We retain personal information for as long as it is needed for the purposes for which we collected it. In general, this means that we retain your personal data for as long as you have an active Discord account. Some information you can delete directly from the services. We may also retain information for a certain period of time for specific purposes as described below.
Information you can delete directly from the services
You may edit or erase content that you post within Discord. For example:
- You can edit or delete any message you have sent or content you have posted if you still have access to the space where you posted it.
- You can edit or delete a Discord server if you have the permissions needed to do so.
- You can edit or delete a channel from a Discord server if you have the permissions needed to do so.
Information retained until your account is deleted
We keep some data for the life of your Discord account. This includes information about how you use Discord, which helps us understand how users interact with our services, what features or products users may want, or how to improve our services. This also includes information like your username, email, and phone number. Some of that information may be kept for longer periods for specific purposes, as described below. You can delete your account at any time, and if your account is inactive for two years, we may delete it for you. For more on our deletion processes, see the “What happens when you delete your account” section below.
Retention periods for specific purposes
Business and legal requirements may mean that we need to retain certain information for set periods of time, some of which may extend beyond the deletion of your account. For each type of information, we set these data retention periods based on the reason for its collection:
- Age verification. If you submit an ID for an age verification appeal, we will delete it within sixty days after the age appeal ticket is closed.
- Backups. Our database backups are stored for 30-45 days upon which they are deleted.
- Compliance with our legal obligations. We may need to retain certain information for longer periods to comply with legal requirements. For example, when you purchase something through Discord, we need to retain information related to that transaction for specific periods for tax and accounting purposes.
- To meet our safety and security commitments. We retain certain information (including email addresses and phone numbers) for 180 days after deletion for trust and safety purposes. If a user has been reported or flagged for violations of our Terms of Service or Community Guidelines, we may retain this information for up to two years. This information helps us keep Discord secure, prevent fraud, or prevent bad actors from creating new accounts or otherwise engaging in behavior that violates our policies.
- To exercise or defend legal claims. When you contact Discord directly (such as for customer support inquiries and requests to access your information), we retain related information for five years from the closure of your request in case of a dispute or to exercise or defend our legal rights.
- Continuity of our service: If you delete your account, we continue to retain and display the content you shared with other users, but that content is no longer tied to your account. We do this in order to ensure that other users continue to have access to the content shared with them. If you want to delete specific content, please do so before you delete your account. You can delete specific content as described in the “Information you can delete directly from the services” section above, or if you need help deleting content, you can write in to email@example.com.
What happens when you delete your account
When you delete your account, we will typically first put your account on hold for 15 to 30 days so that it can be recovered in case it was deleted unintentionally. Once that period expires, we begin the process of deleting identifying information and anonymizing or aggregating other information. Most of this happens quickly (unless the information is subject to a longer retention period as described above), but it can take up to 45 days to delete identifying information from backups. We retain aggregated and anonymized information, which is information that no longer enables us to identify you and is no longer tied to you as an individual.
- Right of access to your personal data
- Right to rectify your personal data if they are incorrect
- Right to erase your personal data
- Right to limit the processing of your personal data
- Right to the portability of your personal data
- Right to object to the processing of your personal data
If you have any questions about data retention or our deletion practices, or if you wish to exercise control over your information, please reach out to firstname.lastname@example.org.