Effective Date: September 18, 2026
These Attribution and Measurement Terms (“Attribution Terms”) govern your use of Discord’s attribution and measurement services (the “Attribution Services”). These Attribution Terms incorporate by reference and are subject to the Discord Business Services Terms, available at https://support.discord.com/hc/en-us/articles/37866689137431-Advertising-Business-Service-Terms (the “Business Terms”). In the event of any conflict between these Attribution Terms and the Business Terms, the Attribution Terms shall control solely with respect to the Attribution Services. Any terms not specifically defined herein shall have the meaning ascribed to them in the Business Terms.
Section 1: Scope and Purpose
The parties acknowledge that both Discord and you have independently contracted with the third party attribution or measurement service provider ("Attribution Partner") for attribution and/or measurement services which you and Discord have mutually agreed in writing to use for the Purpose specified herein. Discord may use and combine Event Data (defined below) with Discord's own data and other information to create attribution analytics, insights, measurement and reporting ("Attribution Results") and for Discord’s own internal business purposes, including: (i) providing the advertising services; (ii) developing and providing campaign attribution, conversion tracking, analytics, insights and metrics; (iii) creating custom audience for targeting, targeting and optimizing campaigns; (iv) optimizing Discord's systems and services; and (v) developing Discord’s advertising products and services, collectively the “Purpose.”
Section 2: Provision of Event Data
You will (or will cause your Attribution Partner to) provide Discord with the mutually agreed upon event data related to the Ad campaign (inclusive of Quests) where attribution will be conducted, including: (i) conversion events (e.g., app installations, in-app purchases, registrations) and their metadata; (ii) campaign identifiers and their metadata; and/or (iii) other attribution data as agreed by the parties and in support of the Purpose ("Event Data") for Discord's use in connection with Ad campaign(s).
You agree that you or your Attribution Partner are authorized and permitted to: (i) transmit to Discord all agreed Event Data related to the campaign; and (ii) permit Discord to measure, analyze, match against, and report on conversions or actions of end users regarding your application (e.g., online or mobile game), website, digital or physical products or services (e.g., purchases, bookings, subscriptions, registrations, or ticket sales), or other offerings. You agree that Discord may collect, reproduce, compile, match against, combine with other data, use, and take all necessary actions with the Event Data for the Purpose outlined herein.
Section 3:. Use of Attribution Results
Discord may, in its sole discretion, share certain Attribution Results with you in anonymized and/or aggregated form. Attribution Results shared with you may include aggregated campaign performance metrics, conversion insights, or other analytics derived from the Event Data, but will not include individual user data or non-aggregated information. You may use Attribution Results solely to assess the performance of Ad campaign(s) on Discord's platform. You will not: (i) share any Attribution Results with any third party; (ii) attempt to reverse engineer or de-aggregate any Attribution Results; or (iii) use Attribution Results for any purpose other than evaluating campaign performance on Discord.
For the avoidance of doubt, Discord owns all right, title, and interest in: (i) any Attribution Results created by Discord; (ii) any insights, analytics, or reports derived from Event Data; and (iii) any improvements or enhancements to Discord's systems or services resulting from the use of Event Data. Other than the limited right to use Attribution Results as set forth in the paragraph above (if shared by Discord), you have no rights in Discord's Attribution Results, analytics, insights, or related intellectual property.
In addition to the foregoing, and with respect to any data Discord makes available to you under these Attribution Terms, whether directly or through an attribution or measurement partner, you may use that data solely to assess the performance of your Ad campaigns on the Discord platform, and for no other purpose, and you will not sell, share, or otherwise disclose or make that data available to any third party, except to a third party acting as your processor or service provider solely to carry out that purpose on your behalf.
Section 4:. Roles, Data Protection Obligations
a. Definitions
“Applicable Data Protection Laws” means all laws, regulations, and binding requirements relating to data protection and privacy applicable to the processing of Personal Data under this Agreement, including but not limited to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other state, federal, and international data protection laws, as applicable.
