Earlier quoted context omitted.
> Their privacy policy (and practices) is awful. Like?
I am curious about this as well. We take privacy very seriously at Discord. Earlier this year, we entirely re-wrote our privacy policy as well to be more plain English and less legalese. I think that it's actually one of the more well written privacy policies out there.
You don't even have something as basic as adjustable message retention. You host your service on Google Cloud and AFAIK, you don't use E2E for anything, not even direct messages.
Your privacy policy includes the following clause:
We may share information if needed to enforce our Terms of Service, Community Guidelines, or other policies, or to protect the rights, property, and safety of ourselves and others.
Which, as anyone semi-aware will realize, is generic enough to allow for sharing anything with anyone.Oh, and according to the same privacy policy you retain deleted account information for at least two years by default. Anything else requires the user to "submit an ID for an age verification appeal". That's telling in its own right.