ClovaX
Add ClovaX to your server — Economy, games, Twitch integration, and moderation. Free.
Join Beta Program

Privacy Policy

Last updated: July 2026

What we collect

Account data. If you sign in (e.g. with Discord), we receive your username, user ID, and related profile information provided by the authentication provider.

Twitch. When you connect your Twitch channel (Twitch Integration), we do not store your Twitch password or login credentials. You sign in on Twitch’s site via OAuth; we only store what is needed to link your channel (e.g. channel ID, link state) and to provide features like chat, watchtime, and loyalty. We do not sell or share this with third parties for marketing.

Epic Games. When you connect an Epic Games account, we never receive or store your Epic password. You sign in on Epic’s own website using OAuth. We store only the minimum needed to keep the connection working — see Epic Games account data below for the full list.

Technical data for security and operation. We collect IP addresses and related technical logs to help secure the service, prevent abuse, and diagnose issues. This data may be processed automatically and reviewed when investigating suspicious activity. We do not sell this data. We retain it for a limited period. This may include:

Why we collect it

We use this information to provide the service, prevent abuse and fraud, protect users and infrastructure, and for debugging and reliability.

How it’s used

Technical and security data is used for security monitoring, rate-limiting, and detecting suspicious traffic. Country data (when collected) is approximate and used only for security and abuse prevention. We do not sell your data to third parties.

Epic Games account data

ClovaX is developing an optional Epic Games account connection built on Epic Account Services. Connecting is entirely voluntary, is started only by you, and can be undone at any time. This section describes how the connection handles data.

Availability. The integration is currently in a private beta, available only to the ClovaX operator and a limited number of Discord users the operator has explicitly approved as beta testers. It is not available to the general public, and no Epic account data belonging to anyone outside this approved group is collected or stored. See the Epic Games Integration page for the current development status.

What we request. We request the minimum Epic permission needed: Basic Profile. We do not request permissions we do not use.

What we store. When a connection is made, we store only:

What we do not collect. We do not request, receive, or store your Epic password, email address, real name, date of birth, country, payment information, purchase history, or friends list. We do not read Epic data belonging to anyone other than the connected account holder.

How it is used. Epic data is used solely to operate the features you connected the account for: showing your connection status, keeping the access token valid, and — where Epic permits it — reading your own game progression to display back to you. We do not use Epic data for advertising, profiling, marketing, training machine-learning models, or any purpose beyond what is described here.

Fortnite progression data (experimental). Where supported and authorized by Epic, ClovaX may retrieve progression information belonging to the connected account, such as supported item identifiers, levels, experience, and mastery state. Availability depends on Epic’s services and authorization, and this capability is experimental during the private beta. Where it is available, we store only a derived summary of that progression. We do not store raw profile responses in normal operation. Diagnostic copies, if ever created, are redacted of credentials, restricted to a private development environment, never published or served over the web, and deleted after use.

Security. Epic tokens are encrypted at rest using AES-256-GCM. Tokens are never written to logs, never shown in the dashboard or in Discord, never included in URLs or API responses, and never exposed to browser or client-side code.

Sharing. We do not sell, rent, trade, or share Epic account data with any third party. It is not used for advertising and is not transferred to data brokers or analytics providers. The only recipient of your data is Epic itself, when ClovaX makes an authorized request on your behalf.

Retention and deletion. Epic data is kept only while your account is connected. Running /epic disconnect deletes the stored connection, both tokens, any pending sign-in state, and any cached game progression, and asks Epic to revoke the tokens. You may also revoke ClovaX independently at any time from your Epic account settings under Apps and Accounts; doing so ends our access even if you never contact us.

Epic’s own handling of your data. Epic Games is a separate controller of the data it holds about you. Their practices are described in the Epic Games Privacy Policy.

Retention

Security and access logs are kept for a limited time (configurable by the operator, for example 30–90 days) and then purged or rotated. We may retain anonymized or aggregated data for longer where necessary for operation. Connected-account data — including Epic and Twitch connections — is retained only for as long as the connection exists, and is deleted when you disconnect.

Sharing

We do not sell or share your data with third parties for marketing. We may disclose data when legally required or when necessary to protect the service (e.g. abuse investigations or lawful requests).

Cookies and local storage

We use session and authentication cookies to keep you signed in, and may use local storage for preferences (e.g. theme). These are necessary for the operation of the dashboard.

Your choices

Connecting any third-party account (Discord, Twitch, Epic Games) is optional and always initiated by you. You may disconnect at any time, which deletes the stored connection data for that service. You may also request account deletion or ask privacy-related questions by contacting us (see Contact). We will respond in a reasonable time.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, obtain a copy in a portable form, object to or restrict its processing, and withdraw consent you previously gave. Withdrawing consent does not affect processing that already took place. You may exercise any of these rights using the Contact details below, and we will not treat you differently for doing so. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Children’s privacy

ClovaX is not directed at children. You must meet the minimum age required by Discord, Twitch, and Epic Games for their respective services in your country. We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes. The “Last updated” date above reflects the most recent revision. Material changes affecting connected accounts will be reflected here before they take effect.

Contact

For privacy questions or requests — including access, correction, or deletion of your data — please visit our Support page, which lists the current way to reach the ClovaX operator.

Trademarks and affiliation

ClovaX is an independent project. It is not affiliated with, endorsed by, sponsored by, or approved by Epic Games, Inc., Discord Inc., or Twitch Interactive, Inc. Epic, Epic Games, the Epic Games logo, Fortnite, and the Fortnite logo are trademarks or registered trademarks of Epic Games, Inc. Other names are the property of their respective owners.