SwiftBot is built so your server stays yours. Secrets are protected by macOS, app data lives on your machine, and anything that reaches the public internet is opt-in and under your control.
Secrets stay in Keychain
Bot tokens and API keys are stored in the macOS Keychain, not in plain text config files. SwiftBot reads them at runtime through the system Keychain APIs, so they are protected by the same encryption macOS uses for your other credentials.
Local app state
Settings, automation rules, logs, and cached Discord metadata live on the Mac running SwiftBot. Nothing is synced to a SwiftBot-operated server, because there isn't one.
No required hosted account
Remote access is optional and controlled entirely by you. The Admin Web UI can stay local, or you can publish it through your own Web UI, Discord OAuth, and tunnel settings when you choose to.
SwiftBot is free and open source under the MIT license. You can review exactly how secrets and data are handled in the source on GitHub.