Privacy Policy

Last updated: September 30, 2026

1. Overview

This policy describes what data Lucie (the Discord bot) and this web panel (lucie.elxy.dev) process, what it is used for. We do not sell data or show ads.

2. Data we process

• Account: when you sign in with Discord (OAuth2) we receive your ID, username and avatar. We never see your password.
• Profiles: for profile features, available only through the bot's commands, we store public Discord data (name, avatar and banner). On lucie.elxy.dev only people signed in with Discord can see them, and the history.elxy.dev galleries are public to anyone with the link; with a private log or Ghost mode, everyone else only sees what's current.
• Premium: if you have premium or redeem a code, we store the plan, its dates, how it was obtained (a gift from the team, a code or a purchase) and a log of changes. For codes we only store their fingerprint. With Ghost mode your history is still saved: you and the Lucie team see all of it and everyone else only sees what's current.
• Per-server configuration: prefix, enabled modules, alerts, moderation permissions and immune lists.
• Moderation: cases created by each server's moderators (warnings, kicks, bans), appeals and related logs. Inside a ticket, the server's team can view the "user card" of whoever opened it: their history in that same server (cases, warnings, previous tickets and who invited them), whether they have a Lucie global ban and their previous names (unless their profile is private).
• Tickets: if a server uses support tickets, the content of ticket channels (messages, display names, attachments and form answers) is stored as a transcript on Lucie's servers, never in public storage. Only the ticket's author, the people added to it, the panel's team, whoever manages the server and the Lucie team can view it. Transcripts, form answers, reasons and the AI summary stored by Lucie are deleted when the retention period chosen by the server (30, 60, 90, 180 or 365 days; 60 by default) ends, or earlier if whoever manages the server deletes the transcript. What is posted inside Discord (the log channel entry, the .html copy of the transcript attached to the log or sent by direct message to the author, the AI summary in the log and direct messages) stays in Discord, outside that retention: the server manages it.
• Music: playback history (track and who requested it), favorites and playlists, for stats and recommendations.
• AI: messages you send to the AI chat are processed to generate the reply, and recent conversation context is kept.
• Roleplay: interaction counters between users.
• Cookies: only the necessary ones — session (Discord sign-in) and language.

Note: We process data only to provide the features requested by the user, keep the service secure and comply with our legal obligations where applicable.

3. How we use it

To run the bot and panel features, prevent abuse and produce internal service statistics. Nothing else.

4. Third parties

Some features send data to external services, only what is strictly needed:

• Discord (API and CDN) — the foundation of the service.
• AI providers (DeepSeek) — process AI chat messages and, only if a server turns on ticket summaries, a condensed version of the ticket conversation (without IDs) to generate the summary; Microsoft Edge TTS generates the DJ voice.
• Music & lyrics sources (YouTube, Deezer, Spotify, Apple Music, lyrics.ovh) — receive the searches you make.

5. Security

We use HTTPS, restricted server access and least-privilege permissions. Still, no system on the internet is 100% secure.

6. Minors

The service follows Discord's minimum ages. Adult features are only available in channels marked as NSFW.

7. Changes

Any changes to this policy will be published here.

8. Contact

For questions or data requests, join Lucie's support server (use the soporte command on Discord).