Translation: our vendors have no idea where this data goes. If they can’t find it, it’s deleted, right?

And this is why generic EULAs should be heavily regulated, and allowed to be negotiated like any other contract. Allow me to pencil in a “you’ll allow me to uniquely watermark the scan of my ID so it can be traced back to this specific request, and agree to pay me $500M if that scan is ever included in a data breach or sold to additional third-party vendors” clause.

Oh, Discord doesn’t want to agree to that? Gee, if the company is deleting everything immediately and there’s no risk of a leak/intentional sale, what’s the harm in including it? How’s the saying go? Something about “if you have nothing to hide”?

20 years is "quick" enough. 5 is "immediately".

"In most cases"

So, bots?