logs and database backups: a short rolling period (backups are deleted after 14 days).

Your rights

Under the GDPR you can ask us to:

  • give you a copy of your data (access and portability),
  • correct it (rectification),
  • delete it (erasure), or limit how it is used (restriction),
  • stop using it where we rely on legitimate interests (objection).

Email [email protected] from, or mentioning, your Discord account so we can verify the request. We reply within one month. Deleting moderation records a server relies on may need that server's managers to agree, and we will tell you if so.

You can also complain to a supervisory authority. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

Security

The website uses HTTPS only. Discord sign-in tokens are encrypted, session identifiers are stored only as hashes, and the database and cache are not reachable from the internet. No system is perfectly secure; if a breach affects your data we will notify you and the authority as the GDPR requires.

Children

Nolvyn is for people who may use Discord under Discord's Terms of Service and the law of their country. We do not knowingly collect data from anyone below that age.

Changes

If this policy changes, we update this page and the date above, and announce significant changes in the dashboard. See also our Terms of Service.

Contact

Adrian Hruška, the Slovak Republic: [email protected]