[debazel]

It isn't because age verification has made storing personal information like this an "essential" operation.

[BoredPositron]

You don't need to store the information after verification.

[debazel]

Discord doesn't store ID indefinitely either, but there is a time frame, both between data submission and processing, as well as between the start of the breach and the end, during which the data can be leaked.

[subscribed]

Absolutely untrue. Make "user proved with ID they're 18+" an immutable flag of the account, and delete the toxic data you verified to prove it.