YOUR ACCOUNT
Is logging in safe?
Yes. You never type your Discord password on this site, and we can't get into your Discord account even if we wanted to. Here's exactly what happens when you press "Log in with Discord".
What actually happens
- You're sent to discord.com itself. Check the address bar: you log in on Discord's own page, not ours, so your password and 2FA code only ever go to Discord.
- Discord shows you a box saying what we're asking for. It should say only "Access your username, avatar, and banner". If it ever asks for more, don't press Authorize.
- You press Authorize, Discord sends you back here, and we read your Discord name and ID once to know which account is yours. That's it.
What we get
- Your Discord username and display name
- Your Discord user ID (a number, so we can recognise you next time)
- Your avatar and banner (what anyone on Discord can already see)
What we can never see or do
- Your password, 2FA or login codes
- Your email address or phone number
- Your messages, DMs or friends list
- Which servers you're in
- Post, send messages or join servers as you
- Change anything on your Discord account
Why it's built this way
Discord login uses something called OAuth: Discord, not us, decides what an app is allowed to
see, and this site only asks for the smallest permission there is (identify). The short-lived key
Discord gives us is used once to read your name and then thrown away. It's never saved, so there's nothing
to leak and nothing anyone here could use later.
After that, the site remembers you with an ordinary login cookie, just like any other website.
Changed your mind?
You can cut the connection at any time from Discord itself: User Settings → Authorized Apps, find The Buildyard and press Deauthorize. You can also wipe everything this site has stored about you from the bottom of your dashboard (Delete my account). The full details are in the Privacy Policy.