Bulk Deleting Discord Messages and GDPR Compliance #429
Replies: 127 comments 630 replies
|
I wasn't able to achieve this. I tried to contact support and told them I want to delete these messages on this specific channel. Also gave them the specific ids for server and channel. But they said they don't bulk-delete messages because my messages serve important context to the conversation. Even though that channel is constantly getting messages and nobody reads older messages in that specific channel. |
|
Thanks for the reply and I'll do that |
|
Were you able to get them to do it? |
|
I'll give an proper update once Discord answers to my latest email |
|
To note, I haven't contacted DPA yet and I haven't made that point that when deleting account the messages won't be removed, to support. They have kept saying to me that "they are happy to delete specific messages which are in inaccessible areas." To be clear my messages aren't in "inaccessible areas" but I still provided them the IDs (all message IDs and the specific channel ID) but haven't heard from them since. |
|
I have one question. Ultimately, in order to delete messages in Chrome, you only use one file called 'deleteDiscordMessages.user'. Question 1: Why are there multiple directories and files other than 'deleteDiscordMessages.user'? I don't use them. Question 2: When I try to code and use it in IDE, an error always occurs. How did you code it? I use vscode. |
|
I just wanna pop in and say some things from my experience the first email had a great response and they basically said give the channel ID’s and message ID’s and they’ll take care of it for us problem is there was about 50k messages we sent a second email and we got a different individual this person we felt like we were talking to a robot who 100% was copying and pasting the same email to everyone from the looks of the tread we got the same email twice there was 2 people trying to get messages deleted in our group. The email caused outrage I am not even joking they said the equivalent of your personal data is not important to us we care more about other individuals then you because it might cause confusion for them we know it’s your personal data but we don’t care we understand it’s your right to request it to be removed but we don’t care about that either again others are more important than you thank you very much that’s basically what they told us. Personal note’s You can get your messages deleted as per your rights even if it means you have to bully them into doing it they literally got find €800,000 as of recently by a French company for breaking GDPR they were withholding data for people who haven’t used Discord for years and not informing individuals that they were still in calls after they have turned off Discord i’m pretty sure there’s other things too but that’s the bullet points (In our situation we got everything dealt with privately with the server owner) Discord will cave the law is on your side especially if your a European Citizen you just gotta keep pushing it. Also it is completely unreasonable how much you have to do in order to get them deleted in the first place it should just be an email with the server ID and then it be the end of it especially for non-tech savvy people. PS: thanks to abbydiode for their help. |
@surfaceflinger thank you for the reply and the kind advice. I tried installing Violentmonkey but Chrome Web store doesn't have it available anymore and said, "This extension is no longer available because it doesn't follow best practices for Chrome extensions." So I tried using Tampermonkey. I heard Google just made an update so maybe that is the reason I cannot install the userscript? By the way I forgot to mention Abigail in my previous message. I just edited it to include her mention, will she be notified? |
idk, probably not
Probably because of mv2 deprecation. If you managed to install tampermonkey then it should work as well. But please try to do a bulk removal through the support first. |
Noted, I will listen to your advice. Do you happen to know if/when Discord will implement the ability for users to do it themselves? or if there are currently any efforts to start lawsuits (class action or otherwise) to push Discord to implement the feature for all users? Just FYI, I did install Tampermonkey but as previously mentioned, a pop-up said "Apps, Extensions and User scripts cannot be added from this website". But, I think I can use Discrub, with caution. |
Hey @abigailwillow sorry if this pings you repeatedly, I just decided to add this extra message and draw your attention to my original message in case you were not notified, as surfaceflinger told me you might not be. |
No worries, this thread has just grown incredibly rapidly, and I've been quite busy and unable to keep up with every single post in this thread. Luckily, there are lots of helpful people who have been active here from the start who are still responding very often. I presume you are the same person who emailed me yesterday. I'll give you a more in-depth reply later, but for now, I just want to say that I do not think a class-action lawsuit is realistic in this scenario, as messages are not inherently PII. Additionally, please take into account the disclaimer at the end of my original post. I do believe it would benefit Discord more if they voluntarily implemented a bulk-deletion option, or simply opted to delete messages along with user accounts upon account deletion. But whether they will do this is something that I have absolutely no insight into. I hope that the popularity of this thread and similar bulk-deletion tools might push them to one day implement it themselves. But perhaps that is wishful thinking. |
