DiscordCentral
Built around trust.
How DiscordCentral protects your account and your community.
No secrets in the browser
Discord sign-in uses OAuth with PKCE. Access tokens are encrypted at rest and never sent to the browser. Payment details are handled by the payment provider, not by us.
Checked on the server
Every action is authorized on the server against your Discord identity and the listings you manage. Uploads are re-encoded before they are served, webhooks are signed, and listing ownership is verified with Discord.
Responsible reporting
Found a vulnerability? Send a support request with the subject “Security report” and we will respond privately. Please do not test against other people's communities.