← Perpetua home

Sign-in

Why we use Discord, and what we keep

Perpetua doesn't have its own accounts or passwords. When you apply or add a character, you sign in with the Discord account you already use to talk with us. Discord checks who you are, then tells our site. That's all it does.

What happens when you sign in

  1. You click Continue with Discord and land on discord.com, not our site. You sign in there, with your two-factor code if you use one. Your password never reaches us.
  2. Discord shows exactly what Perpetua is asking for: your basic profile (username, display name, avatar) and your member info in servers, which we use only to check the Perpetua server.
  3. You approve, and Discord sends you back with a one-time code. Our server trades that code with Discord for your profile and your roles in the Perpetua server.
  4. We then revoke Discord's access token straight away. It's never stored anywhere. Your browser gets a random sign-in ID that expires after 12 hours, and that's the only cookie we set.

Why this is safer than a username and password

A site with its own passwords

  • Stores a database of passwords that can leak.
  • People reuse passwords, so one leak can open other accounts.
  • A small guild site rarely has two-factor sign-in, lockouts or breach alerts.
  • Password resets need your email address.

Signing in with Discord

  • We never see or store a password. There's nothing to leak.
  • Discord's own two-factor sign-in, suspicious-login checks and account recovery protect you.
  • We never ask for your email address.
  • You can cut us off anytime from Discord's settings.

Exactly what we keep

InformationKept?Why
Discord user ID, username, display name, avatarYesSo officers know who applied and can find you on the server.
Your roles in the Perpetua serverYesTo recognise existing members and officers. Refreshed each time you sign in.
Characters, availability and application answersYesThat's the roster. Only officers see your answers.
Your passwordNeverWe never receive it. You type it on discord.com.
Email addressNeverWe don't ask Discord for it.
Your other servers, friends, or messagesNeverOur sign-in can't see them.
Discord access tokenNeverRevoked as soon as sign-in finishes.
IP address, tracking or analyticsNoWe don't log them and we don't run trackers or ads.

The site runs on Cloudflare and loads its fonts from Google Fonts. Those services handle your connection the way any website host does.

You're in control

Apply to Perpetua