Summary
Discord has officially ended its partnership with Persona Identities, a company that provides identity verification services. This decision came after researchers discovered the software's code on U.S. government servers. The findings suggested that the software was performing deep background checks and facial recognition against government watchlists. This discovery raised serious privacy concerns for Discord users, leading the platform to cut ties with the vendor after less than a month of testing.
Main Impact
The main impact of this move is a renewed focus on how tech companies handle sensitive user data. Discord is a popular platform for millions of gamers, students, and professionals. When users found out that an age-verification tool might be linked to government surveillance, it caused immediate alarm. By ending the partnership, Discord is attempting to regain user trust. However, the incident highlights the risks of using third-party companies to manage personal identification documents and facial scans.
Key Details
What Happened
Security researchers found nearly 2,500 files belonging to Persona on a U.S. government-authorized server. These files were not hidden behind any security walls. The researchers noted that the software was designed to do much more than just check a person's age. It was built to screen users against lists of "politically exposed persons" and check for "adverse media" related to terrorism and espionage. This suggested a level of monitoring that many users found invasive and unnecessary for a social communication app.
Important Numbers and Facts
The investigation revealed several striking pieces of information. The Persona software was capable of performing 269 different types of verification checks. Researchers found 53 megabytes of data on a government endpoint that used codenames often seen in active intelligence programs. While Discord says only a small number of users were involved in the test, the potential for data storage was a major concern. Discord previously stated that any information submitted would be stored for up to seven days before being deleted, but some users found conflicting information in the company's help documents.
Background and Context
Discord has been trying to improve safety on its platform, especially for younger users. Recently, the company announced that all accounts would have "teen-safety" settings by default. To access certain features, users were asked to verify their age. This often required uploading a government ID or taking a video selfie. Because Discord has suffered data breaches in the past, users were already nervous about sharing their private information. In 2025, a different third-party vendor was hacked, exposing the government IDs of over 70,000 Discord users. This history of security issues made the discovery of Persona's government ties even more controversial.
Public or Industry Reaction
The reaction from the public was swift and mostly negative. Many users felt that Discord was forcing them to choose between their privacy and their ability to use the app. On social media, people pointed out the irony of a privacy-focused platform using a tool backed by Peter Thiel’s Founders Fund, given Thiel's connection to the surveillance company Palantir.
Persona’s CEO, Rick Song, defended his company. He claimed that the files found online were not a security breach but were simply "front-end" code that is already present on users' devices. He denied that Persona has any direct relationship with government agencies like ICE or Palantir. Song argued that the software is designed to be "privacy-forward" and that data is redacted or deleted quickly after a user is verified. He also expressed frustration that researchers were linking his company to government spying programs.
What This Means Going Forward
Discord is now looking for other ways to verify user ages without relying on invasive background checks. The company has stated that it can determine the age of most users using information it already has, such as the date of birth provided during sign-up. For those who still need to verify their age, Discord says it will offer options that do not require uploading a government ID, such as facial scans that stay on the user's device.
For Persona, the loss of the Discord contract is a setback, but the company still provides services to other major platforms like OpenAI, Roblox, and LinkedIn. This incident may lead to more pressure on those companies to explain how they protect user data and whether their verification tools are also linked to government surveillance efforts.
Final Take
This situation serves as a reminder that "free" online services often come with hidden privacy costs. While age verification is important for keeping children safe online, the tools used to do it must be transparent and secure. When a company uses software that can perform hundreds of background checks and stores data on government servers, it crosses a line for many people. Discord’s quick decision to drop Persona shows that user backlash can still force big tech companies to change their plans regarding personal data.
Frequently Asked Questions
Why did Discord stop using Persona?
Discord ended the partnership after researchers found Persona's code on government servers. The code suggested the software was performing surveillance-style background checks that went far beyond simple age verification.
Was my personal data stolen in this incident?
Discord claims that only a small number of users were part of the test with Persona. They also stated that any data collected was meant to be deleted within seven days. There is currently no evidence that a hacker stole user IDs during this specific event.
Does Persona work with the government?
The CEO of Persona denies having a relationship with agencies like ICE or Palantir. However, the company is currently seeking "FedRAMP" authorization, which is a standard required for companies that want to provide cloud services to the U.S. government.