|
I’m currently experimenting whit template’s with my friends and sending them to Discord. If we find a working one i’ll make sure to let everyone know and make a video on it that way everyone can have there rights respected. I’m going to post my third draft of the template I would really appreciate if there’s any comments you can make to make it better or share a working one you have so I can improve on it. Everyone is welcome to use this one I don’t know if it works yet were currently finding out. This is the one going to be sent to discord we will find out soon. |
|
Hello I’d like my personal data regarding my messages deleted. Channel ID’s I’d like all messages in those channel’s to be deleted i’m not giving message ID’s because I want everything gone which should be easy for you considering you have the channel’s and my account. I understand you might have concerns about the context for other users. I don’t really care about the context for other users my privacy should come first and if you disagree that’s a conversation you should have with my national data protection authority’s. I’m exercising my right to be forgotten thanks. PS: I’d recommend adding bulk deletion as an option in the privacy section of Discord It would be beneficial for everyone. Including those who can’t delete all messages off of servers they don’t have access to. It’s ridiculous that we have to go through all these hoops on your platform. -regards (alias name) |
|
By the way I went through a bit of their TOS privacy department is where you wanna go for this situation. (ignore my battery I just grabbed my iPad to take the screenshot) |
|
Did the email work? |
|
|
|
I sent them a comma-separated list of channel IDs, I assumed it'd be easier for them to work with. I would also suggest to keep it short, that way they can process your email faster. Enough of these should definitely get the point across. |
|
Surprised you didn't get an error for too many |
|
Okay so tiny update I sent it to the wrong department and some guy who’s job it was just to explain the TOS was just there like 😬 because I had basically sent him a hitpiece the message links lead to a private server which I had transferred to my friend where I completely shit talked discord and called them weirdos for some of their policies I can give more information on that but not here I don’t think that would be appreciated. Anyways I haven’t followed up with it kind of forgot about it and I don’t really feel like doing it today only reason I’m back here is because I got a email on my protonmail account. I’m just popping in to say if you got the same email I put it into virus-total It gave me 7 red flags so don’t click the link It was posted here and I presume it was deleted but I still got an email for it so some of y’all probably did too I’m just here to say don’t click on that shit that’s all. i’ll probably do a follow-up after New Year’s and happy late Christmas to everyone.
|
|
Which email address specifically did you send it to that it wasn't supposed to go to? I had assumed |
|
I sent it to the privacy department linked on the website turns out what they consider privacy is clarifying there TOS typical.
|
|
I have just submitted my own request using a similar template as mentioned above to the Discord support requests page, with a little more pleading and reasoning... I do hope something is done. Will update when I get a response. |
|
I'll share the script I've worked on here once everything's done. The list of "to delete, no access" is what I'm putting together into this email. |
Did it work for you? Did they delete all of your messages in the channels you mentioned? |
I've personally sent an email similar to the template you can find in the original post and gotten several channels completely wiped without a need to list specific messages. |
|
I've sent practically a carbon copy of the email from @Deemo82 (Dec 12, 2022). Will update you, and for now prepare a list of messages incase nobody understands again. |
|
Nope, same carbon copy email response. From the "Legal Team", not Clyde. I have prepared a list of channels and messages anyways. I will send those in a response. |
|
Hey I will update when I receive an answer (maybe in a few month) |
|
Yes, I will try, but last time when I sent them just channel Id they were asking for specific message id |
|
People in this thread, including myself, have had success with just channel IDs. Howerver it could just depend on who's answering your emails unfortunately. |
|
Message IDs have been the problem throughout the entirety of the thread I see you having 3 options A) you wait until there is a viable method to go through your data package and extract message ID’s from individual servers into a text file. B) you wait until discord get fined and are forced to change their policies C) Just keep going at it until you get results. Now that’s just my personal opinion but I am genuinely considering tipping off the data protection commission (same people who tried to kick Facebook out of Europe) and hopefully they would do something. |
