Privacy
Policy

When the DNUKZ client runs on a target machine (with the user's consent), it collects the following forensic data categories. None of this data is read in its full form — only metadata and identifiers are captured.

Additionally, when you log in to the DNUKZ web panel via Discord OAuth, we collect your Discord user ID, username, and avatar hash in order to manage your account and role.

DNUKZ is designed with a minimal data principle. We explicitly do not collect:

• The contents of any files, documents, images, or videos
• Browser history, cookies, or saved passwords
• Keystrokes, clipboard contents, or screen captures
• Email, messages, or communication data
• Financial information, payment data, or credentials
• Any data from outside the gaming/forensic scope defined above

All data collected by DNUKZ is used exclusively for the following purposes:

• Generating scan reports for the server administrator who requested the scan
• Maintaining a scan history log within the admin dashboard
• Hardware ID tracking to identify ban evasion across accounts
• Improving detection accuracy through aggregate (anonymized) signature analysis

We do not sell, rent, or trade any user data to third parties. We do not use collected data for advertising purposes.

DNUKZ uses Discord's OAuth2 system for authentication. When you log in, Discord provides us with:

• Your Discord user ID (numerical)
• Your Discord username and discriminator
• Your Discord avatar hash
• A temporary OAuth access token (used to verify your identity, not stored long-term)

We do not request access to your friends list, direct messages, email address, or any server you belong to beyond confirming membership in the DNUKZ server for role verification. Discord's own privacy policy governs how Discord handles your data on their platform.

All scan data is transmitted over encrypted connections (HTTPS/TLS) to our server infrastructure. Data at rest is stored in a secured database on our VPS, accessible only to authorized DNUKZ administrators.

• Session data is stored server-side and expires after 7 days of inactivity
• Scan reports are stored per-administrator and are not visible to other users
• Database access is restricted by server firewall and role-based access controls

While we implement industry-standard security measures, no system is 100% immune to breach. In the event of a data breach affecting user data, affected users will be notified via Discord.

We retain data for the following periods:

• Account data (Discord ID, username): retained while your account is active
• Scan reports: retained for 90 days, then automatically purged
• Access PIN records: retained for 12 months for audit purposes
• Server logs: retained for 30 days

You may request deletion of your account and associated data at any time by contacting us through Discord.

DNUKZ interacts with the following third-party services:

• Discord — authentication and role management (discord.com/privacy)
• Google Fonts — font delivery (CDN, no personal data shared)
• Cloudflare — DDoS protection and CDN (may process IP addresses)

No scan data is ever shared with any third party, including Discord.

As a user of DNUKZ, you have the right to:

• Request a copy of all data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent for scanning at any time (by simply not running the client)
• Lodge a complaint with a relevant data protection authority in your jurisdiction

To exercise any of these rights, open a support ticket in the DNUKZ Discord server.

DNUKZ does not knowingly collect data from children under the age of 13. If we become aware that a user under 13 has provided us with personal data, we will delete that data immediately. If you believe a child has used our service without parental consent, please contact us immediately.

For any privacy-related questions or data requests, contact us through our official Discord server. We aim to respond to all privacy inquiries within 48 hours.