Legal
Privacy Policy
What Loudfire keeps, what it encrypts, and what it hands to nobody. Last updated October 2026.
What we store
- Your Discord ID, username, display name and avatar URL — required to identify the account.
- An email address if you choose to add one for receipts and premium grants.
- Tool configurations you save, including the credentials inside them, encrypted with AES-256-GCM before insertion.
- Deployment records, audit events and login timestamps.
- Session state in an HTTP-only signed JWT cookie (seven days).
What we never store
- Your Discord password — sign-in is OAuth or a one-time code through the manager bot.
- Billing card data — keys are issued manually or through the Discord; no card touches this site.
- Browser fingerprints, advertising identifiers or third-party analytics profiles.
How secrets are handled
- Tokens and passwords are encrypted at rest with a server-side key. The dashboard only ever returns masked values after the first save.
- Decryption happens only inside the worker process that executes your tool, and only for the configuration being deployed.
- API keys are stored as HMAC-SHA256 hashes — the plaintext is shown once at creation and never again.
Who can see your data
- You, through the dashboard.
- The owner, only for account administration (bans, premium grants, abuse investigation). Config secrets are not exposed in the admin panel.
- Nobody else. We do not sell, rent or share data with advertisers.
Retention and deletion
- Configs live until you delete them or your account is removed.
- Login tickets expire automatically from MongoDB after ten minutes.
- Audit logs are retained to investigate abuse and are pruned periodically.
- To delete everything, open a ticket in the Discord. Deletion removes your user record, configs, deployments and keys tied to your account.
Third parties
- Discord — identity, guild data and API calls made by your configured tools.
- MongoDB Atlas — encrypted database hosting.
- Lavalink nodes — audio lookup and playback metadata when you use music tools.
- The VPS provider that hosts the site, manager bot and worker.