1. Overview
NightCord is a client modification for Discord. Most of what it does : plugins, themes, settings, keybinds : runs entirely on your device and never touches our servers. A small number of optional features (signing in with Discord, syncing your settings or plugin configuration to the cloud, custom profile badges) do talk to our backend at api.nightcord.st. Those features are opt-in: if you never sign in with Discord inside NightCord, we do not have an account for you and do not store any Discord-account data tied to you.
NightCord is not affiliated with, endorsed by, or operated by Discord Inc. Using NightCord modifies the official Discord client/web app, and all messaging, calls, and server activity still happen through Discord's own infrastructure and is governed by Discord's Privacy Policy. This document only covers data handled by NightCord itself.
2. Data that stays on your device
The following is stored only locally (browser storage on the device, or local files for the desktop app) and is never sent to us:
- Your plugin and theme settings, keybinds, and UI preferences.
- Locally cached Discord data needed to render the client (the same kind of cache the official Discord app keeps).
- Data created by individual plugins that are explicitly local-only : for example, a PIN/passcode set in a lock-screen style plugin is hashed and stored only on your device; we never see the plaintext PIN and it is never uploaded anywhere.
3. Data collected when you use optional account features
Some features require signing in with Discord via OAuth2. You are always shown Discord's own consent screen before this happens, and you can use NightCord fully without ever doing this.
3.1 Discord sign-in
When you choose to sign in with Discord inside NightCord, our backend requests the identify and guilds.join scopes from Discord and receives:
- Your Discord user ID, username, display name, and avatar URL.
- An OAuth access token and refresh token, which we store so you stay signed in without re-authenticating every time.
We never see or store your Discord password : authentication happens entirely on Discord's side. The guilds.join scope is used only to let you join the NightCord community server directly from the sign-in flow; it is not used to add you to any other server.
3.2 Cloud Settings Sync (opt-in)
If you turn on "Sync to Cloud", your full NightCord configuration (plugin settings, enabled plugins, and similar preferences) is uploaded to our server and linked to your Discord user ID, so it can be restored on another device. This only happens when you explicitly enable it, and you can delete it at any time (see Section 7).
3.3 Per-plugin sync (opt-in)
Certain plugins offer their own "sync" toggle. When enabled, that plugin's settings are stored on our server, keyed by the plugin name and your Discord user ID. Each plugin's synced data has a private/public toggle that you control:
- Private (default) : only you can read or write it.
- Public : other NightCord users can look up that one plugin's config for your Discord user ID (for example, to import a shared setup). No other account data is exposed through this.
3.4 Custom profile badges
If you use the custom profile/badge features, any badge image you choose to upload is stored on our server and linked to your Discord user ID so it can be shown to other NightCord users who view your profile.
3.5 Community-role cosmetic badges
NightCord can grant cosmetic badges (e.g. "Supporter", "Helper", "Server Booster") based on the roles you hold in the official NightCord Discord server. To do this, we store your Discord user ID together with the relevant role/badge identifiers. This only applies if you are a member of that server.
4. Username history lookups
Some profile-related features let you look up a Discord user's previous usernames. To provide this, the Discord user ID you look up is forwarded, on demand, to a third-party username-history provider. We do not log who performed the lookup, and this only happens when a lookup is actively requested : it is not run automatically in the background.
5. Standard technical logs
Like virtually any website or API, our servers (nightcord.st and api.nightcord.st) process standard connection information for every request : IP address, browser/user-agent string, requested URL, and timestamp. This is used only for keeping the service running: rate-limiting, abuse prevention, and debugging. We do not use this data for advertising, profiling, or analytics, and we do not sell or share it with data brokers or ad networks.
We also keep a small set of aggregate, non-personal counters (for example, total download counts per release channel) that are not tied to any individual user or IP address.
6. What we do not collect
- We do not embed any third-party analytics, advertising, or tracking SDKs in the desktop app, browser extension, or userscript.
- We do not read, store, or transmit your Discord messages, DMs, calls, or server content.
- We do not collect your Discord password : sign-in happens entirely through Discord's own OAuth flow.
- We do not collect precise/GPS location data.
7. Your choices and how to delete your data
Every server-side feature described above is opt-in. If you never sign in with Discord inside NightCord, none of Section 3 applies to you. If you have signed in, you can:
- Turn off Cloud Settings Sync or any individual plugin's sync toggle at any time.
- Switch any plugin's synced data between private and public.
- Use the "Delete Cloud Account" option in NightCord's settings to erase your OAuth session, cloud-synced settings, and associated server-side data in one action.
If you'd like help with a data request and can't find the option in-app, reach out through our Discord server or open an issue on our issue tracker, and we'll action it.
8. Browser extension permissions
The NightCord browser extension requests access to discord.com (to inject the client modification, the same way the desktop app patches the desktop client) and to raw.githubusercontent.com (used solely to fetch update/asset files : no personal data is sent in these requests).
The extension's store listing may declare optional data collection categories such as "authentication information." That category corresponds exactly to the opt-in Discord sign-in described in Section 3 : it is only collected if and when you actively choose to sign in, and never otherwise. We do not collect precise location data; any such category declared defensively in a store listing is not actively used by the extension.
9. Security
Account-linked data (OAuth tokens, synced settings, badge data) is stored in our own database and is not shared with advertisers or data brokers. As with any online service, no method of storage or transmission is perfectly secure, but we limit what we collect to what each opt-in feature actually needs.
10. Children's privacy
NightCord is a modification for Discord, which requires users to meet Discord's own minimum age requirement. NightCord does not knowingly collect data from children below that age.
11. Changes to this policy
We may update this page as features change. Material changes will be reflected here with an updated "Last updated" date above.
12. Contact
Questions about this policy or your data can be sent through our Discord server, Telegram, or by opening an issue on our issue tracker.
