Platform

Security and privacy

How your tokens, files and data are protected.

Bot tokens are encrypted at rest and never exposed to the browser.
Every table uses row-level security, so you only ever read your own data.
Admin and Developer actions require a server-verified role, not a client flag.
Marketplace images and project files are stored privately and served through short-lived signed URLs.
Crypto payments are only credited after a signature-verified provider callback.

Never share your Discord token in a listing description, screenshot or support message. If you think it leaked, reset it in the Developer Portal and paste the new one in Settings.