Contact XORY STUDIOS
Questions about these terms or your information? Contact our team using the options below.
- Service
- XORY STUDIOS
- Privacy and legal requests
- privacy@xorystudios.net
- Community support
- XORY STUDIOS on Discord ↗
1. Scope and responsibility
This notice covers personal information handled by the individual operating under the XORY STUDIOS name through xorystudios.net, the XORY / XORY Core Discord bot, and connected studio support and community features. The operator determines why and how information is used for these activities. Discord and Roblox also process information under their own privacy notices. An independently operated Discord server may have its own administrator and privacy responsibilities.
This notice describes our website, bot, and community services. It does not imply that a planned game integration, payment system, or account-linking feature is already operating. We will explain material changes to these practices before introducing them, including any choices required by law.
2. Information we receive and why
| Category and source | Purpose |
|---|---|
| Website request information, such as IP address, requested page, browser information, time, and security signals received by hosting infrastructure. | Deliver pages, diagnose errors, and protect against abuse. |
| Discord user, server, role, channel, and message identifiers; profile details exposed by Discord; join and account-age information; rules acknowledgements, roles, and notification preferences. | Operate bot commands, onboarding, member profiles, permissions, and community features. |
| Ticket subjects, descriptions, message content, author IDs, timestamps, edit/deletion markers, attachment references, participants, and staff notes. | Provide support, investigate issues, and create support transcripts. Deleting a Discord message does not necessarily delete its stored ticket record. |
| Reports, accused-user details, evidence links, appeals, bug details and device/platform information you provide, application answers, and review decisions. | Handle requests, assess applications, investigate bugs or misconduct, and review decisions. |
| Moderation history, reasons, staff actions, audit records, security alerts, linked domains, activity counts, and internal risk indicators. | Protect the community, enforce rules, and support accountable review. |
| Event participation, giveaway entries and winners, poll choices linked to IDs, and interest or notification selections. | Run the community activity you choose to join. Poll choices stored by the bot are not anonymous. |
Information comes from you, Discord, other users submitting reports, authorized staff, and infrastructure providers. If you provide evidence about someone else, include only what is relevant and lawfully shareable. Do not send passwords, authentication secrets, full payment-card details, government identification, or unrelated sensitive information.
3. Messages, security checks, and visibility
In accessible channels where security features are enabled, the bot examines messages and activity for spam, repeated messages, excessive mentions, and suspicious or blocked links. General message inspection is distinct from storing support-ticket messages. Security records can include identifiers, linked domains, counts, and actions. The current bot does not record voice conversations.
Automated checks can remove messages or apply temporary access restrictions according to server settings, and can increment an internal risk indicator. These signals may be wrong and are not proof of misconduct. Contact support for human review.
Public commands, profiles, event participation, and giveaway announcements may reveal information to other members. Tickets and internal reviews are intended for the requester, invited participants, and authorized staff as relevant. Discord server owners or administrators may have broader access. A support ticket is not a confidential professional relationship. Staff can export transcripts; exported copies require separate access and deletion controls.
4. Website storage and external resources
Our website code does not set advertising cookies, use browser local storage for tracking, include analytics scripts, or provide a login or payment form. This does not mean that no technical request information reaches service providers.
Cloudflare delivers and protects the website and may process request and security information. The website currently requests Barlow fonts from Google Fonts, which means the browser sends Google technical request information such as an IP address and browser headers. Opening Discord or Roblox links connects you to those services. Their processing is described in their own notices. If non-essential tracking is introduced, we will update this notice and provide any legally required choices before it runs.
5. Reasons and legal grounds
Where a legal basis is required, we use information as necessary to provide a service you request or perform an applicable agreement, comply with legal obligations, and pursue legitimate interests in operating secure services, preventing abuse, reviewing applications, and resolving disputes. Legitimate interests are subject to balancing against your rights and reasonable expectations. Where consent is required, we will request it separately and allow withdrawal without affecting earlier lawful processing. We do not treat continued website use as consent to optional tracking.
7. Retention and deletion
Different records have different purposes. Support and intake records may be needed while a matter is open and for an appropriate follow-up period; moderation and security records may be needed to investigate incidents or prevent repeat abuse; community participation records may be needed while an event or result remains relevant. Legal obligations and genuine disputes can require limited further retention.
The current bot does not automatically purge long-lived support, application, moderation, or community records after a fixed number of days. Closing a ticket, leaving a server, removing the bot, or deleting a Discord message does not automatically erase those records. Expired temporary form sessions and rate-limit records are cleaned by background jobs. Ask the operator to review or delete longer-lived records using the contact above.
Deletion must consider database records, message copies sent to Discord, exported transcripts, and provider backups separately. Copies controlled by other recipients may remain under their own obligations. If information must be retained for a legal or safety reason, we will explain the applicable reason where permitted and limit further use.
8. Your choices and privacy requests
Providing information through support, applications, and optional community activities is voluntary, not required by law. Without the information needed for a particular request, we may be unable to process that request or provide that feature. Technical request information is needed to deliver the website, and Discord identifiers are needed to operate bot interactions.
Contact the operator above to request access, correction, deletion, or information about your data. Depending on your location and the applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent, or an appeal of a request decision. Rights can have lawful exceptions. You may complain to your applicable local data-protection authority.
Include the platform, user ID or account name, relevant server or ticket ID if known, and what you want us to do. Do not send a password or token. We may request proportionate information to verify identity or an authorized representative’s authority without collecting unnecessary documentation. We will respond within applicable legal deadlines and explain any permitted extension or refusal.
You can leave optional activities, adjust notification and interest roles, and stop using the bot. These choices do not erase existing records automatically. For data controlled independently by Discord or Roblox, use those platforms’ privacy tools or contact them directly. A parent or guardian may contact us about a child’s information.
9. Children and younger users
Discord features require users to meet Discord’s minimum age in their country. We do not ask users to bypass age requirements or submit sensitive information to prove age in public channels. If you believe a child’s information was collected inappropriately, contact us so we can investigate and take the steps required by law.
Roblox can serve younger audiences. Platform age controls alone do not resolve all obligations for a studio’s own collection or use of children’s data. Before introducing features that require parental notice or consent, we will provide the required information and safeguards. Parents or guardians can contact us about access, correction, or deletion of their child’s information, subject to applicable law and appropriate verification.
10. Security and international processing
We use access controls and configuration safeguards intended to limit access to private records. No online service can guarantee absolute security. If an incident occurs, we will take appropriate action and make notifications where required.
Hosting, platform, and font providers may process information outside your country. Applicable transfer rules depend on the operator’s location, user locations, provider arrangements, and processing regions. Contact us for information about processing locations and transfer safeguards applicable to your information. Nothing in this notice waives protections required by applicable law.
11. Updates and related notices
We will show the effective date above and provide appropriate notice of material changes. New purposes or features may require additional notices or choices before processing begins.
Provider information: Cloudflare, Railway, Discord, Google, and Roblox. Also read our Terms of Service.