How the Dashboard Works
This page exists to answer the question people actually have before connecting a Discord account to anything: what does this app see, what does it store, and what does it do with it. Everything below reflects how the Dashboard is actually built, not a general privacy statement.
The short answer
The Dashboard reads your Discord username, avatar, and which servers you own. It does not read your messages, DMs, email address, or anything beyond that. It doesn't sell data, and there's nothing in how it's built that sends your information anywhere beyond what's needed to show you your own servers and let you configure NexaBot.
How login actually works, step by step
- You click Sign in with Discord
- You're sent to Discord's own login page — not a Nexa-branded page,
the real
discord.comOAuth screen, so you're entering your password into Discord itself, never into the Dashboard - Discord asks you to approve a specific, limited set of permissions before sending you back
- Once approved, the Dashboard receives a session token and stores it in
your browser's local storage, tagged
nexa_session - That token is what the Dashboard uses on every future request to prove it's still you — you're not asked to log in again until you sign out or the token expires
Your password is never seen by the Dashboard
Because login happens through Discord's own OAuth screen, your Discord password is typed into Discord, not into anything Nexa built. The Dashboard only ever receives a token — never your password itself.
What data is actually read
| Data | Read? | Used for |
|---|---|---|
| Username | Yes | Displaying who's logged in |
| Avatar | Yes | Displaying your profile picture in the nav |
| Discord user ID | Yes | Identifying your account and matching server ownership |
| List of servers you own | Yes | Populating your server list so you can select one to configure |
| Message content | No | Never requested, never read |
| Direct messages | No | Never requested, never read |
| Email address | No | Never requested, never read |
| Payment or billing info | No | The Dashboard has no billing system today |
What happens after you're signed in
Once you select a server, every setting you view or change — AutoMod config, verification, level roles, and so on — is sent to NexaBot's own backend, tied to that server's ID. The Dashboard itself doesn't retain a separate copy of your configuration; it's a front-end for settings that live with the bot.
Signing out
Signing out clears the session token from your browser and invalidates it on the server side, so a copy of that token sitting in your browser afterward can't be reused.
Does it "steal" your info?
No. To be specific about why: nothing in how the Dashboard is built requests more than username, avatar, ID, and server ownership — there's no mechanism reading messages, DMs, or anything outside that scope, and nothing forwards your data to a third party. If you want the fuller legal language around data handling across all Nexa products, see Terms & Privacy.
You can always double-check this yourself
Discord shows you exactly what permissions any app requests before you approve them — the authorization screen you see when logging in is the real, complete list of what's being requested. Nothing happens outside of what that screen shows you.