This is what I did. Having more people send in complaints would only strengthen our case. I would seriously encourage anyone facing any kind of issues relating to this to reach out about it. I'm still waiting for an answer from my data protection authority, and I hope I can post an update about it soon! |
|
Here we go |
|
Heya, I know some individuals here have had success in getting Discord to bulk delete their messages. |
|
Apologies for any spelling mistakes I was in the middle of something when I got the notification so I just had to put it together real quick @anon813 |
|
I hope they saw my message before deleting there account it would be a shame if they didn’t |
|
Hi again! |
|
Unfortunately they also gave me exactly the same response they gave to others here, almost a copy paste. I'll send another response and see what happens. |
|
Their team keeps asking me to send specific message IDs as they did with many other people here. However because I am trying to get the whole DM wiped I do not think this method will work. But I hope the rest of you can get your messages bulk deleted because it is entirely within your rights. |
|
Alright so new discovery I just made Discord delete your email off there servers within 14 days when you delete your account meaning you can’t legally prove that whatever messages that were sent from a deleted account are yours meaning GDPR law does not apply to deleted accounts because all messages are anonymized it’s very unfortunate for me in my case because 14-year-old me said some stupid stuff so I hope you learn a lesson form my mistake do not delete your account until those messages are gone only deactivate. |
|
Trying a different approach i’ll keep you all updated on how it goes. |
|
Ok I’ve been in a long email exchange with Discord for a while after my last update discord flat out denied my rights and I’ll be on a phone call with Irish government officials after the bank holiday I’m not sure how much I’m legally allowed to disclose but I will let you know if I’m successful. |
|
Hey @abigailwillow I am sincerely sorry if I have offended or hurt anyone. I must admit that my intention was not to hurt but to inform, and it turns out that I did it poorly. To qualify and try to excuse my poorly worded message, I had consulted with the data protection department in my country and at the European level, and I also contacted a lawyer (from my country). The lady who answered my call (from the data protection department in my country) talked to me a bit as if I were an idiot, explaining what I had explained, being a bit upset that is the reason why I expressed myself poorly, sorry once again, I hope my message, even if it was clumsy, was understood... |
|
No hard feelings @AnnoyedDev! I don't think you offended anyone! It's always nice to have new information from local Data Protection Authorities as they are in the end the relevant authority on this. Do I correctly understand that they told you that messages are excluded unless they specifically contain personal information? Also for context which country's DPA is this regarding? Any new information on the topic is always appreciated. |
|
@abigailwillow That's right, they explicitly told me that message that Discord were mandatory to delete were message that could identify me. They also told me that if i want more information and to have more precise information about my specific case i would need to make a complaint. I'm located in France, my DPA name is CNIL. |
|
Ok so I did my own research and looked into the matter so I can contribute towards the conversation and the information I have found is individual member states maintain the right to pass their own data protection laws individual member states decide how strict their data policies are themselves with GDPR being the minimum set across the entirety of Europe it’s still the responsibility of the member state to decide what conduct is allowed and isn’t allowed under GDPR that’s why @abigailwillow case was considered a violation of GDPR and your one wasn’t @AnnoyedDev it’s depending on the member state you’re in and what extra powers they have allotted to GDPR each member has a different policy basically that’s what I’m seeing but if they have no policy, they just rely on the bare bones GDPR which is the framework they have to build off of. |
|
Makes sense considering my DPA is the Autoriteit Persoonsgegevens of the Netherlands and our government tends to be relatively secure with privacy-related issues. I suppose these differences between member countries also make it more challenging for these companies to know which rights their users have as it can differ quite a bit per country. |
|
everywhere i tried its always can anyone help me? |
|
If you can identify that you are the owner of the deleted account then I think it'll be fine, they won't check if you are or aren't in an EU country. Besides, perhaps your country or local authority has similar regulations? |
|
Most likely they'll require you to contact them from the email address that was previously registered with them. But they might give you a hard time since the account is already deleted. If this is regarding the US then check if your state has similar laws in place to GDPR. For example, I believe CA does. |
|
To be completely honest under the table they would probably click like one message just to make sure that the links work and then they would just feed every single one of the message links into a system to delete all the messages for them so that way not manually doing it they wouldn’t manually delete thousands of messages it would be a script of some sort. |
