Discord: Difference between revisions
m Added clean-up tag. |
|||
| (6 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
{{Cleanup|reason=References need to be properly formatted. See [[Template:Cite web]].}} | |||
{{CompanyCargo | {{CompanyCargo | ||
|Founded=2015 | |Founded=2015 | ||
|Industry=VoIP communications, instant messaging, videoconferences, content delivery, and social media | |Industry=VoIP communications, instant messaging, videoconferences, content delivery, and social media | ||
| Line 8: | Line 8: | ||
|Website=https://discord.com | |Website=https://discord.com | ||
|CompanyAlias=Discord Inc. | |CompanyAlias=Discord Inc. | ||
|Description=American technology company that runs a platform for messaging and calling targeted towards gamers. | |||
}} | }} | ||
'''Discord''' is a proprietary VoIP and instant-messaging platform developed by Discord Inc. (formerly Hammer & Chisel, Inc.), co-founded by Jason Citron and Stanislav Vishnevskiy.<ref>{{Cite web |last=Gonzalez |first=Guadalupe |date=3 May 2018 |title=There Are 2.6 Billion Online Gamers in the World. This Startup Just May Connect Them All |url=https://www.inc.com/guadalupe-gonzalez/30-under-30-2018-discord.html |url-status=live |archive-url=https://web.archive.org/web/20180503131556/https://www.inc.com/guadalupe-gonzalez/30-under-30-2018-discord.html |archive-date=3 May 2018 |access-date=13 Jul 2025 |website=Inc.}}</ref> Launched in 2015, the service has grown to over 150 million monthly active users as of 2025. While initially marketed towards PC gamers, Discord has expanded to multiple platforms, serving various communities and use cases, including education.<ref name="about-company">{{Cite web |date=15 Apr 2024 |title=About Discord <nowiki>|</nowiki> Our Mission and Values |url=https://discord.com/company/ |url-status=live |archive-url=https://web.archive.org/web/20250608013037/https://discord.com/company |archive-date=8 Jun 2025 |access-date=13 Jul 2025 |website=Discord}}</ref> | '''Discord''' is a proprietary VoIP and instant-messaging platform developed by Discord Inc. (formerly Hammer & Chisel, Inc.), co-founded by Jason Citron and Stanislav Vishnevskiy.<ref>{{Cite web |last=Gonzalez |first=Guadalupe |date=3 May 2018 |title=There Are 2.6 Billion Online Gamers in the World. This Startup Just May Connect Them All |url=https://www.inc.com/guadalupe-gonzalez/30-under-30-2018-discord.html |url-status=live |archive-url=https://web.archive.org/web/20180503131556/https://www.inc.com/guadalupe-gonzalez/30-under-30-2018-discord.html |archive-date=3 May 2018 |access-date=13 Jul 2025 |website=Inc.}}</ref> Launched in 2015, the service has grown to over 150 million monthly active users as of 2025. While initially marketed towards PC gamers, Discord has expanded to multiple platforms, serving various communities and use cases, including education.<ref name="about-company">{{Cite web |date=15 Apr 2024 |title=About Discord <nowiki>|</nowiki> Our Mission and Values |url=https://discord.com/company/ |url-status=live |archive-url=https://web.archive.org/web/20250608013037/https://discord.com/company |archive-date=8 Jun 2025 |access-date=13 Jul 2025 |website=Discord}}</ref> | ||
| Line 14: | Line 16: | ||
==Consumer impact summary== | ==Consumer impact summary== | ||
===Privacy=== | |||
===Privacy<ref name="terms-of-service3">[https://discord.com/terms/ "Discord's Terms of Service"]. April 15, 2024. ''Discord''. Retrieved January 16, 2025. ([https://web.archive.org/web/20260216033955/https://discord.com/terms/ Archived])</ref> | Mentioned within the '''Discord ToS'''<ref name="terms-of-service3">[https://discord.com/terms/ "Discord's Terms of Service"]. April 15, 2024. ''Discord''. Retrieved January 16, 2025. ([https://web.archive.org/web/20260216033955/https://discord.com/terms/ Archived])</ref> and '''Privacy Policy''':<ref name="privacy-policy3">[https://discord.com/privacy/ "Discord Privacy Policy"]. April 15, 2024. ([https://web.archive.org/web/20260216034021/https://discord.com/privacy/ Archived]) ''Discord''. Retrieved January 16, 2025.</ref><ref name="community-guidelines2">[https://discord.com/guidelines/ "Discord Community Guidelines"]. April 15, 2024. ''Discord''. Retrieved January 16, 2025. ([http://web.archive.org/web/20260216015550/https://discord.com/guidelines Archived])</ref> | ||
