Official Security & Infrastructure Statement
The DONCOR WINGS ecosystem is engineered from the ground up as a fully comprehensive, professional digital product. To ensure absolute data protection and platform resilience, our system architecture was developed in collaboration with dedicated cybersecurity specialists and subjected to rigorous Penetration Testing (Pentesting).
Download Official Statement (PDF)
1. Decentralized OAuth2 Authentication
Our mileage dashboard and Discord Bot utilize industry-standard Discord OAuth2 technology facilitated by the Supabase framework. The ecosystem never collects, processes, or stores raw user credentials (such as passwords). Authentication is delegated entirely to Discord's official secure servers, ensuring your account remains safe.
2. Database Isolation & Row Level Security (RLS)
All application data layers are isolated via PostgreSQL Row Level Security. Public API keys are rigidly sandboxed, preventing unauthorized write mutations. Users possess cryptographic bounds to mutate solely their personal data entries, ensuring cross-profile injections are structurally blocked.
3. Proactive Penetration Testing
Prior to deployment, cybersecurity experts simulated real-world cyberattacks (Pentests) against our infrastructure to safely discover and resolve potential code bugs. Furthermore, our frontend employs a Zero-Trust client rendering methodology, automatically sanitizing structural dynamic data into safe text nodes to prevent XSS injection risks.