I've reported this to Discord through the official tools, although I have my doubts that it will come to any fruition, as evidenced by the previous bundle of reports which have been ignored. I can only hope the publicity of this forum will prove to be an influence. Also, I've been in touch with the individuals operating this platform (dis.cool) via several mediums such as Twitter and Telegram, but to no avail.
They are inherently unwilling to remove or allow me to view any data collected on me, which is a direct breach of GDPR. Following this, hear are the sections this service are choosing to disregard, in favour of the non-consentual collecting of data on an atrocious scale. This needs to stop.
- Chapter 2; Article 6
- Chapter 2; Article 8
- Chapter 3; Article 17
- Chapter 3; Article 20
- Chapter 3; Article 21
- Chapter 4; Article 25
I'll condense the following list to it's crucial points, which provides more context for this post. I shall attempt to summarize the main points from the above articles, in order of appearance.
Article 6:
Processing shall be lawful only if and to the extent that at least one of the following applies: the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Article 8:
Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. 2Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.
Article 17:
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: the personal data have been unlawfully processed; the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
Article 20:
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format
Article 21:
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.
Article 25:
Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of natural persons posed by the processing, the controller shall, both at the time of the determination of the means for processing and at the time of the processing itself, implement appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data-protection principles, such as data minimisation, in an effective manner and to integrate the necessary safeguards into the processing in order to meet the requirements of this Regulation and protect the rights of data subjects.
I too (and others) have requested that my data be deleted, which was a complete waste of time. This service has a terrifying amount of data it has collected on me, and might I remind you that this is gained via selfbots, a clear breach of Discord's Terms of Service. Maybe ignorance really is bliss.
Consent was never given for this egregious level of data collection, which is then sold via plans, such as Premium. These are listed on the website, here: https://dis.cool/premium Currently, the price is $7.95 annually. This is the selling of your user data. Get angry now, folks.
Moreover, in relation to the "Premium" feature, the service boasts:
Get an enhanced dis.cool experience by being able to view all and connected accounts & servers found on discord user profiles
Again, I did not at all give any consent for this data to be gathered. I have contacted these people on Twitter, as seen here: https://twitter.com/resynth1943/status/1229012009909411840
A response was given, although it stemmed from a fundamental disregard for the rules, to put it simply: https://twitter.com/discoolsupport/status/1229145651231019009
Moreover, I also am unable to comprehend how this service came to light, so to speak. There seems to have been an incredible amount of nonchalance from Discord in this matter, which is disappointing to say the least. Discord have a fundamental role in keeping our data safe; They've failed in their duty to protect us.
In addition, usernames are technically End User Data. That's not even starting on the other data they collect, and later sell. Usernames are End User Data, and this has been stated by Discord here: https://gist.github.com/meew0/a3168b8fbb02d5a5456a06461b9e829e
I have also been in communication with the developers in their Telegram chat room. I was called a "r----d", "f------d", "c--t", and a range of other nauseating insults, which was because I inquired on how to remove my data, following their total nonchalance regarding GDPR, and users' fundamental rights.
if you request it to be removed they send you to this image and do not begin to remove any information about you. Again, that's a fundamental breach of GDPR. As this service does not seem to operate within the scope of the law, they should not be allowed to operate; Let's blow them up.
Thanks for submitting this, u/InterestingSometimes. Me and the gang have been looking at this for a few hours now, and we've all come away feeling very disheartened that this project is being allowed to operate.
Many thanks, Resynth
We need rules like this for the internet. Then we can sue Facebook & Google.