*Collects a variety of user data, such as contact details; user generated messages and posts, including drafts; voice messages; payment information; server participation; device information, such as games being playing; log and event information related to use of Discord services as well as information from [[Web cookie|cookies]] and third party sources<ref>{{Cite web |date=2025-08-29 |title=Privacy Policy: The information we collect |url=https://discord.com/privacy#3 |url-status=live |access-date=2026-02-20 |website=Discord |archive-url=http://web.archive.org/web/20260128220720/https://discord.com/privacy |archive-date=28 Jan 2026}}</ref> | *Collects a variety of user data, such as contact details; user generated messages and posts, including drafts; voice messages; payment information; server participation; device information, such as games being playing; log and event information related to use of Discord services as well as information from [[Web cookie|cookies]] and third party sources<ref>{{Cite web |date=2025-08-29 |title=Privacy Policy: The information we collect |url=https://discord.com/privacy#3 |url-status=live |access-date=2026-02-20 |website=Discord |archive-url=http://web.archive.org/web/20260128220720/https://discord.com/privacy |archive-date=28 Jan 2026}}</ref> | ||
*Claims broad rights to user-generated content | *Claims broad rights to user-generated content | ||
*Stores deleted messages for undefined periods | *Stores deleted messages for undefined periods | ||
*Deleting your account does not delete your messages, must delete messages before account deletion | |||
*Retains personal information until deemed "no longer needed" | *Retains personal information until deemed "no longer needed" | ||
*Processes user content for "safety features and platform improvement" | *Processes user content for "safety features and platform improvement" | ||
| Line 52: | Line 54: | ||
===Bulk message deletion=== | ===Bulk message deletion=== | ||
Discord provides no in-app bulk message deletion; instead, you must [https://support.discord.com/hc/en-us/articles/360004027692-Requesting-a-Copy-of-your-Data request your data], then send Discord support a data deletion request via their [https://support.discord.com/hc/en-us/requests/new?ticket_form_id=4750383925911 privacy form]. You must provide the desired message id’s and the channel id’s they were sent in, which makes this process difficult. | Discord provides no in-app bulk message deletion; instead, you must [https://support.discord.com/hc/en-us/articles/360004027692-Requesting-a-Copy-of-your-Data request your data], then send Discord support a data deletion request via their [https://support.discord.com/hc/en-us/requests/new?ticket_form_id=4750383925911 privacy form]. You must provide the desired message id’s and the channel id’s they were sent in, which makes this process difficult. You will receive your data to the email tied to the account. If you change the email before receiving the data, your data will not be redirected to the new email. Your request will also be canceled if you disable or delete your account before receiving the data. | ||
Once discord begins message deletion it can take up to 24 hours for all requested messages to be deleted. After 24 hours have passed, you'll need to request your data package again to confirm all requested messages have been deleted. You can only request your data again 30 days after you previously requested data. | |||
A third-party website, [https://discorch.org/ Discorch], makes this process significantly easier. Discorch contains more information relevant to this topic, and detailed instructions that should be followed exactly. Discord will likely reply with "This channel is reserved for individuals...", rejecting your data deletion request. Due to this, Discorch provides a response for you to send back to Discord. Discord will also refuse to delete messages you have access to, so you must leave relevant servers and group DMs before sending a data deletion request, and can only rejoin after the messages have been deleted. If you have deleted your account, you cannot delete your messages. | |||
In order to delete DMs in bulk you must use [https://github.com/Darker-Ink/DiscorchDeleter DiscorchDeleter], which is against Discord | When requesting your data, you only need your message data. It can take up to 30 days to receive your data, once you have it you can use Discorch. According to Discorch:<blockquote> ''"Discord acts in malicious compliance with the GDPR. You are not allowed to delete your DMs through their support flow, since you can always regain access to a DM, technically speaking, since you are always a member of the DM channel on their backend."''</blockquote>In order to delete DMs in bulk you must use [https://github.com/Darker-Ink/DiscorchDeleter DiscorchDeleter], which is against Discord's ToS (as it's considered self-botting), it'll automatically delete messages for you. By default the deletion interval tries to comply with Discord's ratelimits, so an account termination is unlikely, though use at your own risk. You may get rate-limited, in which case you need to increase the deletion interval. DiscorchDeleter requires your data package and will also work outside of DMs if you'd like to avoid discord support or remain in relevant servers and group DMs. | ||
