The Notice Board supports guest posting with a signed anonymous browser identifier. Optional website-only accounts store a username, display name, private email, password hash, role, creation date and sessions in D1. Account emails and password hashes are never shown in public posts.
Turnstile and limited security metadata protect public forms and registration. Forum notices and replies are public; pending submissions are visible only to moderators. Bug reports are visible only to the development team. Community Guides and their vote scores are public, but member email addresses and internal account IDs are not. Creator Program applications store the submitted email, creator links, application answers, consent confirmations, review status and private reviewer notes in D1. These application details are visible only to authorised staff; approved public spotlights show only the creator name, staff-written description and consented links. There are no advertising trackers and no sale of personal data.
Discord receives only official announcements if the developer explicitly enables the optional webhook.