Skip to content

Privacy FAQ

Milkshift edited this page Dec 7, 2023 · 16 revisions

Last time this page was updated on version: 1.1.0

How does GoofCord enhance user privacy?

  1. Blocking Tracking: GoofCord prevents network requests to all unwanted tracking URLs, including Youtube and Spotify embed tracking.
  2. Containerizing Discord: GoofCord operates entirely within its standalone environment, ensuring Discord remains isolated within the app.
  3. Message Encryption: GoofCord can securely encrypt all your messages with end-to-end encryption, so no one except you and your recipient could see the messages.
  4. User Agent Masking: GoofCord changes your user agent to a standard Chrome profile, preventing Discord from detecting a custom client.

Does GoofCord improve my security?

  • At the time that this was written (1.1.0) GoofCord doesn't do anything specific to improve security, except for maybe message encryption.
    If security is a paramount concern for you, it is advisable not to use GoofCord. Possible threats include:
    - Discord token stealing
    - Compromise of message encryption passwords
    Both of them are technically achievable with malware. I can't do anything about message encryption passwords as they are already stored encrypted with an OS key. This is not a problem, but can be if you don't use TPM and secure boot (you likely are using them).
    Token stealing prevention is not possible too. There are three types of token stealers, and we can theoretically protect the token only from one of them.
    The best way to protect yourself is to not get any malware in the first place.

How safe is message encryption?

  • Decently safe, current level of security should be more than enough for most users.

What steps can I take personally to improve privacy and anonymity?

  1. Use an encrypted DNS provider that blocks trackers and supports DoH like NextDNS or Quad9. More about it.
  2. Refrain from installing official Discord client on your mobile device. Alternatively, opt for a well-maintained custom mobile client that blocks trackers. You can find custom mobile clients in this list.
  3. Limit the data you provide to Discord. Avoid phone verification, email verification (use an email alias), sharing your birthday, disclosing credit card details, etc.
  4. Don't use Discord for personal, private messages without encryption. Discord can see everything you write.
  5. Don't connect your accounts to Discord through "Connections" or specify them in "About me".
  6. For those aiming to maintain full anonymity, using Discord through TOR from the start is recommended. However, remember that using your real IP address or sharing personal details such as phone numbers, email addresses, credit card numbers, or location in messages nullifies TOR's effectiveness. Respectable VPNs like Mullvad are also an option. More about VPNs
    But honestly, if you care about anonymity so much just don't use Discord.

Credits:

Clone this wiki locally