|
Great news everyone an old acquaintance of mine successfully got his messages deleted by Discord!!! he created a bot to scrape all the message links and put them into a text file sent them off to discord and they deleted everything without a hitch only caveat is messages in threads weren’t touched but altogether it was a success. |
|
Personal information being your real name address use your common sense |
|
Okay so the difficult thing is it’s completely anonymized just because you can prove one of the messages on the account belong to you doesn’t mean that the next deleted user is the same person they will only delete the exact message that you’re able to prove belong to you they physically have the account mixed in with millions of other accounts they can’t tell it apart there’s no unique identifying parts in the code that says that this user is connected that’s what anonymized means. Discord will only delete messages that you can prove “””individually””” belong to you or contain personal information. |
|
When this thread originally opened up my first round of experimentation relating to getting discord to delete messages was actually on a deleted account I was lucky to get in contact with a human and that person told me point blank there’s no hope when it comes to deleted account’s because they can’t identify who is who with enough accuracy for it to be worth the trouble that’s why they deal with everything on an individual message basis when it comes to deleted accounts. That’s what I got from my interaction with the individual from the general support on the discord white page of doom. |
|
I think it's a totally logical expectation to believe that your messages will be deleted as well when you delete your account. As for identifying deleted accounts, I'm 99% sure under the hood they still have your unique user snowflake. Can you right-click your deleted account and copy it, if you have it turned on in developer settings? That should realistically help them identify all your messages. Converting the data package to a list of message ids shouldn't be too difficult, but I don't have the capacity right now due to personal circumstances. I'll see what I can do. |
|
The long string of numbers you mentioned is the snowflake I mentioned, as for a data package if you haven't yet requested one before then you can't request one anymore now as the account is deleted, though technically speaking if you could prove the account used to be yours they should provide you with one. Getting banned and not having a way to delete your messages or otherwise no longer having access to your messages is one of the biggest problems I have with the whole system. This is what I pressed them on before they complied with my request as I personally believe it's very much infringing on users' privacy. |
|
When I first submitted an inquiry on their customer support center, their first reply was "Deleting message should be inquiried via (some other link)", because "it is beyond CS's resources". After their first reply I pushed them with strong arguments, and they said I need to export a list of discord message IDs via privacy package. After I passed them a list of discord message IDs, they said I have to reformat those IDs in following form; (They did not tell the exact form at the first, I guess this is because they wanted to delay message deletion process as long as possible) After a week they said my messages are all deleted, but many of my messages WERE NOT DELETED at all. Therefore I reported the Discord on some national privacy-related instituitions including KOPICO. After a public servant sent an email to the Data Protection Officer, they finally deleted(at least those were invisible) almost all my messages(but there were still few left) and they added the "Korean local terms". Discord is not deleting your messages easily. They will try to give you many excuses if you seems not urgent. You should prepare your plans properly, and need to push them hard. If you are interested about my code to export list of discord message IDs, check my repo. |
|
Very much appreciated i’m sure this will be a great help to everyone hopefully now we’re going to start getting more and more people trickling in saying they successfully got messages deleted thank you @McDic 😄 it’s unfortunate that you had such a hassle but it’s good because around 3 or 4 people have managed to get messages deleted now that’s a big step up from only one person and we seem to have a working method thanks again for sharing your resources it’s a big help for everyone. |
|
Its very frustrating, as I have been dealing with this for months. I'm sick of this, and it feels like something that violates GDPR. I think I might contact my DPA because even if it'd be invalid atleast they looked at it. |
I sent this and they left me on open with no reply for a 1 month+ |
Contact your DPA then and make a very strong complaint with your DPA regarding discords blatant refusal. |
It's been 3 weeks for me and I'm tired of waiting. Can I just contact my DPA right now rather than having to wait for another response? |
If its been more than one month from the start of your Bulk Deletion go ahead. |
|
