Advertising and Analytics Data Sharing

What it is

Discord uses your activity data and shares it with advertising and analytics partners to deliver targeted ads both on and off the platform. This includes both data Discord collects about you and data Discord receives from third-party partners.

Why it matters (compliance & governance perspective)

The policy authorizes sharing of your behavioral activity data with third-party advertising and analytics partners, and discloses receipt of data about you from those same partners, meaning your profile may be enriched by data from outside Discord for ad targeting purposes.

Consumer impact (what this means for users)

Your Discord activity data, including interaction patterns and behavioral information, may be shared with advertising and analytics partners and combined with data those partners hold about you from other sources to deliver targeted advertising. California residents and EU/UK users have opt-out and objection rights for this type of processing.

What you can do

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Advertising data sharing implicates GDPR Articles 6 and 7 for lawful basis and consent, CCPA and CPRA definitions of sale and sharing of personal information for cross-context behavioral advertising, and the EU ePrivacy Directive's cookie consent requirements. The FTC, Irish DPC, and California Privacy Protection Agency are relevant enforcement bodies. GOVERNANCE EXPOSURE: High. The bidirectional data flow between Discord and advertising/analytics partners, including receipt of third-party data to enrich user profiles, represents a significant data sharing arrangement. CPRA's definition of sharing for cross-context behavioral advertising may apply to these data flows regardless of whether monetary consideration is exchanged. JURISDICTION FLAGS: EU/EEA users have a right to object to processing for direct marketing under GDPR Article 21. California residents have a right to opt out of sharing personal information for targeted advertising under CPRA. The UK ICO's guidance on online advertising may also apply. Heightened exposure exists for users in Germany and France given active DPA enforcement in those markets. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should confirm that advertising and analytics partner agreements include appropriate data processing addenda. The receipt of third-party data about Discord users creates joint processing exposure that should be documented in data mapping exercises. COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether opt-out mechanisms for advertising data sharing are functioning and accessible for California residents, and whether consent or legitimate interest assessments for advertising processing meet GDPR standards. Cookie consent mechanisms should be reviewed against ePrivacy requirements.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Data Collection Scope medium
• Content and Activity Data Collection high
• Corporate Transaction Data Transfer medium
• Children Under 13 and COPPA Compliance high
• EU and UK Data Subject Rights medium
• California Resident Rights (CCPA/CPRA) medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.