Over the past weeks, I've seen many mainstream media outlets share various sensationalist titles, portraying Discord as working with a Peter Thiel associated company, forcing all users to submit to age assurance to use the application. So, is there truth to these claims?

If you don't have the patience to read this article, TL;DR, you will not be forced to verify your age just to use Discord and Discord's primary age assurance provider uses on-device facial scanning to be privacy-first.

However, please read the article. You should know about the technology you are using.

Update from Discord:

Discord has released a blog post covering their implementation of age assurance, postponing their rollout of global age assurance, stating they will attempt to provide several age assurance options and providers.

Persona & Peter Thiel

Peter Thiel (Who knows a lot about the antichrist) does a lot with his spare time (very few of which are well received). One of those things is investing in venture capital, through his firms Thiel Macro and Founders Fund. Founders fund has invested in many companies including Anthropic, and of note to this article, the age assurance company Persona. This is the known public extent of Thiels ties to Persona, though the startup world is far from unfamiliar with investors of his ilk.

The Thiel connection was noted, as Thiel launched Palantir, which has faced many, many, many controversies for their invasive handling of sensitive data.

Persona is an age assurance company, using ID verification. They store this information serverside, and preserve it for up to 7 days, providing partners (in this case, Discord) with required information only (Face, DOB). And Discord did, indeed, trial usage of Persona for age assurance in the UK. So, what was the extent of this trial?

Persona was rolled out to a small percentage of users in the UK, with an archive of their article from Jan 31st 2026 quoting:

Important: If you're located in the UK, you may be part of an experiment where your information will be processed by an age-assurance vendor, Persona. The information you submit will be temporarily stored for up to 7 days, then deleted. For ID document verification, all details are blurred except your photo and date of birth, so only what's truly needed for age verification is used.

To encounter the Persona age assurance a user must:

• Attempt to access 18+ content without their age being assured via another method (K-ID)
• Be in the rollout of users that were opted into Persona (The % for this is unknown)
• Be in the UK

So, there's already several barriers to seeing this experimental age assurance. A vast minority of users would have the chance to encounter Persona's age assurance on Discord. The experiment was active in early 2026, before Discord cut ties with Persona, removing all mention of it from their article on age assurance by Feb 15th 2026. Notably, this happened after the news cycle picked up the association and began spouting headlines linking Discord to Palantir via Peter Thiel.

Persona, though, is absolutely no saint. If you want to read more about that, take a look at this article covering their concerning collaboration with US elites.

While we cannot know for sure why Discord picked Persona for a limited rollout, the company is used by many large platforms seeking to comply with the UK's OSA. Considering OFCOM (The UK body responsible for ensuring OSA compliance) is actively investigating the age assurance providers used, Discord was likely hedging their bets with an additional age assurance provider in case OFCOM ruled their primary provider as insufficient to meet OSA requirements. But what is Discord's primary provider?

If not Persona, who?

Discord has used several methods for age assurance and ID verification. It's important to distinguish between the different providers, as they all have different strengths and weaknesses. But for OSA compliance, their go-to is K-ID:

If the AI generated banner puts you off, don't worry, they eventually replaced it. K-ID is a Singapore based startup (Kidentity Inc.) offering age assurance to the tech and gaming industries, leveraging and re-selling existing providers. K-ID's privacy policy is very sparse, as they do not perform age assurance operations themselves, but rather middleman them. This creates a barrier between the age assurance systems and the end customer (Discord) so users cannot be easily tied to documents or facial scans.

When using K-ID's facial scanning for age assurance, the technology used is that of Faceassure, a service from Privately which is a Swiss based company. The Faceassure product is notable for being client-trusting, meaning the client (your device) is the authority on facial data, allowing for easy spoofing. This also means that actual facial images never leave your device, which seems to be a good privacy-first approach. Metadata about the scans is sent to Faceassure servers to help verify the authenticity of the scan and make spoofing more difficult, but this data cannot be used to reconstruct your face.

When using ID verification with K-ID, another company is used instead. Veratad, a US based company with the longest history of all companies mentioned to this point, operating since the 2000's. Veratad claims GDPR compliance, and does not store, sell or redistribute user submitted data for anything beyond the ID verification operation undertaken by the user. Veritad has been the target of litigation for it's work with Juul, allegedly for insufficient age verification, though it has not faced any substantiated claims of data preservation or non-adherence to GDPR.

