Privacy Policy

Personal data (hereinafter "data") within the meaning of Art. 4 Para. 1 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") is all information relating to an identified or identifiable natural person.

We process this data exclusively within the scope of necessity and for the purpose of providing our functional website as well as providing our services within the framework of the Discord bot "Notoq" and the associated dashboard.

With this privacy policy, we inform you about the type, scope, purpose, duration and legal basis of the processing we carry out.

The controller within the meaning of Art. 4 Para. 7 GDPR for the processing of personal data is:

Notoq

Inh. Julian Maschke

Fährstraße 217

40221 Düsseldorf

Deutschland

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You can request information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of your data stored with us.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data stored with us ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You can request to receive your data in a structured, commonly used and machine-readable format.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.

1. Hosting & Infrastructure

a) Website & Security (Cloudflare)Our website is provided via the Content Delivery Network (CDN) of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare routes data traffic through its servers to optimize loading times and protect our site from attacks (e.g. DDoS attacks). Technical data such as your IP address is processed. This is based on our legitimate interest in secure and fast provision (Art. 6 Para. 1 lit. f GDPR).

b) Bot, API & Database (Google Cloud)For the backend, databases and operation of the Discord bot, we use the infrastructure of Google Cloud (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data processing takes place physically on servers provided by Google. The legal basis is our legitimate interest in scalable infrastructure as well as contract fulfillment towards our users.

2. Cookies

Our website uses technically necessary cookies. These are small text files that your browser stores to enable basic functions (e.g. to save your login status for the dashboard). The legal basis for this is Art. 6 Para. 1 lit. b GDPR (contract fulfillment) or Art. 6 Para. 1 lit. f GDPR (legitimate interest).

3. Customer Account and Authentication (Dashboard)

To use the dashboard, you can log in with your Discord account (OAuth2). We receive your Discord user ID, username and avatar URL from Discord Inc. This data is necessary to provide your dashboard account and link it to your servers.

The legal basis is the fulfillment of our contract with you (Art. 6 Para. 1 lit. b GDPR) for the provision of dashboard services.

4. Use of the Notoq Bot (Functionality & Data Storage)

The Notoq bot offers extensive functions for server management, moderation and entertainment. In order to technically provide these functions (e.g. backups, statistics, tickets), comprehensive storage of interactions and configurations is necessary.

• Identification & Master Data: We permanently store IDs, names, discriminators, avatar URLs (links), nicknames and role memberships of users on the respective servers in order to correctly display profiles, rankings and permissions.
• Comprehensive Server Logs & Moderation: For traceability and security (audit logging), we store detailed logs of events on the server. These include:
  • User events (join, leave, ban, kick, timeout, channel changes, verifications).
  • Moderation actions (who banned/kicked whom and when, including reason and duration).
  • Server changes (creation/deletion/editing of channels, roles or emojis).
  • Security violations (triggering of AntiSpam or AntiNuke filters).
• Activity Tracking & Statistics: To provide leveling systems and statistics, we collect metadata on usage: number of messages sent, reactions given, exact times in voice channels (join/leave/move), games played (game activity) and general Discord status.
• Content (Tickets, Embeds & Giveaways): As part of certain functions, we also store content created by users:
  • Ticket System: For documentation purposes, we store transcripts of ticket conversations.
  • Custom Content: Texts for embeds, welcome messages, ticket panel texts.
  • Giveaways: History of giveaways, participant lists and winners.
• Backups & Templates: If the backup function is activated, we store a structural image of the server (channels, permissions, roles, server settings) in order to be able to restore the server state.
• User Uploads: We store images that users upload to personalize functions (e.g. backgrounds for level cards, welcome cards or profile banners).

The processing of this data is absolutely necessary to provide the functions desired by the server administrator (Art. 6 Para. 1 lit. b GDPR). Server administrators can deactivate individual modules (e.g. logging) in the dashboard to reduce data collection.

5. Notoq Game Center (Windows App)

The Notoq Game Center is an app for Windows. It stores your library, play sessions, favorites, collections and settings only on your PC. There is no telemetry, no usage analytics and no crash reporting. The app exchanges data with us only for the features described below.

