Privacy Policy

1. Data Controller

The data controller for Levlix is:

• Operator: Atraxo - Levlix
• Country: Switzerland
• Email: support [at] levlix [dot] io
• Service: Levlix Discord Bot

2. Data We Collect

2.1 Data Collected Automatically

When you interact with Levlix, we automatically collect:

2.2 Data We Do NOT Collect

• Message content for general features (only numerical counts are stored). Exceptions: deleted/edited message snapshots posted to the server's audit log channel (§ 2.5), and moderation case evidence when a message triggers a moderation case (§ 2.8)
• Direct messages (DMs)
• Voice conversations (audio)
• IP addresses (via the Discord Bot)
• Payment or financial information

2.3 Web Dashboard Data & Analytics

When using our web dashboard, we additionally process:

• OAuth2 tokens (for Discord authentication, stored securely)
• Session cookies (for login persistence)
• Browser user agent (for security/analytics)
• IP Addresses & Security Logs: We temporarily process and log your IP address to protect our infrastructure from automated attacks (using Rate Limiters and Fail2Ban). These logs are automatically purged.

2.4 Web Beacons, Cookies & Web Analytics

Our website uses "Cookies" — small text files stored on your device. We separate these into two categories:

• Essential Cookies: Used to keep you logged in to the dashboard securely. These cannot be disabled.
• Analytics Cookies (Google Analytics 4): Used to measure website traffic and improve our services. These are disabled by default.

Google Analytics 4 (GA4): If you provide your explicit consent via our Cookie Banner, we use GA4 (provided by Google Ireland Limited). We have activated the anonymize_ip feature, which means your IP address is truncated and anonymized before being stored by Google.

Revoking Consent: You can revoke your consent at any time by clicking the "Cookie Settings" link in the footer of our website, or by clearing your browser cookies.

Cloudflare Web Analytics: Our CDN provider (Cloudflare, Inc.) injects a lightweight, cookieless analytics beacon (beacon.min.js) into our web pages. It collects aggregated performance and visit metrics (page URL, referrer, browser type, country-level location) without cookies, fingerprinting, or cross-site tracking, and stores no persistent identifiers on your device. Because no user profile is created and nothing is stored on your device, this processing is based on our legitimate interest in monitoring site performance and availability (Art. 6(1)(f) GDPR) and does not require cookie consent.

2.5 Granular Privacy Controls (Self-Service)

You can manage how Levlix processes your data at any time using the /privacy slash command (an ephemeral Components V2 panel only you can see) or the Privacy Dashboard. Both interfaces expose the same three toggles:

Disabling a toggle takes effect immediately and stops further collection of that data category. Existing rows are kept until the next scheduled purge or until you request deletion (see § 5.3 and § 6).

2.6 Data Export & Self-Service Deletion

• JSON Data Export: The /privacy command and the Privacy Dashboard let you download a machine-readable JSON archive of the data we hold about you (GDPR Art. 15 access + Art. 20 portability), including moderation cases that concern you, support tickets and reports you filed. Excluded for security reasons: stored security credentials (e.g. two-factor secrets) and internal staff audit logs; identifiers of other users are always omitted. Rate-limited to one export per 24 hours per user to prevent abuse.
• Immediate Account Deletion: The same interfaces expose a destructive gdpr_delete_user_now() action that purges your user-level data across all participating tables on the spot, in addition to the automated 2-year inactivity purge described in § 5.3. A small set of records is exempt from this deletion — see the retention exceptions in § 5.3.

2.7 Privacy Audit Log

To prove to supervisory authorities that self-service privacy actions were initiated by the account holder, we keep a minimal audit log of these events (toggle changes, data exports, account deletions, opt-ins). Each entry contains the Discord User ID, the action, the interface used (bot, dashboard or API), a timestamp, a coarse user-agent category and a salted SHA-256 hash of the requesting IP address. The salt is rotated daily and discarded after at most 36 hours, after which the hash can no longer be linked back to a specific IP. Privacy audit log entries are retained for 3 years (Art. 5(2) accountability and Art. 17(3)(e) defence of legal claims) and then deleted automatically by gdpr_purge_privacy_audit_log.

2.8 Automated Moderation (AI-assisted)

Servers can enable a moderation system that automatically evaluates messages in real time, including an AI-assisted filter that scores message content on locally hosted models. For scoring, the message text is sent to an AI model that runs on our own server in the Hetzner network in Germany (via Ollama); it is not sent to any third-party AI provider or other processor, and messages that do not trigger the filter are not stored. When a message triggers it, a moderation case is created that stores up to 500 characters of the message and the assigned scores (mod_cases), and a moderation action configured by the server (such as a timeout, kick or ban on that server) may be applied automatically. Legal basis: Art. 6(1)(f) (the server community's overriding interest in a safe environment). You have the right to contest any automated moderation action and obtain human review: the server's moderators can review and revoke every case, and you can additionally contact our support (§ 6). Moderation case evidence is retained for server-safety accountability and is exempt from self-service deletion (Art. 17(3)); cases that concern you are included in your data export.

