This Privacy Policy explains how we collect, use, store, protect, and share your personal information through our services. If you reside in the European Economic Area (“EEA”) or United Kingdom, Discord Netherlands BV is the “data controller” of your personal information collected through the services (as defined in our Terms of Service). For everyone else, Discord Inc. is the data controller. It’s important that you read this entire policy, but here’s a summary to get you started:
We built Discord to be your place to talk. Whether you’re part of a club, gaming group, worldwide art community, or just a handful of friends that want to spend time together, Discord makes it easy to talk every day and hang out more often.
Our “services” has the same meaning as defined in the Terms of Service. They include the Discord app, which can be accessed on mobile, web, desktop, console, or even a connected home appliance—any device with a web browser and internet connection. We also have a website, blog, and support center, and we may collect your information through other means like surveys, emails, and social media.
As explained in our Terms of Service, we allow users to add content to the services in a number of different ways, including via direct messages and in smaller and larger communities. Some of these spaces are public, and if you share content within them, that content may be accessed by many people, including people you do not know. For example, some servers are available in the Server Discovery section of the app and do not require an invite link to join. Other server owners may publish their server invite link on public websites. Anyone can access these servers, and you should be aware that server owners or admins set these permissions, and like the size of a server, the permissions may change over time.
We may also use content posted in public spaces to help power features like Server Discovery and to help us identify harmful content on the services. These features are important to us, and we believe they will make Discord even better for our users. We will always try to let you know what spaces are public within Discord (though we don’t control where invite links are shared or the permissions for that server). And you can control whether your content is used for these purposes as described in the “How to control your privacy” section below. You should take all of this into account when you are using our services, and choose the space, features, and settings that are most appropriate for your content.
We make money from paid subscriptions and the sale of digital (and sometimes physical) goods, not from selling your personal information to third parties.
We collect certain information when you use Discord. This includes information you provide to us, information we collect automatically, and information we receive from other sources.
We also collect information automatically from you when you use Discord. This includes:
We may receive information from cookies (small text files placed on your computer or device) and similar technologies. First-party cookies are placed by us (and our third-party service providers) and allow you to use the services and to help us analyze and improve your experience and the services. You can control cookies as described in the “How to control your privacy” section below. The services use the following types of cookies:
We may receive information about you from other sources, including from other users and third parties, and combine that information with the other information we have about you. For example, if you interact with our social media account on another platform, we may receive certain information about you like your username on that platform.
We use your information for the following purposes:
To fulfill our contract with you
For our legitimate business interests
To comply with our legal obligations
We retain and use your information in connection with potential legal claims when necessary and for compliance, regulatory, and auditing purposes. For example, we retain information where we are required by law or if we are compelled to do so by a court order or regulatory body. Also, when you exercise any of your applicable legal rights to access, amend, or delete your personal information, we may request identification and verification documents from you for the purpose of confirming your identity.
With your consent
We may also collect and use personal information with your consent. You can revoke your consent at any time (mostly through our services directly), though note that you might not be able to use any service or feature that requires collection or use of that personal information.
To protect someone’s vital interests
We may collect or share personal data if we think someone’s life is in danger—for example, to help resolve an urgent medical situation.
We retain personal information for as long as it is needed for the purposes for which we collected it. If your account is inactive for more than two years, we may delete it, and we may delete or anonymize any personal information associated with your account.
If you submit an ID for an age verification appeal, we will delete it within sixty days after the age appeal ticket is closed.
We take a number of steps to help protect your information. All information sent within our services is encrypted both in transit and at rest. For example, we use Transport Layer Security (“TLS”) to encrypt text and images in transit. We also enforce technical and administrative access controls to limit which of our employees and contractors have access to nonpublic personal information. You can help maintain the security of your account by configuring two-factor authentication.
We believe that users should be able to tailor their Discord experience to their preferences, including privacy. And while local laws may require different things, we believe that our users should have the same basic ability to shape their experience no matter where they are in the world. Here’s how you can control how we process your information and how to request access to your information:
Be aware of the Discord spaces you choose to participate in
You can always choose what communities to participate in and what information you add to our services. You can choose what messages to send or post, who to engage with (e.g., one or more particular users or a potentially unlimited group of users), what information to include in your profile, whether to connect any third party services to your Discord account, and more. For example, if you share content in public spaces, it may be accessed by anyone. Public content may also be subject to fewer restrictions under your local laws.
Customize your personal Discord settings
We offer a number of settings that allow you to tailor your experience within Discord. Some of these relate to specific features: for example, you can choose whether to display your current activity in your status via the Activity Status tab in your User Settings page (this is the gear icon next to your name).
You can also access privacy-specific settings in the Privacy & Safety section of your User Settings. For example, you can decide which types of direct messages are scanned for explicit content, who can add you as a friend, and more. This is also where you can restrict certain types of processing of your information:
You can also disable or delete your account via the “My Account” tab on the settings page. Disabling your account stops the processing of new data, but allows you to reactivate your account without interruption to you. Deleting your account permanently deletes identifying information and anonymizes other data.
Manage your content and servers
You may edit or erase specific pieces of information within the services:
Public posts may be retained by Discord for use as described elsewhere in this policy. Also, in limited circumstances, we may have a legal obligation to retain certain information, even if you delete the information or your account.
If you want to see what information we have collected about you, you can request a copy of your data by selecting Request Data in the Privacy & Safety section of your User Settings. You should receive your data packet within 30 days. Data is delivered in common digital formats including CSV, JSON, and any other file format you used when uploading attachments to the services.
To control how information is collected and used from cookies on the services, you can take one or more of the following steps.