Sign-In with Discord (Optional)If you sign in to the app with Discord, it is connected to your Notoq account, the same account you use for the bot and the dashboard. Sign-in runs via Discord OAuth through our API (api.notoq.xyz, hosted as described under 1.). For this, we process your Discord user ID, username, display name, profile picture, banner and profile color, the email address verified by Discord (if any) and your sign-in session. For the list of your active sessions, the app also transmits its version, the operating system and the name of your PC. On your PC, the app stores the session in encrypted form (Windows DPAPI). Our API retrieves your profile from Discord and caches it for no more than ten minutes. As with the dashboard sign-in, the legal basis is the fulfillment of our contract with you (Art. 6 Para. 1 lit. b GDPR).

Premium, Supreme, Levels and EventsOnce you are signed in, the app retrieves from our API whether your Notoq account has Premium or Supreme and until when, your levels and XP on the servers with Notoq where you are a member, and the upcoming events on these servers. We already process this information for the bot and the dashboard. The app only displays it. Events in voice and stage channels only appear if you have selected “Interested” in Discord. Our API keeps the response in memory for no more than one minute. The app loads server icons and event images directly from Discord (Discord Inc., USA), which receives your IP address in the process. On your PC, the app stores the most recently retrieved data, the events you want to be reminded of and which reminders it has already shown. It deletes this information when you sign out. The app shows event reminders as Windows notifications. You can turn them off in the settings.

VALORANT Cloud and GroupsWith Premium or Supreme, you can store VALORANT accounts in your personal cloud and share them in groups with other Notoq accounts. People who are invited do not need a subscription for this. The app encrypts the Riot ID, your own tags, the username, password and note of an account on your PC before they are stored with us (hosted as described under 1.). Only you and the members of the group an account is in can decrypt this information (end-to-end encryption). We cannot read it, nor your vault password or your recovery code, because the app never transmits either of them. We can, however, read the account ID (PUUID) and region of each account in the cloud, the name of a group, its members and their roles, who did what in the group and when, who is currently playing on which account, and the matches of the accounts with their duration and statistics. The members of a group see each other's Discord name and profile picture. Owners and admins of a group can invite you with a link or, if you have a Notoq account, find and invite you by your exact Discord username.

Playtime and Who Is PlayingFor the playtime of an account in the cloud, our API regularly retrieves the match history of its PUUID from HenrikDev (api.henrikdev.xyz), an unofficial service not operated by Riot Games. For each match, it stores the start, duration and mode as well as the values of that account, namely map, agent, result and rounds, kills, deaths and assists, combat score, hits by body area, damage and the RR change. We do not store any information about other players. HenrikDev receives only the PUUID and region, not your IP address. This only happens while the account is in a cloud or group whose owner has a subscription. If an account is in one of your groups and the app setting that shows others when you are playing is turned on (it is on by default), the app reports the account's PUUID to our API while you are playing on it. The members of the groups that contain the account and that you are also a member of then see that you are currently playing on it. We assign matches that start during this time to you. This way, a group sees who last played an account and how much playtime and which record (wins, losses, RR change) falls to each member. The app does not report accounts that are only in your personal cloud. You can turn this off at any time in the app settings. As with sign-in, the legal basis for the cloud, groups, playtime and this display is the fulfillment of our contract with you (Art. 6 Para. 1 lit. b GDPR).

Retention and DeletionIf the owner's subscription ends, their cloud and groups remain readable for 90 days. After that, we delete them with all accounts, memberships, keys, invitations and the history, unless the subscription is active again by then or a group has been transferred to a member with a subscription. We delete entries in a group's history and the reports of who played on which account and when after 90 days. We delete the retrieved matches of a PUUID, including their values and who they are assigned to, 30 days after the account is no longer in any cloud or group. Invitation links are valid for 48 hours, invitations by Discord name for 14 days. After that, we delete them. If you delete your Notoq account, we delete your personal cloud, the groups you own, your encrypted keys, your memberships, the reports of which account you played on, and invitations to you.