DiscorchDeleter requires [https://chromewebstore.google.com/detail/violentmonkey/jinjaccalgkegednnccohejagnlnfdag ViolentMonkey] and [https://chromewebstore.google.com/detail/vencord-web/cbghhgpcnddeihccjmnadmkaejncjndb Vencord (browser version)]. Discorch provides downloads for all of these, including DiscorchDeleter. | DiscorchDeleter requires [https://chromewebstore.google.com/detail/violentmonkey/jinjaccalgkegednnccohejagnlnfdag ViolentMonkey] and [https://chromewebstore.google.com/detail/vencord-web/cbghhgpcnddeihccjmnadmkaejncjndb Vencord (browser version)]. Discorch provides downloads for all of these, including DiscorchDeleter. ViolentMonkey requires a browser that supports Manifest V2, so consider using [https://brave.com/ Brave] or [https://www.firefox.com/en-US/ Firefox]. | ||
==Incidents== | ==Incidents== | ||
===Introduction of forced arbitration ( | ===Introduction of forced arbitration (''2018'')=== | ||
In October 2018, [[forced arbitration]] was added to the [[Terms of Service|terms of service]]. Users could opt out by sending an 'opt-out notice' to [email protected] within 90 days of the ToS going in effect or registering their first account.'''<ref name="terms-of-service3" />''' | In October 2018, [[forced arbitration]] was added to the [[Terms of Service|terms of service]]. Users could opt out by sending an 'opt-out notice' to [email protected] within 90 days of the ToS going in effect or registering their first account.'''<ref name="terms-of-service3" />''' | ||
===Child safety concerns ( | ===Child safety concerns (''2023'')=== | ||
An [[wikipedia:NBC News|NBC News]] investigation in June 2023 uncovered widespread child safety issues on Discord, revealing systemic problems with the platform's user protection measures. | An [[wikipedia:NBC News|NBC News]] investigation in June 2023 uncovered widespread child safety issues on Discord, revealing systemic problems with the platform's user protection measures. | ||
Investigators identified 35 separate cases where adults were criminally charged with "kidnapping, grooming, or sexual assault" involving contacts initiated through Discord. Additionally, 165 criminal prosecutions involving the sharing of child sexual exploitation material (CSAM) on the platform were documented.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite id="CITEREFGoggin2023" class="citation web cs1">Goggin, Ben (21 Jun 2023). [https://www.nbcnews.com/tech/social-media/discord-child-safety-social-platform-challenges-rcna89769 "Child predators are using Discord, a popular app among teens, for sextortion and abductions"]. ''NBC News''. [https://web.archive.org/web/20230621152318/https://www.nbcnews.com/tech/social-media/discord-child-safety-social-platform-challenges-rcna89769 Archived] from the original on 21 Jun 2023<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=NBC+News&rft.atitle=Child+predators+are+using+Discord%2C+a+popular+app+among+teens%2C+for+sextortion+and+abductions&rft.date=2023-06-21&rft.aulast=Goggin&rft.aufirst=Ben&rft_id=https%3A%2F%2Fwww.nbcnews.com%2Ftech%2Fsocial-media%2Fdiscord-child-safety-social-platform-challenges-rcna89769&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | Investigators identified 35 separate cases where adults were criminally charged with "kidnapping, grooming, or sexual assault" involving contacts initiated through Discord. Additionally, 165 criminal prosecutions involving the sharing of child sexual exploitation material (CSAM) on the platform were documented.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite id="CITEREFGoggin2023" class="citation web cs1">Goggin, Ben (21 Jun 2023). [https://www.nbcnews.com/tech/social-media/discord-child-safety-social-platform-challenges-rcna89769 "Child predators are using Discord, a popular app among teens, for sextortion and abductions"]. ''NBC News''. [https://web.archive.org/web/20230621152318/https://www.nbcnews.com/tech/social-media/discord-child-safety-social-platform-challenges-rcna89769 Archived] from the original on 21 Jun 2023<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=NBC+News&rft.atitle=Child+predators+are+using+Discord%2C+a+popular+app+among+teens%2C+for+sextortion+and+abductions&rft.date=2023-06-21&rft.aulast=Goggin&rft.aufirst=Ben&rft_id=https%3A%2F%2Fwww.nbcnews.com%2Ftech%2Fsocial-media%2Fdiscord-child-safety-social-platform-challenges-rcna89769&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | ||