If you disable or remove cookies, some parts of the services may not function properly. Information may be collected to remember your opt-out preferences.
Questions or concerns about your privacy? You can email us at privacy@discord.com.
We are based in the United States, and we process and store information on servers located in the United States. We may also store information on servers and equipment in other countries depending on a variety of factors, including the locations of our users and service providers. These data transfers allow us to provide our services to you. By accessing or using our services or otherwise providing information to us, you understand that your information will be processed, transferred, and stored in the U.S. and other countries, where different data protection standards may apply and/or you may not have the same rights as you do under local law.
When transferring data outside the EEA, we use standard contract clauses, and we rely on the European Commission's adequacy decisions about certain countries, as applicable, or other legally compliant mechanisms or conditions for such data transfer.
We also adhere to the EU-U.S. and Swiss-U.S. Privacy Shield Program and comply with its framework and principles. Although the EU-U.S. Privacy Shield Program is no longer a valid basis for certain international data transfers, we continue to comply with the Privacy Shield framework and principles with respect to personal data received from the EU in addition to all other applicable laws.
If you have questions or complaints regarding our compliance with the Privacy Shield principles, please reach out to us at privacy@discord.com. If we do not resolve your complaint, you may submit your complaint free of charge to JAMS. Under certain conditions specified by the Privacy Shield principles, you may also be able to invoke binding arbitration to resolve your complaint. We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. In certain circumstances, we may be liable for the transfer of personal data from the EU, Switzerland, or the UK to a third party outside those countries.
For more information about the Privacy Shield principles and to view our certification, please visit the U.S. Department of Commerce’s Privacy Shield site.
We allow third party developers to build certain features or other services and offer them within the Discord services. For example, server administrators can add “bots” created by third party developers that provide features like content moderation and interactive games. Similarly, you may have access to games or activities built by third parties within the services.
These third-party services need to follow all policies that apply to them (including often our Developer Terms of Service and Developer Policy). As part of these policies, we require developers to have a privacy policy that makes clear what they do with your information. Please review these privacy policies, as they describe what bots and apps may do with your information. We also require that certain popular bots apply for access to certain data. But because these services are operated by third parties, we don’t control them or what information they collect. It’s up to you whether to participate in a server that uses bots, and whether to engage with third-party services in general.
You can contact Discord’s Data Protection Officer at dpo@discord.com.
Certain local laws, such as the European Union’s General Data Protection Regulation (GDPR) and Brazil’s Lei Geral de Proteção de Dados (LGPD), require services to provide information about the information they collect, how they use it, and the lawful basis for processing it. We’ve described most of that already in the earlier portions of this Policy.
Exercising your rights: You can exercise your GDPR rights as described in the “How to control your privacy” section above. If you encounter a problem, reach out to us at privacy@discord.com.
Discord’s UK Representative. We’ve appointed VeraSafe as Discord’s representative in the United Kingdom for data protection matters, pursuant to Article 27 of the UK General Data Protection Regulation. See the section “Contact Us” below.You can contact VeraSafe only on matters related to the processing of personal data.
Consumers residing in California are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act or (“CCPA”) and the “Shine the Light” Law. If you are a California resident, this section applies to you.
Our collection and use of personal information: We collect the following categories of personal information: identifiers (such as your username, the email address you used to sign up, and your phone number if you’ve chosen to provide it); commercial information (a record of what you’ve bought from Discord, if anything); financial data (payment information and your history of purchases from Discord); internet or other network information (how you interact with the application); location information (because your IP address may indicate your general location); inference data about you (for example, what content you may be interested in); and other information that identifies or can be reasonably associated with you. For more information about what we collect and the sources of such collection, please see the “The information we collect” section above. We collect personal information for the business and commercial purposes described in “How we use your information” above.
Disclosure of personal information: We may share your personal information with third parties as described in the “How we share your information” section above. We disclose the categories of personal information mentioned above for business or commercial purposes.
No sale of personal information: The CCPA sets forth certain obligations for businesses that sell personal information. We do not sell the personal information of our users. We do share information as outlined in the “How we share your information” section above and you can make choices with respect to your information as outlined in this policy.
Exercising your consumer rights: If you are a California resident, you have the right to request (1) more information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months, (2) the deletion of your personal information, and (3) to opt out of sales of your personal information, if applicable. Details on how to make these requests are in the “How to control your privacy” section above. We will not discriminate against you if you exercise your rights under the CCPA.
Requests received: please see this page for information on the number of data requests we have received.
We will update this Privacy Policy from time to time. We always indicate the date the last changes were published, and if changes are significant, we’ll provide a more prominent notice as required by law, such as by emailing you or highlighting the changes within the services.
Email us at privacy@discord.com with any questions about this Privacy Policy or how we process your information. We’ll be happy to help.
To contact Discord’s Data Protection Officer, please email dpo@discord.com.
You can also reach us by mail if you want. If you reside in the EEA or United Kingdom, you can contact us at: Discord Netherlands BV ATTN: Privacy Policy Schiphol Boulevard 195 1118BG Schiphol, Amsterdam (NL)
If you reside anywhere else, you can contact us at: Discord Inc. ATTN: Privacy Policy 444 De Haro Street #200 San Francisco, CA 94107, USA.
If you reside in the United Kingdom, you can also contact VeraSafe, Discord’s appointed representative for data protection matters related to the processing of personal data, using this contact form: https://verasafe.com/public-resources/contact-data-protection-representative or via telephone at +420 228 881 031. VeraSafe’s mailing address is:
VeraSafe United Kingdom Ltd. 37 Albert Embankment London SE1 7TL United Kingdom