I'm looking to delete >100,000 messages from a server I no longer have access to. I have the CSV file ready, using this helper tool, but just one look at this thread makes me nervous to try on my own. Edit: I will probably just use this template as I'm a UK citizen, however I still have a couple other questions. Should I threaten off the bat using the same method CloudySnowX did? It seems like I can also contact the ICO if they refuse. Side note: Is there any active progress on a lawsuit or something to stop this madness? If not then is there anything a UK citizen can do to report it as a violation? |
As I said I can't say too much but I am HOPING that it will make discord understand that they need to respect the law. |
The people higher up don't care about actual issues, only share price and profits. |
|
Update: I threatened to contact my DPA and they replied in about 28 hours lol It was the same old email that we know about. I confirmed the messages are deleted by just checking the attachment links - all of them are 404. Kinda sad but I was never going to look at them again so who really cares. |
|
well good because I threatened to contact my DPA and they did nothing? idk why tf |
|
Sorry to hear that, they are extremely inconsistent. I don't know what to do next but maybe you can actually contact your DPA. |
|
🚨WARNING FOR EVERYONE COMING TO THIS THREAD 🚨 Discord is doing everything in their power to make the process of deleting your personal data as hard, laborous, and time consuming as they can. They have no regard for your privacy or personal information, blatantly ignoring GDPR laws. I've been in contact with them since the beginning of June (4 fucking months passed since then!), because their replies take up to 3-4 weeks at times. Followed everything in this thread to a T, left every single server, submitted the .csv exactly as they asked, yet they still refused to delete hundreds of messages containing personal info: 
Thankfully I submitted a data request 2 weeks after they "confirmed the deletion" of my messages in the .csv I sent them, which revealed that they did not delete hundreds of messages in servers. They claim I still have access to the messages so they won't delete them, despite the fact that I haven't been a member of those servers in years, and have no way of rejoining. I deliberately left every single server before sending them the .csv with the message IDs. They will do the same for you. For example, they simply do not delete forum messages under any circumstance. So not only are you not able to delete archived forum channel messages even if you have access to those servers, you aren't able to get them deleted even via a right to forget request either. You can quite literally post your most sensitive personally identifyable information like national ID, passport pictures, telephone number, address, etc, have no way of deleting those messages (left the server/got banned etc), yet they literally do not give a shit and won't delete them. If you're a EU member like I am, please do a data request after they confirm the "deletion" of your messages, and then file a complaint with your national data protection authority. This thread has ample proof that Discord prefers profit and data harvesting over obeying the laws of the European Union. They will continue to do this (as they have for years) until we file enough complaints to prompt a massive investigation and monetary fine. I'll be doing my part, please do yours as well. PS: It would be quite a shame if before submitting a data deletion request, one were to send a message in a forum channel containing personally identifiable information like a purpose-made email address, along with sensitive, especially protected personal data like a political opinion. We know for a fact Discord won't delete it even if requested, I'm sure the data protection authorities would have a field day with it! Not recommending anyone to do this of course :) |
|
@codevogel To answer your first question: I have successfully managed to convince Discord to perform a bulk deletion, based on a list of channel IDs, hence why I started this thread. When you mention the NDPA, I assume you mean the Autoriteit Persoonsgegevens. Since I myself am a Dutch citizen, this is the same DPA that I contacted. This hasn't been my only case with the AP. They are highly effective at forcing companies to comply with GDPR. That said, for anyone from other EU countries, and especially outside of the EU, I don't actually know how effective their DPAs are. I remember someone here posting from a smaller EU country, and they straight up refused to help them, and the reason their DPA gave was that Discord isn't a corporation from their country. Which is obviously nonsense, as Discord still operates in their country, regardless. Additionally, I do not have any personal anecdotes about how difficult requesting bulk deletion is as of recent, as I have naturally been trying to be more conscious ever since I got my first one completed, and have not required another request. However, based on others' experiences in this thread, I am very glad I haven't, as it doesn't sound like it's getting much better. If anything, Discord seems more resilient now, as they have likely done their research into the topic and have put actual internal rules in place in an attempt to skirt laws as much as possible. |
|
Thanks for the reply. It gives me some hope at least, but the way they just flat out told me 'this is the last time we'll reply to you' definitely feels like they aren't going to give in. It shows that they aren't even hoping I give up, they just told me 'well we aint listening anymore'. Which kind of sounds illegal to me.
