Privacy Policy

The short version

Dexy is a bot for Discord and Fluxer, run by the Dexy team. It stores numbers and IDs, not what people say: the text of messages is never saved. What Dexy stores is used only to run its features for the server it came from (and, for the Economy, your own profile). We don't sell data, show ads or use trackers. You can anonymise or delete your data yourself at any time, for free.

Who we are

“Dexy”, “we” and “us” mean the Dexy team, who run the Dexy bots on Discord and Fluxer and the website at dexy.gg. Questions or requests about your data: email support@dexy.gg or ask in our support server.

What Dexy stores

Only for the servers Dexy is in, and only for the modules a server switches on:

• Activity counts: per member, channel and hour, how many messages were sent and how long was spent in voice (and in which voice state, such as muted). Counted, never read.
• Online status time: how long members were online, idle or on Do Not Disturb, and server totals every few minutes.
• Joins and leaves: when they happened, which invite and inviter brought a member in, and signals used to spot fake joins (such as how new the account is).
• Member and channel details: IDs, usernames, nicknames, roles, join dates, whether an account is a bot, and channel names, so stats can be filtered and labelled.
• Invites: codes, who made them and how often they were used.
• Moderation cases: each warning, timeout, kick and ban made with Dexy (or by its auto-mod): who it was about, who did it, the reason given and when.
• Roles Dexy hands out: a server's auto roles, reaction-role messages, temporary roles with their end time, and (if the server keeps roles for people who leave) the roles to give back when they return.
• Economy profile: your Dexy coins, bank, items, cosmetics, play XP and progress, a record of your transactions (rewards, purchases, gifts and trades), your “About me” and card colours. This profile is global: it follows you to every server where the Economy is on, on that platform.
• Server settings: the options admins choose, counters, welcome images and backgrounds they upload, and a log of who changed which setting.

What Dexy reads but doesn't keep

• Message text: Dexy needs to read messages to see commands typed with the prefix, and, where a server turns them on, to check auto-mod rules and post message logs. The text is checked in memory and dropped. Nothing Dexy writes to its database, cache or disk contains what anyone wrote, with two narrow exceptions below.
• Auto-mod: to spot the same message sent again and again, Dexy keeps a one-way fingerprint (a hash) of the text for a few minutes, which can't be turned back into the text. For spam bursts it remembers recent message IDs, not their text.
• Avatars and names are used to draw cards (welcome images, stats and profile cards) and aren't stored with the picture.
• Dexy doesn't store direct messages between people, or what games or apps people are playing.

Event logs

A server can turn on Dexy's Logging module and pick log channels. Nothing is posted until it does, and posts only go to that server's own channels. With a message log on:

• A deleted message's text, author and attachment names are posted to the log channel, taken from the platform's own notice of the deletion.
• To show what an edited message said before, Dexy keeps that server's recent messages in memory: at most an hour, at most 100 per channel, and only while the message log is on. They're never written to a database or disk, are dropped within a minute of the log being turned off, and are gone whenever Dexy restarts.
• Channels, roles and members a server leaves out of its logs, and bots by default, aren't kept at all.

Other logs (joins and leaves, role, channel and voice changes, bans and kicks) post details the server already shows its moderators. A log post is a message in that server: its admins decide who can read it and can delete it.

Appeals

If a server takes appeals, you can ask its moderators to look at one of your cases again on its appeal page, after logging in. Dexy stores your appeal (which case, your answers and the decision) and shows it to that server's moderators only. Your answers are kept while the appeal is open and removed 90 days after the decision; the decision stays with the case.

The website and dashboard

• Logging in uses Discord's or Fluxer's own login. We ask only for your account's basic profile and the list of servers you're in (the identify and guilds scopes), to show the servers you can manage. We never see your password and can't post as you.
• Your login is kept in an encrypted, http-only cookie for up to 7 days, or until you log out. Short-lived copies of your server list and of server data are cached to keep pages fast.
• Small preferences (dark or light theme, Discord or Fluxer, a few dashboard view choices) are saved in your browser only.
• No analytics, advertising or tracking scripts, and no third-party cookies.

Why we use it

To provide the features a server switched on (statistics, counters, moderation, logs, welcome messages, roles and the Economy), to keep Dexy safe from abuse (rate limits, spam and raid protection), and to fix problems. A server adding Dexy and turning modules on is what lets Dexy process its members' data for those features. We don't use it for anything else, and we don't build profiles of people across servers, apart from your own Economy profile, which you can see and delete.