“Controller”, “Processor”, “Data Subject”, “Personal Data”, “processing” and other similar terms shall have the meanings given to them in the Applicable Data Protection Laws or, where such terms are not defined, shall have meanings consistent with the concepts described in the Applicable Data Protection Laws.
b. Controller Status
Each Party shall act as an independent Controller with respect to any Personal Data it processes under this Agreement, including the Event Data shared by you with Discord.
c. Security Measures
Each Party shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk presented by processing the Event Data and Attribution Results, including, as appropriate: (i) pseudonymization and encryption of Personal Data; (ii) the ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services; (iii) the ability to restore the availability and access to Personal Data in a timely manner in the event of a physical or technical incident; and (iv) a process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.
d. Personnel
Each Party shall ensure that its personnel authorized to process the Event Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality and terms no less protective than those set forth in these Attribution Terms.
e. Data Transfer Compliance
Each Party shall ensure that any international transfers of Personal Data comply with Applicable Data Protection Laws.
f. Data Retention
Discord may retain Event Data and Attribution Results for as long as necessary for Discord’s business purposes or as required by applicable law.
g. Personal Data Breach Notification and Response
Each Party shall notify the other Party without undue delay and, where feasible, no more than seventy-two (72) hours after becoming aware of a Personal Data breach affecting Event Data or Attribution Results. The notification shall include, to the extent then known: (i) a description of the nature of the Personal Data breach; (ii) the categories and approximate number of Data Subjects concerned; (iii) the categories and approximate number of Personal Data records concerned; (iv) the likely consequences of the Personal Data breach; and (v) measures taken or proposed to be taken to address the Personal Data breach and to mitigate its potential adverse effects. Each Party shall reasonably cooperate with the other Party in investigating, containing, and remediating any Personal Data breach.
h. Data Subject Rights
Each Party shall individually be responsible for: (i) informing Data Subjects about the processing of their Personal Data in accordance with Applicable Data Protection Laws; and (ii) enabling Data Subjects to exercise their rights under Applicable Data Protection Laws (including rights of access, rectification, erasure, restriction of processing, data portability, and objection) with respect to Personal Data for which that Party is the Controller. If a Party receives a Data Subject request relating to Personal Data for which the other Party is the Controller, the receiving Party shall promptly notify and forward such request to the appropriate Party.
i. International Data Transfers
To the extent Event Data or other Personal Data originating from the European Economic Area, the United Kingdom, or Switzerland is transferred to Discord in the United States: (i) such transfers are made in reliance on Discord Inc.'s certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, with respect to Personal Data within the scope of that certification; and (ii) to the extent any such transfer is not covered by that certification, or the applicable framework is invalidated or Discord's certification lapses, the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914), Module One (controller to controller), are incorporated by reference and automatically apply to such transfers, with the Annexes deemed completed by the Transfer Description Schedule (Schedule 1) referenced in these Terms; for transfers from the United Kingdom, the UK International Data Transfer Addendum issued by the Information Commissioner's Office applies; and for transfers from Switzerland, the Standard Contractual Clauses apply as adapted in accordance with the guidance of the Swiss Federal Data Protection and Information Commissioner. The Parties will promptly adopt any additional or replacement transfer mechanism required by Applicable Data Protection Laws.
Section 5:. Additional Warranties; Indemnification.
