Privacy Policy

Last updated: 11 July 2026

The short version. We store only what's needed to run the Service. Discord tokens are encrypted at rest and never shown back to your browser. Your accounts and config are isolated from other users.

1. What we collect

Account data: your username, a securely hashed password (scrypt), and account timestamps.
Discord accounts you add: a display name/label, the Discord identity (id, username, avatar) fetched to verify the token, and the token itself — encrypted with AES-256-GCM before storage.
Configuration: your watch lists, sniper settings, and webhook URL.
Operational logs: a limited audit log of authentication and admin actions (with IP address) for abuse prevention, and in-memory activity logs that are not persisted long-term.

2. How we use it

Data is used solely to provide the Service: to authenticate you, connect the accounts you add to Discord, run the sniper you configure, show your stats and leaderboard position, and keep the platform secure. We do not sell your data or use it for advertising.

3. Discord tokens

Tokens are encrypted before they touch the database and are decrypted only in memory when connecting to Discord. They are never returned to your browser or displayed in the UI after you add them. Deleting an account or your profile removes the associated encrypted tokens.

4. What's public

If you appear on the leaderboard, your display name and total queues-joined count are visible publicly. You can hide yourself entirely at any time using the Private toggle in Settings.

5. Retention & deletion

We keep your data while your account is active. You can permanently delete your account and all associated data (accounts, tokens, config) from Settings → Danger zone. Deletion is immediate and irreversible.

6. Sharing

We share data with Discord only to the extent necessary to operate the accounts you configure. We do not share your data with other third parties except where required by law. Note that dqrkis is not affiliated with Discord Inc.

7. Security

We use encryption at rest for tokens, hashed passwords, per-user data isolation, same-origin and rate-limiting protections, and security headers. No method of storage or transmission is 100% secure, and you accept this residual risk when using the Service.

8. Your rights

You may access, correct, or delete your data at any time through your profile and Settings.

9. Changes

We may update this Policy; material changes are reflected by the "Last updated" date above.