Privacy Policy
Last updated: March 13, 2026
The short version: We collect as little data as possible, we never sell it, and we give you real control over what happens to your information.
What We Collect
DiscAlt is designed to minimize data collection. Here's what we store and why:
- Account information: A username and password (hashed with Argon2id). Email is optional and used only for account recovery if you choose to provide one.
- Messages and content: Messages you send are stored on the server to deliver them to other participants. We do not scan, analyze, or monetize your message content.
- Usage metadata: Minimal metadata necessary for the service to function (e.g., timestamps, channel membership). We do not track behavioral analytics.
What We Don't Collect
- Government-issued identification
- Phone numbers
- Behavioral analytics or tracking data
- Data from third-party advertising or analytics SDKs
How We Protect Your Data
- Passwords are hashed using Argon2id with OWASP-recommended parameters.
- Authentication uses JWT tokens with refresh token rotation.
- IP addresses in rate-limiting systems are hashed, not stored in plaintext.
- Direct messages and group channels support end-to-end encryption, meaning the server cannot read your message content.
- File uploads are planned to have EXIF metadata stripped automatically.
Data Retention and Deletion
You can delete your account at any time. When you do, we remove your account data from our systems. Some messages you sent in shared spaces may remain visible to other participants, but will no longer be associated with your account.
Third-Party Services
The official DiscAlt service may use third-party infrastructure for hosting and delivery. We do not share your data with advertisers, data brokers, or analytics companies.
AI Features
DiscAlt offers optional AI-powered features such as semantic search. These features require explicit opt-in. If you do not enable them, your content is not processed by any AI system. When enabled, processing happens on our infrastructure — your data is not sent to third-party AI providers without clear disclosure.
Changes to This Policy
We'll update this page when the policy changes. Material changes will be communicated through the application.
Contact
Questions about this policy? Reach out at privacy@discalt.com.