Privacy policy

Zendha requests the Discord identify scope. That scope provides your Discord user id, username, global display name, and avatar. Email addresses, messages, and server memberships are not requested.

Those fields are stored in the workspace database with your session. The browser only receives an HTTP-only cookie that points at the current session, so page scripts cannot read it. Signing out deletes that session record and the cookie.

Signed-in users can view moderation records from a separate database: bans, warnings, whitelist applications, direct and test-server whitelists, job cooldowns, and rejoin members. Those pages only read the records.

The Discord client secret and the session signing key stay in server environment variables. They are not sent to the browser and are not written to local storage.

Compact layout is the only preference saved on this device, and it stays in local storage in your browser.