===FTC data collection investigation ( | ===FTC data collection investigation (''2024'')=== | ||
In September 2024, the [[Federal Trade Commission]] (FTC) released a comprehensive report examining Discord's data collection practices as part of a broader investigation into the data collection practices of social media platforms.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite class="citation web cs1">[https://www.ftc.gov/system/files/ftc_gov/pdf/Social-Media-6b-Report-9-11-2024.pdf "A Look Behind the Screens: Examining the Data Practices of Social Media and Video Streaming Services"] <span class="cs1-format">(PDF)</span>. ''Federal Trade Commission''. 11 Sep 2024. [https://web.archive.org/web/20240919133855/https://www.ftc.gov/system/files/ftc_gov/pdf/Social-Media-6b-Report-9-11-2024.pdf Archived] <span class="cs1-format">(PDF)</span> from the original on 19 Sep 2024<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Federal+Trade+Commission&rft.atitle=A+Look+Behind+the+Screens%3A+Examining+the+Data+Practices+of+Social+Media+and+Video+Streaming+Services&rft.date=2024-09-11&rft_id=https%3A%2F%2Fwww.ftc.gov%2Fsystem%2Ffiles%2Fftc_gov%2Fpdf%2FSocial-Media-6b-Report-9-11-2024.pdf&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | In September 2024, the [[Federal Trade Commission]] (FTC) released a comprehensive report examining Discord's data collection practices as part of a broader investigation into the data collection practices of social media platforms.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite class="citation web cs1">[https://www.ftc.gov/system/files/ftc_gov/pdf/Social-Media-6b-Report-9-11-2024.pdf "A Look Behind the Screens: Examining the Data Practices of Social Media and Video Streaming Services"] <span class="cs1-format">(PDF)</span>. ''Federal Trade Commission''. 11 Sep 2024. [https://web.archive.org/web/20240919133855/https://www.ftc.gov/system/files/ftc_gov/pdf/Social-Media-6b-Report-9-11-2024.pdf Archived] <span class="cs1-format">(PDF)</span> from the original on 19 Sep 2024<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=Federal+Trade+Commission&rft.atitle=A+Look+Behind+the+Screens%3A+Examining+the+Data+Practices+of+Social+Media+and+Video+Streaming+Services&rft.date=2024-09-11&rft_id=https%3A%2F%2Fwww.ftc.gov%2Fsystem%2Ffiles%2Fftc_gov%2Fpdf%2FSocial-Media-6b-Report-9-11-2024.pdf&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | ||
| Line 93: | Line 93: | ||
The FTC concluded that Discord's data practices posed unacceptable risks to users, particularly minors, and recommended significant reforms to the platform's privacy protection measures.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite id="CITEREFTolentino2024" class="citation web cs1">Tolentino, Daysia (19 Sep 2024). [https://www.nbcnews.com/tech/security/social-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814 "Social media companies engaged in 'vast surveillance,' FTC finds, calling status quo 'unacceptable'<span class="cs1-kern-right"></span>"]. ''NBC News''. [https://web.archive.org/web/20240919171049/https://www.nbcnews.com/tech/security/social-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814 Archived] from the original on 19 Sep 2024<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=NBC+News&rft.atitle=Social+media+companies+engaged+in+%27vast+surveillance%2C%27+FTC+finds%2C+calling+status+quo+%27unacceptable%27&rft.date=2024-09-19&rft.aulast=Tolentino&rft.aufirst=Daysia&rft_id=https%3A%2F%2Fwww.nbcnews.com%2Ftech%2Fsecurity%2Fsocial-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | The FTC concluded that Discord's data practices posed unacceptable risks to users, particularly minors, and recommended significant reforms to the platform's privacy protection measures.<ref><templatestyles src="Module:Citation/CS1/styles.css"></templatestyles><cite id="CITEREFTolentino2024" class="citation web cs1">Tolentino, Daysia (19 Sep 2024). [https://www.nbcnews.com/tech/security/social-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814 "Social media companies engaged in 'vast surveillance,' FTC finds, calling status quo 'unacceptable'<span class="cs1-kern-right"></span>"]. ''NBC News''. [https://web.archive.org/web/20240919171049/https://www.nbcnews.com/tech/security/social-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814 Archived] from the original on 19 Sep 2024<span class="reference-accessdate">. Retrieved <span class="nowrap">13 Jul</span> 2025</span>.