Legal bases

Where laws such as the GDPR apply, we process data on these grounds:

• Legitimate interests: running the features a server's admins switched on for their community, and keeping Dexy secure and free of abuse. Anonymise and delete let you object at any time.
• Providing a service you asked for: your Economy profile, the dashboard you log in to, appeals you send.
• Legal obligations: when the law requires us to keep or disclose something.

Where it's processed

Dexy runs on servers we rent from a hosting provider, which may be in a different country from yours. Wherever that is, we protect data as this policy describes, and where the law asks for it we use the safeguards it requires for data moving between countries.

Who can see it

• Stats are shown inside the server they belong to, following that server's access settings. The dashboard can be public, members-only or admin-only, and details about individual members are never shown to people outside the server.
• Moderation cases and appeals are shown to that server's moderators, and a case to the member it's about.
• Economy leaderboards show your name and net worth: the server board to that server, the global board everywhere Dexy's Economy is on. Anonymise yourself to leave them.
• We share data with no one else. The only services that handle it for us are our hosting provider (the servers and databases Dexy runs on), Discord and Fluxer themselves (through their normal bot and login features), our email provider when you write to us. Each only gets what it needs to do that job.
• We'll disclose data only when the law requires it (for example a valid court order) or to protect people from serious harm, and only what's needed.
• We don't sell or “share” personal information as US state laws (such as California's) define those words, and we don't use it for targeted advertising.

How long it's kept

Statistics, cases and Economy profiles are kept while Dexy is in use, so servers can look back over time. Server admins can hide members, channels and bots from every stat at any time. If Dexy leaves a server, that server's data is kept in case it's added back; ask us to delete it. Appeal answers go 90 days after the decision, message-log memory within an hour, caches within hours, and backups are replaced regularly. Dexy also keeps short-lived technical logs (errors and events, with IDs but not message text) to find and fix problems; they're deleted after a few weeks.

Anonymise yourself

Run d!privacy anonymise on (or /privacy anonymise on Discord) in any server or in a DM with Dexy, or switch on Anonymise me under Your data on your dashboard profile. Then, in every server:

• Your stored stats (message counts, voice and status time, joins and leaves, and the invites you made) and your moderation cases move to a random ID, and new activity is recorded under that ID.
• Leaderboards, charts and invite reports show you as “Anonymous member”, and nobody can look up your stats. Server totals stay the same.
• Dexy's member list keeps your roles but not your name or avatar, and your account's creation date is cut to the day.
• Dexy privately keeps which random ID is yours, so turning anonymise off moves your stats back. It's never shown to anyone.
• You can turn it on or off once every 24 hours.

Delete your data

Run d!privacy delete (or /privacy delete on Discord) and confirm, or use Delete my data on your dashboard profile. In every server, this removes:

• Your activity counts (messages, voice and status time), including anything recorded while anonymised.
• Your joins and leaves, and your entries in Dexy's member list.
• Roles Dexy was holding for you (roles to give back and join roles still waiting).
• Your Economy profile: wallet, bank, items, cosmetics and transaction record.
• The appeals you sent.

Moderation cases stay, as servers' records of what happened, but your ID in them becomes “Deleted user”. People you invited stay counted, credited to “Deleted user”, and server totals go down by your share. Deletion runs in the background; you can follow it with d!privacy or on your profile, and asking again is safe.

Afterwards Dexy keeps a note that your data was deleted, so nothing new is filed under your ID: new activity counts as “Deleted user” until you turn anonymise off. Server-wide numbers that never contained your ID stay, a server's settings log keeps who changed which setting, and backups may hold your data until they're replaced. For anything else, including a copy of your data, email support@dexy.gg.

Your rights

Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, object to or limit how we use it, and get a copy of it. Anonymise and delete above cover most of this instantly; for the rest, email support@dexy.gg from or about your Discord or Fluxer account and we'll answer within 30 days. You can also complain to your local data protection authority.

Children

Dexy is for people old enough to use Discord or Fluxer: at least 13, or older where the law of your country says so. We don't knowingly collect data from younger children; if you think we have, email us and we'll delete it.

Security

Data is kept on servers we run, behind passwords and private networks; the bots' internal APIs only listen on the machine itself, and logins are encrypted. No system is perfectly secure, but if a breach affects your data, we'll tell affected servers and users as the law requires.

Other sites

Dexy links to Discord, Fluxer and other sites, and servers can post their own links. Those sites have their own privacy policies; this one covers Dexy only.

Changes

We'll update this policy when Dexy changes what it stores. The date at the top shows the last change; bigger changes are announced in the support server. Also see our Terms of Service.