This privacy policy explains which personal data we process in connection with the website plixy.app (including api.plixy.app and transcript.plixy.app) and the Discord bot “Plixy”. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Adrian Gerber
E-Mail: privacy@serverhub.ch
Please send privacy requests to the email address above.
2. Website and dashboard
2.1 Server log files
When you visit the website, your IP address, date and time, requested address, status code and browser identifier (user agent) are logged. This is required for secure operation and to prevent abuse.
2.2 Login with Discord
You log in to the dashboard with Discord (OAuth2, scopes “identify” and “guilds”). We receive your Discord ID, username, display name and avatar, and the list of your Discord servers with your permissions. The server list is only used to check which servers you may manage and is cached for 60 seconds. Access tokens issued by Discord are stored encrypted (AES-256-GCM). We never receive your email address or password.
2.3 Cookies and local storage
We only use technically necessary cookies: a session cookie (“plixy_session”) for login and a short-lived cookie that protects the login process (10 minutes). Your browser's local storage keeps your colour theme and embed builder drafts; this data never leaves your browser. We do not use any analytics, tracking or advertising services. Fonts are served from our own server.
2.4 Audit log
Changes to server settings in the dashboard are logged with your Discord ID and name so server administrators can see who changed what.
2.5 Content from Discord
Avatars, server icons and emojis are loaded directly from Discord's content delivery network, which transmits your IP address to Discord. Images that server administrators add to message templates are loaded from their respective addresses.
3. Discord bot
The bot processes data in the Discord servers it has been added to. The server administration decides which features are enabled. Depending on the feature, the following is processed:
- Basic data: server, channel, role and user IDs and settings.
- Tickets: messages in ticket channels (content, author, avatar, time), attachments (stored for the transcript), form answers, ratings. Transcripts can only be viewed by the person who opened the ticket and the responsible staff after logging in. If a staff member replies anonymously, we store internally who replied; this is only visible to staff, not in the transcript.
- Moderation: moderation cases with Discord ID, name, reason and moderator.
- Auto-moderation: messages are checked automatically for rule violations (e.g. spam, links, forbidden words). The content is not stored for this. Depending on the server's settings, the bot may delete messages or take actions (e.g. timeout) automatically; contact the server's moderators for a review.
- Logs: server events such as joins, role changes and the content of edited or deleted messages.
- Leveling: Discord ID, name, avatar, experience points and message count (no message content).
- Other features: suggestions and votes, giveaway entries, birthdays (day, month, optionally year), applications (answers), reminders, starboard entries and temporary voice channels.
To provide its features, the bot also briefly keeps recently sent messages in memory.
4. Purposes and legal bases
We process personal data to provide the website, dashboard and bot, to keep them secure and to prevent abuse, in line with the principles of the FADP. Where the GDPR applies, we rely on Art. 6(1)(b) GDPR (use of the service) and Art. 6(1)(f) GDPR (legitimate interest in a secure, working service).
5. Recipients and transfers abroad
- Hosting: Ferdinand Zink, handelnd als Tube-Hosting, data centre in Kerkrade, Netherlands. According to the Swiss Federal Council, the Netherlands provide adequate data protection.
- Discord: the bot and the login work through the platform of Discord Inc. (USA). Discord's processing is governed by the Discord Privacy Policy.
- YouTube / Twitch: for notifications the bot only requests public channel information. None of your data is transmitted.
We do not sell data or share it for advertising.
6. Retention
| Data | Retention |
|---|---|
| Server log files (IP address, time, URL, browser) | usually 14 days |
| Dashboard account (Discord ID, name, avatar) | until you delete it |
| Login session and encrypted Discord tokens | 30 days (transcript session 7 days) or until logout |
| List of your Discord servers | cached for 60 seconds only |
| Ticket messages, attachments and form answers | according to the server setting, at most 365 days after closing |
| Log entries | 30 days |
| Moderation cases, leveling, suggestions, birthdays, applications, giveaways | until deleted by the server administration |
| Reminders (/remind) | until delivered |
| All data of a server that removed the bot | 30 days after removal |
7. Security
All connections are encrypted with TLS. Access tokens are stored encrypted, databases are not publicly reachable, and access to server data is limited to authorised people.
8. Your rights
Within the applicable law you have the right to access, rectify, erase and receive a copy of your personal data, and to object to processing.
You can delete your dashboard account yourself at any time (menu top right → “Delete my data”). For data the bot stored in a server (e.g. tickets), contact us by email; because such data also concerns the server administration, we review these requests individually. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in the EU.
9. Minimum age
Using the service requires a Discord account. Discord's age requirements apply.
10. Changes
We may update this privacy policy. The version published on this page applies.