</cite><span title="ctx_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=unknown&rft.jtitle=NBC+News&rft.atitle=Social+media+companies+engaged+in+%27vast+surveillance%2C%27+FTC+finds%2C+calling+status+quo+%27unacceptable%27&rft.date=2024-09-19&rft.aulast=Tolentino&rft.aufirst=Daysia&rft_id=https%3A%2F%2Fwww.nbcnews.com%2Ftech%2Fsecurity%2Fsocial-media-companies-engaged-vast-surveillance-ftc-finds-calling-sta-rcna171814&rfr_id=info%3Asid%2Fconsumerrights.wiki%3ADiscord" class="Z3988"></span></ref> | ||
===Reinforcement of forced arbitration ( | ===Reinforcement of forced arbitration (''September 2025'')=== | ||
Announced August 29th, 2025, and put into effect September 29th, 2025, Discord updated and re-iterated their [[forced arbitration]] clause but gave users another option to opt-out of forced arbitration until October 29th, 2025, for existing accounts, or 30 days after initial agreement for new accounts.<ref>{{Cite web |date=2025-09-29 |title=Discord's Terms of Service |url=https://discord.com/terms#16 |url-status=live |archive-url=https://web.archive.org/web/20251007023150/https://discord.com/terms#16 |archive-date=2025-10-07 |access-date=2025-10-07 |website=Discord.com}}</ref> Users are automatically opted into the forced arbitration clause unless they take specific action to opt out of it within 30 days. Instead, if users chose to delete their accounts, the platform required them to accept the terms in order to access their account, from which they could then delete it, making acceptance of the new terms mandatory. | Announced August 29th, 2025, and put into effect September 29th, 2025, Discord updated and re-iterated their [[forced arbitration]] clause but gave users another option to opt-out of forced arbitration until October 29th, 2025, for existing accounts, or 30 days after initial agreement for new accounts.<ref>{{Cite web |date=2025-09-29 |title=Discord's Terms of Service |url=https://discord.com/terms#16 |url-status=live |archive-url=https://web.archive.org/web/20251007023150/https://discord.com/terms#16 |archive-date=2025-10-07 |access-date=2025-10-07 |website=Discord.com}}</ref> Users are automatically opted into the forced arbitration clause unless they take specific action to opt out of it within 30 days. Instead, if users chose to delete their accounts, the platform required them to accept the terms in order to access their account, from which they could then delete it, making acceptance of the new terms mandatory. | ||
[[File:Discord ToS update 2025.png|thumb|200px|alt=An example of Discord forcing users to agree to arbitration if they want to continue using the application.|(2025-09-29) An example of Discord forcing users to agree to arbitration if they want to continue using the application. The terms of service at the time of this screenshot includes forced arbitration and disallows users from filing a class-action lawsuit.<ref>{{Cite web |last=Discord |date=2025-09-29 |title=Terms of Service {{!}} Discord |url=https://discord.com/terms |url-status=live |access-date=2025-09-29 |website=Discord}} ([http://web.archive.org/web/20260222174800/https://discord.com/terms Archived])</ref>]] | [[File:Discord ToS update 2025.png|thumb|200px|alt=An example of Discord forcing users to agree to arbitration if they want to continue using the application.|(2025-09-29) An example of Discord forcing users to agree to arbitration if they want to continue using the application. The terms of service at the time of this screenshot includes forced arbitration and disallows users from filing a class-action lawsuit.<ref>{{Cite web |last=Discord |date=2025-09-29 |title=Terms of Service {{!}} Discord |url=https://discord.com/terms |url-status=live |access-date=2025-09-29 |website=Discord}} ([http://web.archive.org/web/20260222174800/https://discord.com/terms Archived])</ref>]] | ||
===Third- | ===Third-party customer service data breach (''October 2025'')=== | ||
{{Main|Discord / 5CA Data Breach}} | {{Main|Discord / 5CA Data Breach}} | ||
