Is a Discord chat exporter safe?

Any exporter that works with your account uses your Discord session (often called a "token"), which works like a password. Whoever holds it can act as you on Discord. That's why it matters which servers an exporter sends it to.

1. 1

   Where does my session go? Check which servers the exporter contacts besides Discord.

2. 2

   Where do my messages go? They should stay in files on your computer.

3. 3

   What permissions does it ask for? Access to "all websites" is broader than an exporter needs.

4. 4

   Do I have to paste my token? Pasting tokens into apps or websites is risky.

• Session

  Your Discord login stays in your browser. DiscordSuite uses the Discord session you already have open. It never asks for your password, and your login is never saved or sent anywhere except Discord.

• Messages

  Exports are built on your computer. Your messages are never uploaded to us.

• Our server

  The extension only sends your license key to our server. If you buy a license, Stripe or PayPal passes us your email so we can send you the key. Card details stay with Stripe or PayPal. We never receive your Discord login, messages or exports.

• Tracking

  No analytics or tracking, in the extension or on the website.

• Permissions

  discord.com and Discord's media domains, plus activeTab, scripting, storage, downloads and offscreen.

• Limited pasting

  You only paste your own bot token if you use member export, and a license key if you buy a paid tool.

The privacy policy sets out the same points formally.

Draft — pending owner approval (Puerto Rico counsel review recommended). DiscordSuite is not affiliated with Discord. Chat export uses the Discord session already open in Chrome. Automated access to user accounts may violate Discord's Terms of Service, and Discord can restrict, suspend or terminate accounts. We do not promise that using a chat exporter is permitted, or that it is safe for your account. You accept that risk.

DiscordSuite runs when you start an export, reads chats you can already open, and follows Discord's rate limits. It does not post, edit or delete Discord messages. That is a description of how the extension behaves, not a promise of how Discord will treat any account. Avoid exporting huge amounts at once. The binding terms are on the terms page.

The open-source desktop app DiscordChatExporter carries a similar warning in its README about automating user accounts.

Bots added to a server can export data within Discord's rules for bots, but bots can't read your DMs, and you need permission to add a bot. DiscordSuite's chat export uses your own account, not a bot. Its member list export is the exception: it uses your own bot through Discord's official API. More questions about permissions and data are answered in the FAQ.