Download and UpdatesThe page notoq.xyz/gamecenter retrieves the version, date and size of the current release from our API. The file itself comes from GitHub (GitHub, Inc., USA), and only once you click the download button. During the beta, a password is required for this, which we only check and do not store. The installed app checks GitHub for a new version at startup and regularly after that, and downloads it from there. With every download and update check, GitHub receives your IP address, and with the update check also the app version.

Game Detection, Achievements and CoversTo find your games, the app reads data on your PC: the data of installed launchers (for example Steam, Epic Games, Xbox, EA app, Ubisoft Connect, Battle.net and Riot), the Windows list of installed programs, the game list Windows keeps for the Xbox Game Bar, and information files in game folders. This information does not leave your PC. The app does not read the sign-in data of other programs. The app reads your Steam achievements from the Steam folder on your PC. For game details (description, media, ratings), cover images and achievement rarity, it queries public interfaces and the CDN of Steam (Valve) and, if you choose, SteamGridDB using your own API key. These services receive your IP address and the names or IDs of the games for which details or images are looked up. The app reads your own screenshots from the folders of Steam, the Xbox Game Bar and NVIDIA on your PC. They do not leave your PC.

Free GamesOn its start page, the app shows which games Epic Games, Steam and GOG are currently giving away to keep for free. The app retrieves this list from our API, even without signing in. In the process, we receive your IP address and the app's language and use both only to deliver the list. Our API retrieves the offers from Epic Games, Steam, GOG and GamerPower. The app loads the offers' images directly from these services, which receive your IP address in the process. Clicking an offer opens its page in your browser. You can hide the shelf in the app settings.

Devices and LightingThe app shows the battery level of wireless mice, keyboards, controllers and headsets and, if you want, controls the lighting of your devices while a game runs. For this it reads battery levels through Windows and directly from the devices over USB and Bluetooth, searches for lighting devices on your home network (mDNS and broadcasts on the local network) and talks to them there directly. Keys and tokens created when you connect a device or entered by you (for example for Philips Hue or Home Assistant) are stored only on your PC, encrypted with the means of Windows. While a game runs, the app reads the mute state of your microphone and, only if you switch it on, the game data that Counter-Strike 2, Dota 2, Rocket League, League of Legends and supported racing games provide on your PC, the picture on your screen (reduced at once to a grid of 16 × 9 colour areas) and the sound of the game alone (only volume and bursts). Picture and sound are not stored. None of this reaches us.

Discord Status (Rich Presence)By default, the app shows what you are currently playing in your Discord status when Discord is running on your PC. Other Discord users can see this status. You can turn this off at any time in the app settings. If you turn on the VALORANT record in the app (off by default), the status also shows your record for today while you play VALORANT, namely wins, losses and the RR change.

VALORANT AccountsFor VALORANT accounts you add in the app, the app shows rank, level and player card once you are signed in. For this, the app sends the Riot ID (name and tag) or the account ID (PUUID) and the region to our API. For the match history, the app also retrieves the latest matches of an account after each session, when you open an account's details and, if you have turned on today's record in your Discord status, while you play. After a session, it sends the session's start and end for this. For each match, it receives only the values of that account, namely map, agent, mode, result and rounds, kills, deaths and assists, combat score, hits by body area, damage and the RR change, but no information about other players. The app stores these values only on your PC. Our API retrieves this information from HenrikDev (api.henrikdev.xyz), an unofficial service not operated by Riot Games. HenrikDev receives only this information, not your IP address. Our API keeps it in memory for no more than one day, the rank for no more than ten minutes and the matches for no more than one minute, and does not store it permanently. If an account is in the VALORANT cloud, what is said about playtime below also applies to its matches. The app loads rank icons and player cards directly from valorant-api.com, which receives your IP address in the process. The app recognizes which account played from the log file VALORANT itself writes on your PC (account ID and region). This information stays on your PC. Login details you enter for your accounts are stored by the app on your PC, encrypted with Windows DPAPI. We receive them only if you put an account into the VALORANT cloud, and then only end-to-end encrypted (see below).