In October 2025, Discord issued a press release announcing a "Security Incident Involving Third-Party Customer Service [5CA]", in which "the unauthorized party [...] gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination," as well as other personal data provided to support.<ref name=":2">{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251006163040/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=2025-10-06 |access-date=2025-10-07 |website=Discord}}</ref> The number of ID images accessed was approximately 70,000, and the third-party in question was later named as 5CA.<ref name=":2" /> The hackers involved in the breach have revealed that the data was accessed via Zendesk.<ref>{{Cite web |last=Hunt |first=Troy |date=2025-10-04 |title=X |url=https://x.com/troyhunt/status/1974558088847102289}}</ref><!-- Any better sources? The tweet referred to by this person is not archived. --> | In October 2025, Discord issued a press release announcing a "Security Incident Involving Third-Party Customer Service [5CA]", in which "the unauthorized party [...] gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination," as well as other personal data provided to support.<ref name=":2">{{Cite web |date=2025-10-03 |title=Update on a Security Incident Involving Third-Party Customer Service |url=https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |url-status=live |archive-url=https://web.archive.org/web/20251006163040/https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service |archive-date=2025-10-06 |access-date=2025-10-07 |website=Discord}}</ref> The number of ID images accessed was approximately 70,000, and the third-party in question was later named as 5CA.<ref name=":2" /> The hackers involved in the breach have revealed that the data was accessed via Zendesk.<ref>{{Cite web |last=Hunt |first=Troy |date=2025-10-04 |title=X |url=https://x.com/troyhunt/status/1974558088847102289}}</ref><!-- Any better sources? The tweet referred to by this person is not archived. --> | ||
===Announcement of age verification coming in March ( | ===Announcement of age verification coming in March (''February 2026'')=== | ||
<!-- Above under the incidents "Child safety concerns" (June 2023) and "FTC data collection investigation (Sept. 2024), there is implied criticism of Discord for failing to protect child safety and insufficient age verification. This age verification measure could then be seen as Discord trying to address these criticisms. In order for this page have a coherent stance on companies responsibility regarding child safety and the use of age verification, it might be necessary to articulate (either here or linked to a separate page) why this widespread age verification is a violation of consumer privacy rights and its ineffectiveness at improving child safety. [A main article has been already created, added the link here] --> | |||
{{Main|Discord's Mandatory Age Verification}} | {{Main|Discord's Mandatory Age Verification}} | ||
In February 2026, Discord issued a press release announcing "enhanced teen safety features rolling out globally", which begins with a "rollout to new and existing users in early March", that may require users "to engage in an age-verification process to change certain settings or access sensitive content".<ref>{{Cite web |date=2026-02-09 |title=Discord Launches Teen-by-Default Settings Globally |url=https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally |url-status=live |archive-url=https://web.archive.org/web/20260209142047/https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally |archive-date=2026-02-09 |access-date=2026-02-09 |website=Discord}}</ref> | In February 2026, Discord issued a press release announcing "enhanced teen safety features rolling out globally", which begins with a "rollout to new and existing users in early March", that may require users "to engage in an age-verification process to change certain settings or access sensitive content".<ref>{{Cite web |date=2026-02-09 |title=Discord Launches Teen-by-Default Settings Globally |url=https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally |url-status=live |archive-url=https://web.archive.org/web/20260209142047/https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally |archive-date=2026-02-09 |access-date=2026-02-09 |website=Discord}}</ref> | ||
| Line 119: | Line 123: | ||
