Solyx
Last updated: October 4, 2026
The entity responsible for processing personal data in connection with the solyx.dev website, the related web dashboard (e.g. discord.solyx.dev or twitch.solyx.dev), and the Discord application branded “Solyx” is the operator of these services (“we”, “us”). Provider details are available in the Imprint.
Contact (including privacy): Email: admin@solyx.dev. General support questions can also be asked on our support Discord: https://discord.gg/nXNwhwFfYX. Please send data protection requests (e.g. access or erasure) by email to the address above.
We process personal data only where needed to provide our services, maintain security, comply with legal obligations, or pursue legitimate interests. Using our Discord bot is voluntary; server administrators control whether the bot is invited and which features are enabled.
When you access our websites, infrastructure providers may automatically process technical data (e.g. IP address, timestamp, user agent, requested resource) to deliver content and protect systems. Legal basis: Art. 6 (1) (f) GDPR (legitimate interests in secure operations).
The public site may display aggregated statistics sourced from separate systems. We do not build advertising profiles from this. Theme and language preferences may be stored locally in your browser (see Cookies).
When you sign in with Discord, we use Discord’s OAuth2 service. Depending on configured scopes, we may process:
Authentication is represented by a signed session (HTTP-only cookie). OAuth tokens are only stored when needed for those queries and expire after a limited time. Purposes: provide the protected dashboard and associate your account. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract / pre-contractual steps) and Art. 6 (1) (f) GDPR (security).
When the bot is added to a guild, we process data to deliver configured features, typically including:
Scope depends on enabled modules. Server administrators have responsibilities toward their members; we provide the software and process data as needed to perform the service for the inviting server and dashboard users.
Some features require Discord privileged gateway intents, which must be declared and approved by Discord. Depending on product version and configuration, Solyx may use one or more of the following. Processing occurs only for the purposes below and only on guilds where the bot was invited:
Legal basis: Art. 6 (1) (b) GDPR (providing agreed bot functionality) and Art. 6 (1) (f) GDPR (security and abuse prevention where applicable). Individual deployments may not enable all intents; this policy describes the product’s intended processing categories.
To improve Solyx we analyse which features are used on servers – e.g. how many servers enabled a module, how often an area is used per day, or how many servers are still active after 30 days. For this we store only counters per server and day (member count, active modules, number of commands or notifications per area, time of the last dashboard visit). No message content, no user IDs, no user profiles. Results are only evaluated for groups of at least five servers. Daily values are deleted automatically after 400 days. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in improving and stabilising the service).
Inviting with a return link: When you add Solyx to a server via our website or dashboard, Discord additionally asks for the identify scope. This tells us once your Discord user ID and the chosen server so we can take you straight to that server's setup. The access token issued in the process is revoked immediately and never stored.
Referral links (solyx.dev/invite/…): In the dashboard you can create a personal link and share it. If Solyx is installed via such a link (or a campaign link), we store for attribution: the code, the Discord user ID of the referring person, the Discord user ID of the inviting person, the server ID, the source (e.g. referral, campaign, another server of your own) as well as timestamps and stages (installed, actively used after 7 days, still active after 30/90 days). Purpose: thanking the referring person ("N servers via your link"), abuse detection and understanding which paths lead to Solyx. There are no rewards or payments. A server is attributed at most once. After 24 months the IDs are removed; only anonymous counters remain. Legal basis: Art. 6 (1) (f) GDPR.
Click counting without cookies: When a referral link is opened we count the click. To recognise repeated clicks on the same day we hash the IP address and browser identifier together with a random value that changes daily – in memory only, without cookies and without storing the IP address; it is discarded at midnight (UTC) at the latest. We only store daily counters per code (clicks, unique clicks, starts, installs), deleted after 400 days.
We use functional cookies or similar technologies for dashboard sessions, OAuth state (CSRF protection), and optional theme/language settings. When you invite the bot we set a cookie for at most 30 minutes that secures the return from Discord (CSRF protection). We do not use analytics or tracking cookies. You can restrict cookies in your browser; without session cookies, dashboard login will not work.
We rely on Discord (Discord Inc.) as an essential platform for bot and OAuth communication. Hosting or other subprocessors may process data under GDPR Article 28 agreements where required.
Discord and some providers may process data outside the EU/EEA. Appropriate safeguards (e.g. standard contractual clauses) may apply as described in their privacy notices.
We retain data only as long as necessary for the respective purposes or as required by law. Sessions and OAuth helpers are deleted or invalidated after expiry or logout. Bot-side logs and moderation data may vary by server configuration; administrators should disclose retention to their members where appropriate.
Where GDPR applies, you may have rights of access, rectification, erasure, restriction, portability, and objection to processing based on Art. 6 (1) (f) GDPR. You may lodge a complaint with a supervisory authority.
To exercise your rights, an informal message to admin@solyx.dev is sufficient. We respond without undue delay and at the latest within one month (Art. 12 (3) GDPR). Please include your Discord or Twitch user ID so we can locate your data; to prevent disclosure to unauthorised persons, we may ask you to confirm your identity.
Self-service access and deletion in Discord: On servers using the Solyx bot, the /meinedaten info command shows which data the bot stores about you on that server, and /meinedaten loeschen deletes it (e.g. level XP, redeem entries, and Support-AI data). It also lists your referral codes and attributions from the referral programme; deleting disables your codes and removes your user ID from all attributions (anonymous counters remain). Moderation records may be retained as the server's protective documentation.
Our services are not directed at children under 13. Discord’s own age requirements apply; we do not knowingly process children’s data in violation of those rules.
We may update this policy when our product, legal requirements, or Discord’s policies change. The version with the “Last updated” date on this page is authoritative.