Privacy and local data

Discord Enhanced starts a local HTTP server bound to 127.0.0.1 for its settings panel. Runtime data is stored in:

com.buzs.discord.ulanziPlugin/.data/index.json

The file contains the local server port, an internal inspector token and encrypted Discord credentials. The Client Secret uses AES-256-GCM with a key derived from the local machine and plugin UUID.

The plugin communicates with Discord Desktop over local IPC or the legacy localhost RPC fallback, and with discord.com during OAuth token exchange. Never publish a Client Secret in an issue, repository or screenshot.