2.9 AI Features

No AI chat assistant: Levlix no longer offers an AI chat assistant; the former /ai command was discontinued on October 2, 2026. Conversation messages from it (local_ai_context) were deleted automatically 24 hours after they were written, so none are kept.

Translation drafts for feedback: when the Levlix team reviews a bug report or feature request (§ 2.12) that was not written in English, a reviewer can request an English draft. For this, the title and description of the entry are sent to an AI model that runs on our own server in the Hetzner network in Germany (via Ollama); they are not sent to any third-party AI provider or other processor. The draft is only shown to the reviewer, who corrects it; the draft itself is not stored. Only the English version the reviewer saves is stored with the entry, together with the detected original language, and is published next to your original text once the entry is approved. Legal basis: Art. 6(1)(b) (you file the entry so that it is considered publicly). The English version is deleted together with your entry.

2.10 Support Tickets & User Reports

Support tickets: when you open a ticket we store its subject, status and timestamps, and any feedback rating, feedback comment and close reason. Tickets you opened are included in your data export and deleted with your account. User reports: when you report a message, we store your report (reason and a snapshot of the reported message) for moderation review. Reports you filed are exported and deleted with your account; note that if someone reports one of your messages, the snapshot in their report is processed as moderation evidence under § 2.8.

2.11 Service Telemetry & Deletion Tombstone

Command statistics: we record which command was used by which account and when, to operate the service, detect abuse and plan capacity. These records are anonymised (your ID is removed) when you delete your account. Deletion tombstone: when you delete your account or opt out, your bare Discord User ID is permanently kept in an opt-out list (gdpr_opt_outs) — this is technically required so that we keep honouring your deletion and do not start collecting data about you again (Art. 6(1)(c) in conjunction with Art. 17).

2.12 Bug Reports, Feature Requests & Voting

What we store: when you file a bug report or feature request (via the /feedback command or the form on levlix.io), we store your Discord User ID, your display name at the time of filing, the server you filed from (if any), the text you entered (title, description, use case, benefit, steps to reproduce), the category and priority you picked, and the entry's status (feedback_reports). Attachments you add on Discord are forwarded to the support-server thread only and are not stored in our database. When you vote for an entry, your Discord User ID is stored against that entry in our cache so that you can vote once and withdraw the vote; only the total count is shown to others.

Review before publication: every entry is first shown to the Levlix team in a staff-only channel of the support server. Until the team approves it, only you can see it on levlix.io. The team may edit an entry for clarity (for example to remove server details) before approving it, or reject it; rejected entries are deleted automatically 90 days after the decision.

Publication: once approved, your display name, the filing date and the text of your entry are published on levlix.io and as a thread in the Levlix support server on Discord, where members can discuss and vote. Legal basis: Art. 6(1)(b) (you actively file the entry or cast the vote so that it is considered publicly).

Export and deletion: your entries and the list of entries you voted for are included in your data export and are deleted with your account, which also removes them from levlix.io. The thread in the Levlix support server is Discord content on that server; its starter post keeps your display name and User ID until we anonymise it, which we do on request via our support (§ 6).

3. Legal Basis for Processing (GDPR Art. 6 / nDSG Art. 6)

We process your data based on the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nDSG):

• Contract Performance (Art. 6(1)(b)): Processing necessary to provide the Bot's services you requested
• Legitimate Interest (Art. 6(1)(f)): Security, fraud prevention, and service improvement
• Consent (Art. 6(1)(a)): For optional features and analytics

4. How We Use Your Data

Your data is used exclusively to:

• Provide core Bot functionality (points, leaderboards, games)
• Track activity for rewards and milestones
• Prevent abuse and ensure fair gameplay
• Provide server administrators and owners with aggregated member activity overviews (e.g. levels, points, last active status) via the web dashboard, limited to their own server's data

5. Data Storage & Security

5.1 Storage Location

Your data is stored on servers located in:

• Primary Database: European Union (Germany, Hetzner)
• AI Models (moderation scoring, feedback translation drafts): European Union (Germany, Hetzner), on our own server
• CDN & Security: Global Edge Network (Cloudflare)

5.2 Security Measures

• Encrypted database connections (TLS/SSL)
• Parameterized queries (SQL injection prevention)
• Rate limiting and DDoS protection
• Automated backups with encryption