Discord has a [[Inactive account deletion|deletion policy on inactive accounts]], in which accounts that are not used for 2 years or more may be scheduled for deletion. Before the deletion of an inactive account, users may receive an email or text message warning that their account is scheduled for deletion. Such policies could adversely affect those who had good reasons to become inactive for a long time, such as hospitalization, prison incarceration, and being in totalitarian countries that have prolonged internet shutdowns. <ref>{{Cite web |last=Librarian |date=2023-06-14 |title=Inactive Account Deletion |url=https://support.discord.com/hc/en-us/articles/5106714856215-Inactive-Account-Deletion |url-status=live |archive-url=http://web.archive.org/web/20260210025748/https://support.discord.com/hc/en-us/articles/5106714856215-Inactive-Account-Deletion |archive-date=2026-02-10 |website=Discord}}</ref> | Discord has a [[Inactive account deletion|deletion policy on inactive accounts]], in which accounts that are not used for 2 years or more may be scheduled for deletion. Before the deletion of an inactive account, users may receive an email or text message warning that their account is scheduled for deletion. Such policies could adversely affect those who had good reasons to become inactive for a long time, such as hospitalization, prison incarceration, and being in totalitarian countries that have prolonged internet shutdowns. <ref>{{Cite web |last=Librarian |date=2023-06-14 |title=Inactive Account Deletion |url=https://support.discord.com/hc/en-us/articles/5106714856215-Inactive-Account-Deletion |url-status=live |archive-url=http://web.archive.org/web/20260210025748/https://support.discord.com/hc/en-us/articles/5106714856215-Inactive-Account-Deletion |archive-date=2026-02-10 |website=Discord}}</ref> | ||
===SDK vulnerability with Arc Raiders integration (March 2026)=== | ===SDK vulnerability with Arc Raiders integration (''March 2026'')=== | ||
In March 2026, Timothy Meadows, a computer engineer discovered a privacy and security vulnerability that involved Discord's [[wikipedia:Software_development_kit|software developer kit (SDK)]] and integrations with the [[wikipedia:Arc_Raiders|Arc Raiders]] game.<ref>{{Cite web |last=Meadows |first=Timothy |date=3 Mar 2026 |title=Arc Raiders - Discord SDK Data Exposure |url=https://timothymeadows.com/arc-raiders-discord-sdk-data-exposure/ |url-status=live |archive-url=https://archive.is/pktbu |archive-date=2026-03-06 |access-date=8 Mar 2026 |website=timothymeadows.com}}</ref> This vulnerability affected the users with their Discord account linked with the game, allowing the software to log and store locally Discord private conversations, user credentials and other user information in an unencrypted log file. If the Arc Raiders game crashes, this file could be sent to the game developers. Embark Studios disabled the SDK integration after the incident was announced. <ref>{{Cite web |last=Klotz |first=Aaron |date=Mar 2026 |title=Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file — vulnerability in SDK could log messages and credentials in plaintext |url=https://www.tomshardware.com/video-games/pc-gaming/arc-raiders-was-accidentally-recording-discord-conversations-into-an-unencrypted-local-game-file-vulnerability-in-sdk-could-log-messages-and-credentials-in-plaintext |url-status=live |archive-url=https://archive.is/kWBIf |archive-date=2026-03-07 |access-date=8 Mar 2026 |website=Tom's Hardware}}</ref> <ref>{{Cite web |last=Marnell |first=Blair |date=6 Mar 2026 |title=Arc Raiders Was Recording Private Discord DMs |url=https://www.gamespot.com/articles/arc-raiders-was-recording-private-discord-dms/1100-6538629/|url-status=live |archive-url=https://archive.is/2ZQ1M |archive-date=2026-03-08 |access-date=8 Mar 2026 |website=Gamespot}}</ref> | In March 2026, Timothy Meadows, a computer engineer discovered a privacy and security vulnerability that involved Discord's [[wikipedia:Software_development_kit|software developer kit (SDK)]] and integrations with the [[wikipedia:Arc_Raiders|Arc Raiders]] game.<ref>{{Cite web |last=Meadows |first=Timothy |date=3 Mar 2026 |title=Arc Raiders - Discord SDK Data Exposure |url=https://timothymeadows.com/arc-raiders-discord-sdk-data-exposure/ |url-status=live |archive-url=https://archive.is/pktbu |archive-date=2026-03-06 |access-date=8 Mar 2026 |website=timothymeadows.com}}</ref> This vulnerability affected the users with their Discord account linked with the game, allowing the software to log and store locally Discord private conversations, user credentials and other user information in an unencrypted log file. If the Arc Raiders game crashes, this file could be sent to the game developers. Embark Studios disabled the SDK integration after the incident was announced. <ref>{{Cite web |last=Klotz |first=Aaron |date=Mar 2026 |title=Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file — vulnerability in SDK could log messages and credentials in plaintext |url=https://www.tomshardware.com/video-games/pc-gaming/arc-raiders-was-accidentally-recording-discord-conversations-into-an-unencrypted-local-game-file-vulnerability-in-sdk-could-log-messages-and-credentials-in-plaintext |url-status=live |archive-url=https://archive.is/kWBIf |archive-date=2026-03-07 |access-date=8 Mar 2026 |website=Tom's Hardware}}</ref> <ref>{{Cite web |last=Marnell |first=Blair |date=6 Mar 2026 |title=Arc Raiders Was Recording Private Discord DMs |url=https://www.gamespot.com/articles/arc-raiders-was-recording-private-discord-dms/1100-6538629/|url-status=live |archive-url=https://archive.is/2ZQ1M |archive-date=2026-03-08 |access-date=8 Mar 2026 |website=Gamespot}}</ref> | ||