So, if you verify with K-ID using a facial scan, you're sent through a pipeline of companies with your data passing through up to 3 different countries. While K-ID's facial scan offering is arguably privacy first, this data passing hands between several countries does raise questions about data sovereignty.

What other providers are there?

Discord introduced Bot Verification in 2020, aiming to prevent abuse of their developer API by scammers, spammers and skids. Part of this process was ID verification with Stripe, which was also leveraged for their server monetization features.

Stripe has a very positive reputation and is widely trusted for their ID verification, with many companies leveraging their technology. Stripe's privacy policy touts GDPR compliance, and it's incredibly powerful as a KYC tool. But it is not ideal for at-scale age assurance due to the price, costing ~$1.50 per user verified. Stripe also allows data preservation, which is important for legal accountability in the case of fraud or other illegal activities from users. This absolutely makes sense for Discord's Bot (now App) Verification, but does not make sense for age assurance.

Discord has also directly processed identity documents sent directly to them for age appeals (Verifying your age if you're reported as being under 13), via Zendesk. You probably know about this because Discord's Zendesk was recently infiltrated via social engineering of a 3rd party contractor (5CA) given access to the system, leading to sensitive documents of ~70,000 users being exposed. It had been long debated that storing such sensitive information in Zendesk, a service that has suffered from dangerous information disclosure vulnerabilities, might be a bad idea. Discord seems to be migrating to using K-ID for age appeals too, which is a smart move after their data leak.

Remember, do not say you're under 13 as a joke, do not say any number below 13 without context. People can and will maliciously report you and you will have to verify your age. And it will suck. Discord is legally required to take underage reports seriously even if they're incredibly dumb.

Why doesn't Discord do it itself?

The short answer is accountability. As we have seen, when Discord did handle ID documents themselves, it opened them up to attacks that resulted in the leaking of sensitive information. No company wants to be accountable for a data breach, especially not one containing IDs.

Discord has also used AI-Driven age estimation, as well as demographic estimation. We've already covered this, so please give that article a read.

By using 3rd parties, Discord (and other companies) can sidestep the effort required to comply with the legal regulations controlling age assurance and data handling. If the 3rd party gets compromised, Discord can point the finger and avoid direct blame. By paying 3rd parties they're not just getting the service provided to them without developer effort, they're paying for the ability to make it not their problem.

But I don't want to verify my age to use Discord!

Great news! You don't need to.

Discord's age assurance exclusively targets NSFW servers/channels and the ability to speak in stage channels. Child exploitation has occured on stage channels, given Discord's VCs are now secured with the DAVE protocol, Discord cannot easily combat this. And, I think we can all understand that NSFW channels/servers should be 18+.

So no, you won't lose access to your account, nor your ability to use the vast majority of the platform if you don't want to verify your age. With that said, NSFW channels are often used for things outside of adult content, like politics or mental health discussions. In these cases, the NSFW channel serves as a sort of content warning. Discord could stand to improve their offering in this area to allow for more distinguished types of "NSFW" channels, so you aren't forced to verify your age to talk about having a bad day and wanting support. It's also notable that since inception, NSFW channels were entirely clientside and the warnings (and age verification gating) could be entirely bypassed with client mods (though risking termination in doing so).

Don't believe headlines.

If there is something everyone should come away from this article with, it's that journalism is about getting clicks. Headlines are about grabbing your attention and the vast majority of people will just read the headline. Hell, I did this exact thing with this article, and I'm absolutely certain that some people will share an article debunking those headlines as evidence supporting them. Because that's the world we live in.

Trust what you can verify, do your own investigation, come to your own conclusions. Trust voices with a consistent repute, not the ones with the loudest megaphone. You shouldn't even take this article at face value, read the cited sources, come to your own conclusions.

You can dislike age assurance and the laws forcing them on people, but you should also be informed about the nature of the technologies used. You are better able to oppose something when you are armed with facts, not just emotion.

And no, this is not the end of Discord as we know it, but good luck moving to Stoat, Discord competitors famously do great.