6. Application System

If you use the application system provided by us (a feature of the Notoq bot) to apply to a server team, we process the data you enter (e.g. application text, Discord ID).

This data is stored and made available to the respective server management in order to process the application procedure. The legal basis is the implementation of pre-contractual measures at your request (Art. 6 Para. 1 lit. b GDPR).

7. Server List & Web Profile (Public Visibility)

Parts of our service (server list, server info page) are visible on the open internet, even for people without a Discord account.

• Public Team Lists: If you hold a role on a Discord server that has been configured as a "team role" by the server administrator, your Discord username, avatar and role will be displayed on the public profile page of the server. This serves the transparency of the server team. Legal basis: Legitimate interest of the server operator (Art. 6 Para. 1 lit. f GDPR).
• Reviews: If you submit a review for a server, it will be displayed publicly with your username, avatar, review date and text. You can edit or delete your review at any time via the dashboard.
• Personalization (History & Recommendations): If you are logged in, we store locally in your history which server profiles you have visited in order to provide you with the "Recently viewed" function. We also use aggregated usage data to recommend servers to you ("Recommended"). This data is not passed on to third parties.

8. Leaderboards & Rankings

The Notoq bot collects activity data from users on participating Discord servers to create rankings ("leaderboards").

• Processed Data: To calculate the rank, we process the number of messages sent, the duration of presence in voice channels (voice time), experience points received (XP), virtual currency ("Economy") and game statistics (e.g. "Counting", "Flag Game").
• Public Display: On the leaderboard website, your Discord username, avatar, rank and specific statistics (e.g. "500 messages", "10 hours voice") are displayed.
• Legal Basis: The processing is based on the legitimate interest of the server operator in promoting community activity and gamification (Art. 6 Para. 1 lit. f GDPR).

For the purchase of paid premium services, we use the payment service provider Paddle.com (Paddle Payments Ltd, Judd House, 18-29 Mora Street, London, EC1V 8BT, UK).

Paddle acts as "Merchant of Record" (MoR). This means that Paddle is your direct contractual partner for the purchase and payment processing and is responsible for processing your payment and billing data (e.g. name, address data, payment details).

We only transmit your Discord ID to Paddle for identification and activation of premium status. We do not receive or store your complete payment data.

The legal basis for the transmission of your ID is the fulfillment of the premium contract (Art. 6 Para. 1 lit. b GDPR).

We do not pass on your data to uninvolved third parties. However, we use processors to provide our service:

• Hosting (Google Cloud): Our API, the bot and the databases are hosted at Google Cloud (Google Ireland Limited, Ireland).
• Website CDN & Security (Cloudflare): For the delivery of the website and DDOS protection, we use Cloudflare (Cloudflare Inc., USA). Cloudflare acts as our processor.
• Payment Service Provider (Paddle): As described under V., Paddle acts as "Merchant of Record" and is responsible for the payment data itself.
• Discord Inc.: The bot necessarily interacts with the Discord platform (Discord Inc., USA) to provide the services.

We only store data for as long as necessary for the purpose. We follow strict deletion routines to avoid unnecessary data storage.

• User-related Data (Inactivity): Your personal data (statistics, level, profiles) remain stored as long as you are a member of at least one server that uses our bot. As soon as you are onno server together with the bot anymore, your data will be after a period of 30 days automatically deleted.
• Server-related Data (Kick): If the bot is removed from a server, all specific configurations and data of this server (e.g. backups, logs, settings) will also be after a grace period of 30 days automatically deleted.
• Immediate Deletion (Right to be Forgotten): Regardless of the automatic deadlines, you can request the immediate deletion of your data at any time (Art. 17 GDPR). Please contact us directly for this purpose.

We maintain online presences within social networks to communicate with prospects and users and to offer support.

• Discord: We operate a support server on the Discord platform (Discord Inc., USA). When using Discord, Discord's privacy policy applies. We process data on our server (e.g. support requests, messages) to provide support (Art. 6 Para. 1 lit. b or f GDPR).

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.

Last updated: 10.10.2026