Privacy and account risks

Updated October 6, 2026. Dihlyrics Cloud is an independent service hosted on Daki and accessed through Cloudflare. It is not affiliated with or endorsed by Discord or Spotify.

Sign-in and playback

Discord sign-in takes place on discord.com and requests the identify scope. It identifies your account; it does not grant permission to update your personal status. We use your Discord user ID and display name for your Cloud account. Spotify authorization is separate and supports playback detection.

Optional personal status

This separate feature asks for your personal Discord token, not your password. It sends the token over HTTPS to Dihlyrics on Daki to verify that it belongs to your signed-in account and to update that account's custom status. This is not official Discord OAuth authorization. A personal token grants sensitive account access beyond the status feature.

Discord forbids personal-account automation and may restrict or terminate your account. You may also be logged out. Browser security warnings may occur. Do not bypass those warnings to use this service.

Credential entry is optional. It requires separate account-risk and storage-risk consent. New connections are stored stopped; you must explicitly start updates. Closing the page does not stop a running connection.

Storage and limits of encryption

Cloud stores account settings, presets, lyric caches, authorized playback information and configured service credentials on Daki. Account files are encrypted at rest with a server-held key. The running service and server operators can access decrypted credentials. A compromised server or stolen key can expose them; this is not end-to-end encryption or a guarantee against a breach.

The personal token is not returned by the status API or included in the settings export. It is retained until you disconnect and delete the connection, delete your Cloud data, or the operator removes it. Hosting providers may retain operational logs or backups under their own policies.

Your controls

Use Stop status to halt updates. Disconnect and delete removes the active stored personal-status credential; it does not revoke the credential at Discord or guarantee removal from provider backups. Diagnostics includes deletion of your Cloud account data. Community sharing can publish your selected identity and playback fields; review its settings separately.

Community chat

Chat messages, images, your display name and available public community profile fields are visible to signed-in room members. The latest 500 messages are retained on Daki, encrypted at rest with a server-held key, not end-to-end encrypted. Attachments expire with their messages. GIF favorites are private to your account. Room moderators can review reports, delete messages and suspend chat access.

Local chat uses a separate, revocable chat-only sign-in lasting up to 30 days. Its local connection file is excluded from public exports. It does not transmit your personal Discord credential or grant access to Cloud playback settings. Deleting Cloud account data removes your retained chat messages, favorites and local chat sign-ins; provider backups may remain. GIPHY receives GIF searches and media requests when used.

Other services

Playback and lyrics use configured Spotify and lyric-provider services. Cloudflare handles traffic to this site and Daki hosts the service. These providers process requests under their own policies. Official bot connections are separate from personal-account credentials.

Discord's personal-account automation policy

For project questions or data-removal support, use the Dihlyrics project issue tracker. Never post credentials or private account data there.