Privacy that is not buried in the fine print
If you run a Discord server for a company, a club or a brand, you are responsible for your members’ data. Noxa is built so you can actually show how that data is handled.

What it does
- Servers in Germany
- Application, database and backups run at Hetzner Online GmbH in Germany. Discord itself is US-based, unavoidable for a Discord bot, which is why it is named in the data processing agreement rather than left out.
- Encrypted before it is stored
- Ticket messages, unban appeals and moderation reasons are encrypted before they reach the database, each server with its own key. Backups are encrypted too.
- Processing agreement and retention
- The data processing agreement is published on the site, not handed out on request. Retention periods run as scheduled jobs, not as a statement of intent.
- Access and deletion
- Every account can export its data and delete itself, in the dashboard, without writing to support. Moderation and ticket entries stay as that server’s own record, but with no link back to the deleted account.
How to set it up
- Invite Noxa, the data processing agreement applies from first use, no paperwork by post.
- Switch on only the areas you actually need, what is off processes nothing.
- List Noxa as a processor in your own privacy policy.