Trust and privacyHow your ID check works
Where your ID goes, what we keep, who can see it, and how to delete it.
It's fair to ask what happens to your ID before you verify. This page answers that in plain language. Everything here comes from our Privacy Policy and Terms of Service, which are the full, binding versions.
/delete_my_info deletes it and asks Persona to delete your ID records too.
Step by stepWhat happens when you press Verify
You start it
Press Verify on a server's Verify message, or run
/verifyin the server. Nothing happens until you choose to.Persona checks your ID
The link opens Persona's page, where you photograph your ID and take a selfie. Persona decides whether the check passes.
We keep the result
Persona tells the bot the outcome. We keep only the short list below, encrypted. Persona's messages to the bot are signature-checked, so nobody can fake a result.
You get your roles
You get a DM with the result, and your roles in every server that uses AuthentiGate. You only verify once.
Who keeps whatWhat Persona handles, and what AuthentiGate keeps
Persona handles
- Your ID photos, your selfie and your ID document, plus your name and the other details on your ID. Persona holds these under its own privacy notices, and we have a data processing agreement with Persona. Persona may process data in the United States.
AuthentiGate keeps
- The result: that you're verified, when, and the Persona inquiry ID (encrypted), which we use for disputes and deletion requests.
Your date of birth (encrypted), so your age band can move up on your birthday: Under 18, +18, +21, +25, +30, +40 or +50.- Your region (encrypted): the continent of the country that issued your ID. The country itself isn't stored.
- The sex shown on your ID (encrypted): F, M, X or unknown. Your gender role comes from your own choice in
/profile, unless you pick Use my verified gender. 
A one-way fingerprint of your ID number, so one ID can't verify more than one Discord account. The number itself is never stored and can't be worked out from the fingerprint.
A record of each attempt: when it started, in which server, and how it ended.
AuthentiGate never stores
Your name, your ID number, your address, your country, your ID photos or your selfie.
Your date of birth, region, the sex on your ID and the Persona inquiry ID are encrypted with AES-256-GCM, each bound to your account, with the key kept outside the database. The database is hosted by Hetzner in Germany (EU). We never sell your data, and we never use it for advertising.
Who can see whatWho can see your details
| Who | What they can see |
|---|---|
| You | Everything stored about you, in /profile. |
| Server staff | With /inspect: your account age, when you joined, whether you're verified, and only the details their server has roles for, such as your age band or region. Never your date of birth. Only for members of their own server. |
| Other members | The roles you have in that server, like any Discord role. |
| Whiskey Bots (who run AuthentiGate) | Your profile, to handle support and disputes. Your date of birth only through a separate "Show date of birth" step. |
| Persona | Your ID photos, selfie and ID details, because Persona runs the check. |
| Discord and anyone else | Nothing. We don't share your date of birth, region or the sex on your ID with Discord or anyone else. |
How long it's keptHow long we keep it
| What | Kept |
|---|---|
| Your verified details (date of birth, region, sex on ID, ID fingerprint, Persona inquiry ID) | Until you delete them |
| Records of each verification attempt | 90 days after the attempt ends |
| The verification lock after you delete | 30 days, then it deletes itself |
| Database backups | 30 days |
| What Persona holds | Set by Persona's privacy notices. Deleting your data asks Persona to delete your ID and selfie records. |
Your data, your callDownload or delete your data
- Download it: run
/download_my_data, or press Download my data in/profile. You get a private file with every stored field, including your date of birth. You can do this once every 10 minutes. - Delete it: run
/delete_my_info, or press Delete my data in/profile, then confirm. Your verified details, verification history, pronouns and gender are deleted, your verified, age, region, gender and pronoun roles are removed in every server, and Persona is asked to delete your ID and selfie records. If Persona can't be reached, the bot keeps asking until it can. 
Good to know: after deleting, you can't verify again for 30 days, because each check costs money and this stops verify-and-delete abuse. Deleting doesn't remove servers' moderation cases about you, counted bans, or Stripe's payment records, which tax law requires.
Questions members ask
Does AuthentiGate see my ID or my selfie?
No. You take the photos on Persona's page, and Persona runs the check. AuthentiGate never receives or stores the images.
How long does Persona keep my ID?
That's set by Persona, not by us, so please read Persona's privacy notices. When you delete your data with /delete_my_info, AuthentiGate asks Persona to delete your ID and selfie records. If you cancel a verification, Persona is asked to delete anything it collected.
Why do you keep my date of birth?
So your age role can move up on your birthday without you verifying again. It's encrypted, and server staff never see it; they only see your age band, and only if their server has age roles.
Can staff in my server see my date of birth or country?
No. Staff see your age band and your region (a continent), and only if their server has roles for them. Your country isn't stored at all.
Do you sell my data?
No. We never sell your data, and we never use it for advertising.
Where is my data stored?
Our database is hosted by Hetzner in Germany (EU). Persona and Stripe may process data in the United States, under their own safeguards for those transfers, such as Standard Contractual Clauses.
Can my ID be used to verify someone else's account?
No. A one-way fingerprint of your ID number makes sure one ID verifies one Discord account.
I'm under 18. What happens?
You get the "Under 18" age band. Each server decides what happens to members below its age requirement: either they don't get the Verified role, or every role the bot manages is removed. We don't share a minor's details with Discord or anyone else.
What if there's a data breach?
We'll tell affected users through the support server within 72 hours of becoming aware of it.
I run a server. Do age roles guarantee a member's age?
No. Age and region roles help you manage access, but they aren't a guarantee and don't by themselves make a server compliant with any law. See section 4.5 of the Terms of Service.
I have another question.
Ask in the support server, or run /support in Discord.
Still unsure?
Read the full policy, or ask us anything in the support server before you verify.