You represent and warrant that you: (i) have obtained all necessary consents, permissions, and authorizations from Data Subjects or otherwise have a valid legal basis under Applicable Data Protection Laws to collect and share the Event Data with Discord; (ii) have provided appropriate privacy notices to its users informing them that their data may be shared with Discord for Discord’s business purposes; (iii) will maintain appropriate records of consent or other legal bases as required by Applicable Data Protection Laws; (iv) have implemented appropriate technical and organizational measures to protect the Event Data; (v) will notify Discord without undue delay upon becoming aware of any Personal Data breach affecting Event Data; (vi) will ensure that Event Data will not contain any sensitive information or special category data, including but not limited to: (a) health information; (b) financial information; (c) information about racial or ethnic origin, religious beliefs, sex life or sexual orientation; and (d) any Personal Data relating to users under the age of 13 or the applicable age of consent under Applicable Law in the jurisdiction where such data was collected, whichever is greater; (vii) will promptly notify Discord of any complaints relating to Event Data and will reasonably cooperate with Discord in responding to such complaints; and (viii) will only share the Event Data that is directly related to the specific Ad campaign(s) set forth in the applicable IO and only as necessary and consistent with the Purpose.
You shall indemnify, defend, and hold harmless Discord and its affiliates, directors, officers, employees, and agents against all claims, liabilities, costs, expenses, damages and losses (including any direct, indirect or consequential losses, loss of profit, loss of reputation and all interest, penalties and legal costs and all other reasonable professional costs and expenses) (“Claims”) arising from or related to: (i) your breach of Applicable Data Protection Laws relating to Event Data; (ii) your collection, processing, or provision of Event Data to Discord (including any claim made by a Data Subject or supervisory authority with respect thereto); (iii) any breach of the warranties set forth in the paragraph above; or (iv) any claim that your provision of Event Data to Discord violates any third party rights or Applicable Data Protection Laws.
Section 6. Data Clean Rooms.
If agreed by the parties in writing (an email shall suffice), the parties may use a third-party data clean room or similar secure computing environment approved by Discord (“Data Clean Room”) to receive Attribution Results or conduct additional analysis. If you use a Data Clean Room, you agree that you: (a) will not use the Data Clean Room to engage in practices otherwise prohibited by these Attribution Terms or any terms in an IO; (b) will be bound by all restrictions on Attribution Results set forth in these Attribution Terms with respect to any results, metrics, or insights received via the Data Clean Room; and (c) represent and warrant that any data you contribute to the Data Clean Room has been collected and processed in compliance with Applicable Data Protection Laws and does not include any sensitive or special category data.
Schedule 1
SCC Annexes - Transfer Description Schedule
ANNEX I.A
[x] MODULE ONE (Transfer controller to controller)
List of Parties:
Data exporter(s):
Partner who has elected to use the Business Services in conjunction with the applicable Insertion Order or other ordering document.
Role: Controller
Data importer(s):
Name: Discord Inc. and its Affiliates
Address: 444 De Haro Street, Suite 200, San Francisco, CA 94107
Contact person’s name, position and contact details:
Luke Perdue, Data Protection Officer, privacy@discordapp.com
Role: Controller
ANNEX I.B
[x] MODULE ONE (Transfer controller to controller)
Transfer description:
Data subjects: Partner's end users and customers.
Categories: As set forth in Attribution Terms Section 2 and EAPI Terms Section 2.
Sensitive data: none permitted.
Frequency: continuous during the Term.
Purpose: As set forth in Attribution Terms Section 1 and EAPI Terms Section 2.
Retention: Event Data and Attribution Results per Attribution Terms Section 4; Matching Attributes per EAPI Section 5.
ANNEX I.C
Clause 7 - Docking clause: not included.
Clause 13 Competent supervisory authority: Dutch Data Protection Authority to the extent legally permissible.
Clause 17 Governing law: The Netherlands.
Clause 18 Forum: courts of Amsterdam.
ANNEX II
Technical and organizational measures: by reference to Discord’s Data Security Terms currently availalbe at https://support.discord.com/hc/en-us/articles/37894290456087-Data-Security-Terms .
UK ADDENDUM TABLES 1-4 —
Table 1: parties per Annex I.A;
Table 2: Module One, elections as above;
Table 3: appendix information per Annexes I-II;
Table 4: neither party may end the Addendum as permitted by Section 19.