Security researchers claim Persona, the provider behind Discord's UK age verification 'experiment', performs '269 individual verification checks' on user data, including those for terrorism and espionage
PC Gamer
by Andy Edser February 20, 2026
AI-Generated Deep Dive Summary
Discord's age verification experiment in the UK has sparked significant concern among users due to its ties to Persona, a provider linked to controversial figures like Peter Thiel. Security researchers have uncovered a major flaw: an exposed US government-authorized server revealed 269 individual verification checks performed by Persona, including facial recognition and screenings for terrorism and espionage. The findings highlight alarming privacy concerns, as the platform's codebase and algorithms were left unprotected on the internet, raising questions about how user data is handled and processed.
The researchers stumbled upon over 53 megabytes of source maps and 2,456 files containing Persona's TypeScript codebase. This included details on permissions, API endpoints, compliance rules, and screening algorithms. The exposed data revealed that Persona flags individuals based on "suspicious" facial characteristics without clear criteria or transparency, potentially enabling biased or misuse of personal information.
Discord's decision to use Persona has drawn criticism, particularly given Thiel's connections to surveillance technology firm Palantir. Users are wary of the broader implications of such verification systems, especially when tied to government and private sector collaboration. The leak underscores privacy advocates' concerns about age verification methods, which often collect more data than necessary and lack transparency.
For gamers, this issue hits close to home. Platforms like Discord are integral to gaming communities, but users are increasingly wary of how their data is used. The exposure of Persona's systems highlights the risks of outsourcing sensitive verification processes and raises questions about trust in digital platforms.
Ultimately, the findings emphasize the need for stricter data protection measures
Verticals
gamingpc
Originally published on PC Gamer on 2/20/2026