Before the incident was known, when an user linked their Discord account, a pop-up claimed that Arc Raiders "cannot read users' messages". {{ | Before the incident was known, when an user linked their Discord account, a pop-up claimed that Arc Raiders "cannot read users' messages". <ref>{{Cite web |last=Makar |first=Connor |date=2026-03-05 |title=Embark Studios rushes to fix Arc Raiders Discord integration bug as "serious privacy and security violations" may have exposed private Discord DMs, friends data, more |url=https://www.eurogamer.net/arc-raiders-discord-messages-security-problem-fix-incoming |url-status=live |website=Eurogamer}}</ref><ref>{{Cite web |last=Parker |first=Lewis |date=2026-03-05 |title=Arc Raiders Rushes Out Emergency Fix After Its Discord Accidentally Spied On Players |url=https://kotaku.com/arc-raiders-hotfix-discord-integration-2000676444 |url-status=live |website=Kotaku}}</ref><ref>{{Cite web |last=Lowry |first=Brendan |date=2026-03-05 |title=ARC Raiders recorded private Discord DM messages between players in "serious privacy and security violations" — Embark promises that your data is safe |url=https://www.windowscentral.com/gaming/arc-raiders-recorded-private-discord-messages-between-players-in-serious-privacy-and-security-violations |url-status=live |website=Windows Central}}</ref> | ||
===Discord banning users taking action against child predators (April | ===Discord banning users taking action against child predators (''April 2025—'')=== | ||
[[File:Discord's protection of pedophiles.png|thumb|First | [[File:Discord's protection of pedophiles.png|thumb|First offense is a 24-hour mute, with it as an active violation that stays on a user's profile for up to four years, when going after active child predators.]] | ||
Since April 2025, users have been reported their accounts have been banned after taking action against child sexual predators instead of banning the predator themselves. When an account is banned for this, the reason given is [https://discord.com/safety/hateful-conduct-policy-explainer "hateful conduct policy"] The ban grants a 24-hour mute, making users unable to talk or interact with others. This account flag might stay up to four years. <ref>{{Cite news |last=Lim |first=Alex |date=24 Apr 2025 |title=Why Did Discord Make the Controversial Decision to Shut Down Ro-Cleaner? |url=https://pupuweb.com/why-did-discord-make-the-controversial-decision-to-shut-down-ro-cleaner/ |url-status=live |archive-url=https://web.archive.org/web/20250425034609if_/https://pupuweb.com/why-did-discord-make-the-controversial-decision-to-shut-down-ro-cleaner/ |archive-date=25 Apr 2025 |access-date=25 Apr 2025 |work=Pupuweb}}</ref> [https://www.youtube.com/watch?v=XJD9MQLaQ-g No Text To Speech's video] explains this incident with more details on YouTube. | Since April 2025, users have been reported their accounts have been banned after taking action against child sexual predators instead of banning the predator themselves. When an account is banned for this, the reason given is [https://discord.com/safety/hateful-conduct-policy-explainer "hateful conduct policy"] The ban grants a 24-hour mute, making users unable to talk or interact with others. This account flag might stay up to four years.<ref>{{Cite news |last=Lim |first=Alex |date=24 Apr 2025 |title=Why Did Discord Make the Controversial Decision to Shut Down Ro-Cleaner? |url=https://pupuweb.com/why-did-discord-make-the-controversial-decision-to-shut-down-ro-cleaner/ |url-status=live |archive-url=https://web.archive.org/web/20250425034609if_/https://pupuweb.com/why-did-discord-make-the-controversial-decision-to-shut-down-ro-cleaner/ |archive-date=25 Apr 2025 |access-date=25 Apr 2025 |work=Pupuweb}}</ref> [https://www.youtube.com/watch?v=XJD9MQLaQ-g No Text To Speech's video] explains this incident with more details on YouTube. | ||
==Solution to delete an account without agreeing to the updated ToS== | ==Solution to delete an account without agreeing to the updated ToS== | ||