CITT

    Scan results

    Discord - Talk, Play, Hang Out

    Android

    Discord is designed for gaming and connecting with friends. Customize your own space, stream gameplay with low-latency, and use voice, video, or text chat. Easily switch between PC, phone, and console.

    CITT SCORE
    84
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Social gamers comfortable with standard analytics

    What It Means For You

    Activity data is reported to Sentry for crash monitoring and AppsFlyer for install attribution, so usage patterns and device details reach third parties. Firebase handles push notifications, meaning Google is part of every push notification delivered through the app. Account data and messages are otherwise well-protected in transit.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (9)

    Data Security

    3 total
    1 High
    1 Medium
    1 Low

    Network Security

    1 total
    1 Low

    Privacy

    4 total
    1 High
    2 Medium
    1 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Sentry, AppsFlyer, Firebase Cloud Messaging, Google Play Services, Google ML Kit, Google ExoPlayer, OkHttp, Retrofit, Fresco, Hermes

    Security Strengths

    • ✓No weak cryptography (DES, RC4, ECB mode) detected
    • ✓SQL injection prevention via parameterized queries
    • ✓Debuggable flag disabled in release builds
    • ✓Heavy code obfuscation (R8/ProGuard)
    • ✓Cleartext traffic disabled (HTTPS enforced)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    ads
    analytics
    location
    camera
    contacts

    Package

    com.discord

    Version

    314.13 - Stable

    Analysis Date

    Feb 8, 2026

    Classes Analyzed

    17,717

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 3 findings (1 high, 1 medium, 1 low)

    Network Security - 1 finding (1 low)

    Code Safety - 0 findings

    Privacy - 4 findings (1 high, 2 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    Discord collects account information (username, email, linked accounts), device identifiers, usage patterns, and diagnostic data. Analytics libraries receive details about how users interact with the app, including session activity and feature engagement.

    Third-Party Data Sharing

    Data reaches the following third-party services:

    • Sentry - Receives crash reports and error diagnostics
    • AppsFlyer - Receives install attribution and behavioral analytics
    • Firebase Cloud Messaging (Google) - Handles delivery of every push notification
    • Google Play Services - Core platform integration

    Additional libraries (OkHttp, Retrofit, Fresco, Hermes, Google ExoPlayer, Google ML Kit) support core app functionality and do not independently collect or share user data.

    Understanding the Scores

    CategoryScore
    Security85/100
    Privacy82/100
    Data Security80/100
    Network Security95/100
    Code Safety100/100
    Data Collection85/100
    Data Sharing88/100
    User Control90/100

    Positive Security Features

    • Network communications are secured with strong, modern protocols, earning a 95/100 network security score
    • The app achieves a perfect code safety rating, reflecting consistent and careful development practices
    • User account controls are robust, giving users meaningful options to manage their data, connected apps, and privacy settings
    • Data sharing with third parties is more contained than is typical for social platforms of this scale

    Areas for Improvement

    • Usage patterns and device details are shared with advertising analytics services. Clearer in-app disclosure of exactly what is shared and with whom would give users more confidence in how their data is used.
    • Some account data handling could be scoped more narrowly to reduce the amount of information transmitted during routine app use.
    • Granular opt-out controls for third-party analytics would allow users to limit behavioral data sharing without affecting core features like messaging and voice.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect observed security and privacy practices at the time of the scan.

    App Details

    FieldValue
    App NameDiscord - Talk, Play, Hang Out
    Package IDcom.discord
    Version314.13 - Stable
    Scan Date2026-02-08

    Right of Reply

    Developer not yet contacted