Correct. I have high hopes they'll take this up seriously, but we'll see where it goes. |
|
@codevogel It is indeed incredibly rude, but it seems like they're doing this now in the hopes that you were merely threatening with legal action. The Autoriteit Persoonsgegevens will definitely help you take care of it. Be sure to let them know that you've contacted them, though! Sometimes, just including the AP report will be enough to frighten them, haha. Especially since the AP is quite busy and can take a while to get to your case. Unfortunately, it is not a fast and simple process. |
|
I went ahead and let them know. I understand the AP may take up to a few months to handle my case. But that's worth it. |
|
....aaaaand I got an email from Discord telling me there was a security breach regarding this very support ticket, because they used a THIRD PARTY custom service tool, apparently while handling our sensitive data removal requests. They got access to the attachments in this conversation, which means they got access to THE VERY SAME LIST OF 30000+ MESSAGES I WAS TRYING TO GET DELETED!!! Very concerned about our privacy rights, they said, huh. The AP will love this! |
|
Hey I haven’t been around the thread in a bit been busy with work and life but this place has been in the back of my mind I’ve got something new worth sharing. Basically I found a working angle using Brazilian law and it’s way more direct than GDPR when it comes to messages. With GDPR we’ve been relying on Article 17 (right to erasure) and Article 7(3) (withdraw consent). Those do work, but they’re messy and full of loopholes and discord are getting wiser and more troublesome in my personal opinion. Brazil though, under LGPD, it’s different you don’t need a reason, you don’t need the messages to have personal info, nothing like that. You just say “delete this” and legally Discord has to do it. Way stronger for our purposes and if you’re a Brazilian citizen of course. Now to be clear I’m not Brazilian myself and I’m not planning to dive too deep into this because for us in Europe we already have working methods and don’t need to fake where we’re from. This Brazilian angle is honestly more useful for Americans who are already pretending to be European to get their stuff deleted. For them it’s a stronger tool, for us it’s not as necessary. I’ll personally be sticking to GDPR since I know how to get Discord to delete messages consistently. I’m hoping @GOYDA228 will be kind enough to update the tutorial once I share the process, since I’ve got a jerryrigged fix I think will work better (please be patient got a busy life atm) But no matter which way you go Discord always drags it out past the 30 days they’re supposed to stick to under GDPR. That alone is already a breach, so in my opinion it’s complaint-worthy to the data protection authorities regardless of whether they eventually delete the messages or not. |
|
Discord had a data breach I just got an email saying I was affected luckily it didn't contain more than surface information and my email exchanges with them |
Are you sure that they didn't just delete the messages in servers you don't have access to? If not, and they deleted all messages, I'd go and check if they actually did. Curious to hear how you got them to delete everything if they did. |
|
Yeah, I believe they did successfully deleted everything. I checked and every message I sent before August 2024 (when I submitted my request) was gone. (The chats and servers I could see of course) I submitted my request in August 2024 after the No Text to Speech video. Discord originally denied my request, but I made a few more and emphasized that I was willing the take legal action if needed (total bluff). Eventually they caved and sent a message that it would be deleted within 30 days, and by the 30 days ally previous messages seemed to be gone.
