Privacy Policy

Summary

Elixcord is a client modification for Discord. Most functionality (plugins, themes, settings, keybinds) runs entirely on your device and is never sent to us.

A small set of opt-in features talk to our backend at elixcordweb.pages.dev:

• Signing in with Discord (OAuth2, scopes identify and guilds.join) — stores your Discord user ID, username, display name, avatar URL, and OAuth access/refresh tokens so you stay signed in. We never see your Discord password.
• Cloud Settings Sync — your full plugin configuration, if you turn this on, linked to your Discord user ID so it can be restored on another device.
• Per-plugin sync — individual plugins may store settings server-side, keyed by plugin name and your Discord user ID, with a private/public toggle you control.
• 2FA vault backup — the TOTP Manager stores only an encrypted envelope (AES-256-GCM + ChaCha20-Poly1305) that we can never decrypt.
• Custom profile badges — any badge image you choose to upload, linked to your Discord user ID.
• Plugin likes — which plugins you liked, linked to your Discord user ID.

If you never sign in with Discord inside Elixcord, none of the above applies to you.

Logs

Our servers process standard technical logs (IP address, user agent, timestamps) for rate-limiting and abuse prevention, like virtually any web service. We do not use third-party analytics or advertising trackers, do not read or store your messages, DMs, or calls, and do not sell or share data with advertisers or data brokers.

Discord

Since Elixcord modifies the official Discord client, all messaging, calls, and server activity still happen through Discord's own infrastructure and is governed by Discord's Privacy Policy.

Deletion

You can erase all cloud data at any time from the client's Cloud settings ("Erase all data"), or by contacting us. The DELETE endpoints are always available to your account's own credentials.