Discord has pushed back its planned global age assurance rollout to the second half of 2026 and severed its relationship with identity verification vendor Persona, following a surge of user backlash over surveillance concerns connected to an undisclosed UK trial.
In a blog post published by CTO Stanislav Vishnevskiy, Discord acknowledged it “missed the mark” in communicating its age-assurance plans, and that the reaction from users prompted a course correction. The admission came after the company had announced it would soon require users whose adult status could not be confirmed automatically to submit to facial age estimation or government ID uploads before accessing age-restricted content.
The Persona connection became the flashpoint. In January, Discord ran a limited test with the Peter Thiel-backed identity verification company in the UK, but did not disclose the partnership publicly. An archived support page later revealed Persona was retaining identity data for up to seven days, contradicting Discord’s earlier assurances of near-immediate deletion. Separately, research had exposed Persona’s platform as running far more extensive checks than users understood – including facial recognition against watchlists and politically exposed persons, and the potential retention of biometric data for up to three years.
Discord has now ended its Persona partnership and set a new standard for any verification vendor offering facial age estimation: the biometric processing must occur entirely on-device, so that facial data never leaves the user’s phone. According to Vishnevskiy, Persona did not meet that bar. Persona’s CEO has confirmed that all data collected during the Discord UK test was deleted following verification.
The episode compounded existing concerns. Discord had previously disclosed, in October 2025, that a separate third-party breach had exposed government ID documents belonging to approximately 70,000 users tied to age-related appeal processes. That vendor was not Persona, but the incident had already eroded trust in how Discord handles sensitive identity data.
Discord’s revised plan maintains that more than 90 percent of users will never see a verification prompt. The platform uses account-level signals, including account age, payment methods on file, and general activity patterns, to confirm adult status without user action. Only users who cannot be automatically assessed and who attempt to access age-restricted content will be routed to a third-party verification step. Discord’s own facial age verification trials in the UK and Australia, which launched under compliance timelines set by the UK Online Safety Act and Australia’s under-16 social media restrictions, will continue in those markets under existing legal obligations.
For the global launch, Discord has committed to publishing a technical methodology post explaining how its internal age-determination system works, and to maintaining a public register of all verification vendors, including their data handling practices. The company says it will present users with multiple vendor choices directly in the product interface, so they can select the method they are most comfortable with.
Sources: Discord Blog, Ars Technica
–
By Ali Nassar-Smith