|
|
I think that we should make this thread the place for the Discord support ticket hack situation so updates and outcomes don’t get lost across duplicate posts. Also when quoting, trim the message or strip mentions so no one gets pinged just because a full chain got copied into a reply. Discussion helps, but the some points keep looping and they bury a lot of stuff. Circling back to the hack, the real risk is linkage: if someone gets hold of exports like messages.csv that include message and server id’s, it becomes easy to map where an account talked and how much, then cross-reference that with names or emails seen elsewhere. That isn’t hypothetical either given the mass scraping of roughly two billion Discord messages from thousands of servers from services like spy.pet and this recent Doogle situation from Double Counter. In any sense, file with a data protection authority and push for enforcement of erasure rights instead of letting it slide. In Sweden, IMY takes complaints online, and tips don’t need an active deletion dispute to flag a pattern worth investigating, so for me it’s no brainer. Even without a personal deletion request, sending a short report about Discord’s handling of GDPR erasure claims helps build the record that can trigger a proper review as I mentioned in an earlier thread. I do hope I’m not dragging message on too long but also this leak could definitely be paired with the Doogle stuff and suddenly out of nowhere I’m pretty sure you could create quite the profile on someone. Also anyone else just think about how all of this could’ve been avoided if discord just fucking made it a simple one button press in the app to delete all my messages and they did it without question? |
As pointed out, even though message IDs themselves don't contain any sensitive data, if malicious actors were to get access to the CSV files, they would indeed have a high probability of being abused. I hope that this is the event that prompts Discord to finally consider implementing a 'nuke' button, allowing users to truly delete their account and its contents. It's the simplest solution, but I'm not holding out for anything. |
Discord genuinely deteriorates daily now. Beyond the nuke button, privacy controls need a delete-all-messages button. GDPR should've mandated this. It's entirely possible, yet Discord hides behind automated systems and refuses transparency. As mentioned before file your complaint with the EDPB and your local DPA as soon as you can. Not towards just you Willow. |
|
Did you send the message contents? I thought you just needed a list of IDs, which is pretty useless on its own.
…-------- Original Message --------
On 04/10/2025 00:46, Kamiel de Visser wrote:
It said they got access to the attachments in this conversation, which means they got access to THE VERY SAME CSV OF 30000+ MESSAGES I WAS TRYING TO GET DELETED!!!
—
Reply to this email directly, [view it on GitHub](#429 (reply in thread)), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AY7ISZVJDVKPON4EI7EEDPL3V4DGXAVCNFSM6AAAAAARXHO2MSVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINJYHA3DKMY).
You are receiving this because you commented.Message ID: ***@***.***>
|
|
No, as explained above, but they can easily extract the message content through use of the IDs. |
|
We need organized public pressure to force Discord to address the data breach. Let's rally on social media with a unified hashtag like #DiscordDataBreach and collectively tag their official accounts, major partners, investors, and data protection authorities. By impacting their reputation and business relationships, we can make it unavoidable for them to respond and take serious action. |
|
they don't even care to respond anymore, it's been 2 days! not even an automatic reply, nothing. |
|
I need help doing the csv file, I have a whole lot of files, and the tool that has been used to help with this also doesn't work for me :/ |
Notice regarding usage of DiscorchHi everyone! I saw mention of the online tool Discorch in this thread. I would generally advise users against uploading their full data package, including sensitive information, to any online tool, even if it claims to work fully offline! That said, I have been able to confirm with relative certainty that the code found in Discorch's repository matches the code running on the online web application1. The code itself looked generally fine to me, but I have not had the time to do an in-depth review. Important Don't take my claims as truth; if you have the technical know-how, verify for yourself! Regardless, if this is an application that you would like to use, I would strongly recommend building the application yourself and running it locally while fully disconnected from the internet. The author has provided clear instructions on how to do this in the repository's documentation. Footnotes
|
|
malware! |
Please reread the post and think a little before commenting things like this… |
|
I kind of been lurking on this discussion for a while, and my problem is that my account is deleted. Earlier I saw on someone else having the same problem as me, but they had a friend to help them delete their message. I don't have a tech savvy friend like that sadly. However unlike some deleted accounts I can prove it's me through the youtube channel links I posted throughout my discord years, showing my real name, so theoretically... Could I make them delete the deleted account's messages? Or do I have to live with my real name being displayed on that account forever? When I emailed discord support, they didn't even answer my question. Its been around 3 weeks (which seems pretty normal in this case) should I try to take legal action yet, or should I wait around 1 more week? |
|