5.3 Data Retention

• User data: Retained until deletion request or account inactivity (2 years, enforced by gdpr_purge_inactive_users). After that, the user profile and PII-heavy records are deleted; aggregated activity counts are anonymised and kept for long-term server statistics with no link to your identity.
• Self-service immediate deletion: Available at any time via the /privacy command or the Privacy Dashboard (gdpr_delete_user_now()). Takes effect on the spot, independent of the 2-year inactivity purge.
• Self-service data export: Available at any time via the /privacy command or the Privacy Dashboard, rate-limited to one export per 24 hours.
• Server data: Deleted 30 days after bot removal (gdpr_purge_inactive_guilds).
• Security logs (dashboard role changes, internal team actions, admin-initiated data exports): The personal identifiers in these logs (IP address and browser user-agent) are removed after 30 days; the anonymised action records (who did what, when) may be retained longer where required for our legitimate security interests. Admin-initiated data-export records are deleted in full after 30 days. Enforced automatically by gdpr_purge_old_security_logs.
• Privacy audit log (self-service toggle changes, exports, deletions): Retained for 3 years with a daily-rotating salted IP hash (unlinkable after at most 36 hours), then deleted automatically (gdpr_purge_privacy_audit_log). See § 2.7.
• Operational logs (error traces, crash reports, performance metrics): Deleted after 30 days by a daily automated task. These files can contain your Discord user ID and the ID of the server an error occurred on; access tokens, passwords, database credentials and e-mail addresses are masked automatically before anything is written. They hold no message content.
• top.gg votes: Your vote total, streak and DM settings are kept until you delete your data; the log of single votes is kept up to about two months and pruned after each monthly top-voter post.
• Feedback entries and votes: Kept until you delete your account; entries the team rejected are deleted automatically 90 days after the decision. The copy in the support-server thread is Discord content and is anonymised on request (§ 2.12).
• Retention exceptions on account deletion (Art. 17(3)): the following survive a deletion request — moderation case evidence (mod_cases, § 2.8) and user reports about your messages (server-safety accountability), the privacy audit log entry proving your deletion request (§ 2.7), reputation endorsements written by other users (their data), fully anonymised aggregate statistics with no link to your identity, and your bare Discord ID in the deletion opt-out list (§ 2.11).

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

How to Exercise Your Rights

1. Self-service (recommended): Run the /privacy slash command in any server where Levlix is active, or open the Privacy Dashboard. Export, toggle changes and account deletion are available 24/7 without staff intervention.
2. Send an email to support [at] levlix [dot] io with your Discord User ID.
3. Or contact us via our official Discord server and open a support ticket.

Self-service actions complete in real time. Email and ticket requests are answered within 30 days as required by GDPR. The exercise of your rights is free of charge.

7. Data Processors & Sharing

We share data only in these limited circumstances with our trusted providers (Sub-processors). All non-EU/EEA transfers are protected by Standard Contractual Clauses (SCCs) per § 9.

8. Contact & Complaints

For privacy-related questions or concerns:

• Email: support [at] levlix [dot] io
• Discord: Join our support server and open a ticket

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For Switzerland, the competent authority is:

• FDPIC (EDÖB)
• Federal Data Protection and Information Commissioner
• Feldeggweg 1, 3003 Bern, Switzerland
• www.edoeb.admin.ch

For EU residents, you may also contact your local data protection authority.

9. International Data Transfers

Your data is primarily stored in the European Union (Germany). However, some of our service providers (e.g., Cloudflare) may process data outside the EU/EEA. In such cases, data transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable (Switzerland is recognized as providing adequate protection)
• Provider-specific DPAs (Data Processing Agreements) with all sub-processors

10. Children's Privacy (GDPR Art. 8)

Within the EU/EEA, GDPR Art. 8(1) sets the default age for independent consent to information-society services at 16, unless national law lowers that threshold. Member states have made use of this option, so the effective age limit varies (for example 14 in Austria and Italy, 16 in Germany and applied by analogy in Switzerland under the nDSG). Users below the locally applicable threshold require verifiable parental consent.

Levlix currently relies on Discord's Terms of Service compliance, which require users to be at least 13 years old, and does not implement automated age gating of its own. Server owners are responsible for ensuring that their audience meets the consent age that applies in their jurisdiction. If you believe a child below the applicable threshold has provided us with personal data without the required parental consent, please contact us at support [at] levlix [dot] io and we will promptly delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via:

• The Bot's announcement system
• Our official Discord server
• This webpage (with an updated "Last Updated" date)

Continued use of the Bot after changes constitutes acceptance of the updated Privacy Policy.

12. Automated Decision-Making

All game mechanics, point calculations and leaderboard rankings are transparent, rule-based systems with no AI-driven profiling. One exception exists: servers can enable the automated moderation system described in § 2.8, which can automatically apply server-level moderation actions (such as a timeout, kick or ban on that server) when a message triggers it, including an AI-assisted content filter running on locally hosted models. You always have the right to contest such an action and obtain human review — the server's moderators can review and revoke every automated case, and you can contact our support (§ 6). We do not use automated decision-making for any other purpose, and never for profiling across servers.