Discord Privacy Summary
Discord collects your messages, voice, game activity, and device data — none of it end-to-end encrypted. See the full breakdown of what Discord tracks.
Quick Summary
Discord collects your messages, voice/video activity, device data, and game activity to personalize your experience and serve sponsored content. Messages and calls are not end-to-end encrypted, meaning Discord can access your conversations. Third-party bots and linked apps receive user data when you interact with them.
Why You Should Care About Discord's Privacy Practices
Discord can read every message, voice chat, and video call you have — nothing is end-to-end encrypted by default. Every game you play and app you use is tracked in real-time via Rich Presence and shared with friends and potentially third parties. When you interact with a bot, that bot developer gets your user data. Sponsored Quests track your in-game behavior across integrated games. If you link Spotify, Steam, or other accounts, those data streams merge into your Discord profile.
Why High Exposure?
- Collects 19 types of personal data
- 9 concerning practices identified
- Shares data with 8 third parties
- 9 tracking methods used
- Limited user controls for data management
Privacy Highlights
What They Collect
- Account info (username, email, phone number, date of birth, password)
- Profile info (avatar, bio, pronouns, linked social accounts)
- Payment and billing info (for Nitro subscriptions and purchases)
- Messages, images, videos, and files sent in servers and DMs
- Voice and video call activity (participation duration, frequency)
- Game and app activity via Rich Presence (what you're playing/using, in real-time)
- Server activity (channels visited, reactions, threads, roles)
- Friends list and social connections
- Device info (browser, OS, hardware specs, device IDs)
- IP address and network information
- Usage logs (features used, frequency, session duration)
- IP-derived location (no explicit GPS, but location inferred)
- Cookies and tracking technologies
- Linked third-party account data (Spotify, Steam, Epic, etc.)
- Clyde AI conversation content (your prompts and AI responses)
- Support communications and feedback
How They Share Data
- Other Discord users (within servers and DMs per your settings)
- Bot developers (when you interact with third-party bots)
- Linked third-party services (Spotify, Steam, and other integrations)
- Service providers (cloud infrastructure, Cloudflare, analytics vendors)
- Advertisers and Quest sponsors (sponsored content interactions)
- Law enforcement and government (legal requests and subpoenas)
- Safety and moderation partners (Trust & Safety review)
- Buyers or successors (in M&A transactions)
Data Retention
Account data kept while active; after account deletion, a 14-day grace period applies, then data is permanently removed. Some data may be retained longer for legal compliance, fraud prevention, or safety investigations.
Your Rights
- Access and download your data (Data Export tool)
- Delete your account (with 14-day grace period)
- Edit or remove profile information
- Control privacy settings (message requests, friend requests, server visibility)
- Opt out of personalized recommendations and Quests
- Manage linked accounts (disconnect Spotify, Steam, etc.)
- Submit GDPR/CCPA rights requests (EEA and California residents)
Detailed Analysis
Concerning Practices
- Messages and calls are NOT end-to-end encrypted — Discord can access all message and call content
- Rich Presence tracks every game and app you use in real-time and broadcasts it to your friends (and potentially third parties)
- Bot developers receive your user data (username, avatar, ID) whenever you interact with their bot
- Sponsored Quests track your in-game behavior across integrated games for advertiser measurement
- Linking external accounts (Spotify, Steam) merges those data streams into your Discord profile
- Clyde AI conversations are logged and used to improve services — not treated as private
- Trust & Safety team can review any message content for moderation — no E2E encryption barrier
- IP address always collected — location inferred even without explicit location permission
- M&A data transfer — all user data passes to any acquirer with no separate user consent
Personal Data Types
Tracking Methods
Third Parties
User Controls
Frequently Asked Questions About Discord
Legal Disclaimer
This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.