If it was one, yeah I think I could manage, problem is it was quite a lot of them, tracking down every single one would be a nightmare. Quite frankly, I'm kind of stuck in this situation at the moment sadly. However I did request a copy of my data from my deleted accounts, not sure if they can pull something out of there or not. Hopefully, this will help me out a bit more. ( If they even respond... ) |
|
Update: They just told me to get a copy of my data, from an deleted account. There is no way to get data from a deleted account and they won't give me my data from that account. How stupid. I'll just ask for a follow up on the other message I sent 3 weeks ago. I'll just wait 2-3 weeks and after that I might take legal action. |
|
yeah discord is just being annoying, ive been trying to deal with this for the past year pretty much, havent gotten anything past "spaces you dont have access to" its very annoying, i have filed a complaint with my DPA, waiting for them to respond/help with this, but itll probably take a while sadly |
|
i genuinely hope they'll get fined or sued for the blatant gdpr violations |
|
they also started ignoring my tickets all together, they still are open after almost 5 months with no one replying. |
|
Considering 5 months of silence, you're right to pursue this with your DPA, as you've given them ample time to respond. However, labeling it as blatant GDPR violations is a bit of an exaggeration. While Discord's support is commonly failing to appropriately take action, the specifics, especially concerning chat messages, are legally ambiguous. Chat content isn't always classified as PII, making it difficult to prove a clear, blatant violation of GDPR without specific evidence of PII being mishandled. If you truly believe the violation is so blatant, as an EU citizen, you have the right to pursue legal compensation from Discord. Otherwise, proceeding with the DPA is likely to be the more productive path forward. |
|
has Discord complied with deleting messages recently? |
my point is that PII is defined in GDPR article 4 as any information related to a data subject which can be used to identify them either directly or indirectly; in my opinion, messages fit that definition because they're able to be used to indirectly identify someone through profiling, based on someones opinions, writing habits, preferences, interests etc. i do understand that it mightve been an exaggeration but i truly do believe my rights are being violated which is why i filed a complaint to my dpa |
|
Same response with others, filed a complaint to my country's privacy discussion(South Korea). |
|
so its been some time since the breach, the hacker got all the messages and discord still wont allow us to delete them? wtf we supposed to do |
|
To be clear, the breach involved a third-party support company. They do not have access to messages on Discord by itself, but rather the communication with Discord support. |
|
i get it, but our message and channel IDs are still out there. Originally i was thinking to lead with this to get the messages deleted but yeah it didn't work |
and others
Note
This thread has been getting a lot of attention lately, and because of personal circumstances I have not been able to keep up with all the new activity. One day I hope to get around to updating this thread with more recent information. For now, please find advice from other helpful users below. There's a good chance your question has already been answered before, or someone else has already had a similar situation to yours.
Important: Update as of October 2nd, 2025
I noticed that this topic now has an appropriate discussion category within this repository. Since this thread has so many replies, it is no longer feasible to be able to go through them all. Where possible, please refrain from posting any new replies, as it is likely that it will get missed. By starting a new discussion in the GDPR category it will be easier for others to find your specific question, or information.
Also, read this excellent reply by @SublimePeace to get an idea of the current state of affairs. They have summed up the current situation in a very clear manner: #429 (comment)
For a while now I have been talking with Discord's privacy team about bulk-deletion of messages. Initially they were very persistent in their stance to not allow users to bulk-delete their messages. However, I pointed out to them that this is by any and all means not compliant with GDPR policies, especially since deleting your account (which is the solution they kept offering) does not get rid of any of your messages either.
Therefore I decided to go the extra mile by contacting my national data protection authority. Not long after filing my complaint to the DPA, Discord's support got back to me after a long period of Discord ignoring my emails by allowing me to provide a list of IDs of DM and guild channels that I wanted my messages wiped from. They have since processed my request, and all the messages I provided in all channels were successfully and instantly wiped.
Unfortunately at the time of writing, Discord still does not allow users to bulk-delete messages themselves. But it seems that they are accepting such requests via support tickets.
I have obtained the channel IDs from my data package and provided them with a comma-separated list for the channels I wanted to have wiped.
If anyone reading this decides to make a similar request, please let us know about the outcome. Together we can help make Discord a better place that actually respects the data protection rights of its users.
Data Deletion Request Template
Warning
I am not a lawyer, therefore, this is not legal advice.
Caution
Please read my notice regarding the usage of Discorch, and similar tools to browse your data package.
All reactions