By default they are actually called Personal Messages rather than Private Messages (because admins can see them).
4 Likes
This seems like an important concern if it isnāt made clear in the TOS that messages can be read by administrators/moderators, which isnāt the default for old systems like the post office which isnāt supposed to read peopleās letters and they arenāt able to anyway unless they break a letter seal.
There is an alert banner option for the A.I. message system that alerts users that those messages can be monitored by moderators, may be a good feature for that to be an option for regular personal message topics also.
Havenāt tried that but would guess there would be some complaints. Way to respond to that could be to recommend alternative means of communication outside of discourse.
4 Likes
The community I manage is still on Facebook, and gaining some control over private messaging is one of the things I really look forward to with Discourse. We have a house rule that people are not to give or take advice in private messages (itās a support group for managing diabetic cats). Most people are respectful of the rule, but we regularly run into two problematic scenarios:
- a ābad actorā who uses private messaging to users to give advice that goes against our best practices guidelines (or simply, what we allow - circumventing group rules)
- an overenthusiastic helper who gets sucked in a āpersonal coachingā dynamic through private messages
Iām definitely considering limiting who can contact who through private messages and chat. (Maybe only admins can be messaged.)
We might have group chats, and that would be ok given they can be moderated, but we also want to limit individual chats outside of those, like with private messages.
For me itās not a question of legal ramifications but of helping us enforce some of the community rules. OTOH Iām aware that being able to communicate privately is how friendships develop, so it might not be ideal to close it down completely. Maybe keep messages, but disallow chat?
Iām also curious about how much access the admin team has to private messages or chats ā is it all there in the clear to be read?! Or do we see stats, e.g. who is messaging who and how much?
2 Likes
For Discourse, theyāre referred to as āPersonal Messagesā as admins do have full access to them so canāt really be deemed āprivateā (and Moderators can also view them if one of the messages has been flagged).
However, chat DMs are not as easy for admins to view through the UI like with PMs. Though you can create data explorer queries and view the underlying data that way.
On the plus side, thereās a lot of mod tools that work in PMs and chat, which is brilliant. Watched Words, for instance, will work just as well for topics, PMs, and chat. 
6 Likes
Private messages are called personal messages in Discourse.
As an admin, you can visit any userās profile and check their messages tab, just like you can look at your own messages. You can see the titles, and you can also open them and read them.
Admins and moderators can also see the number of personal messages on the usersā admin page, and you can get any data with the help of the data explorer.
The Discourse settings configure who is allowed to initiate messages. Other users can then respond even if they donāt have the permission to create one. So, if you donāt want any 1:1 topics, you probably want to limit that to staff. For exchange within groups, you can configure the group inbox within the group settings. Messages to groups are not limited by the Personal message enabled groups setting.
I think chat DMs work similarly, but I havenāt tested that in detail. Based on what I remember, you cannot send a DM to users who are not allowed to use chat, but you can send them to users who are allowed to use chat but not DMs.
6 Likes
Something that you could possibly do is to bump the personal message enabled groups setting to TL2 and above.
5 Likes
Right, I think this will be a big problem with a population coming from Facebook and who have the expectation of Ā« total privacy Ā» 
in Ā« personal messages Ā» (even though Ā« chat Ā» is closer to Facebook DMs).
Iām going to have to think more about this.
Oh, I need to know more about this. Group inbox? Messages to groups? Does that mean one can make a group function somewhat like an email discussion list?
1 Like
Yes, you can!
What is more, you can easily
- pull in people who arenāt even registered on your site via email
- have multiple groups and individuals participate
- control the default notification levels (per group)
The chief downside is that message content is somewhat siloād from forum content in the search. If you lean heavily on group inboxes, this causes quite a few problems.
1 Like
I wonder if itās translated Ā« personnel Ā» in French, because that would imply an expectation of privacy (if something is Ā« personnel Ā» it is definitely not something for any other eyes than yours!)
Admins donāt need to advertise that they can access private messages. Their elevated access is implicit and part of the job, not a feature to promote. Highlighting it invites pointless debates about a non-issue.
Also, users donāt realize that their emails, SMS, social media messages, and more can be read by people with technical and/or legal authority.
So I wouldnāt bother with this subject.
If you want to read more about this, tho, here are two links: this one and this one.
āMessage directā 
3 Likes
True. Just makes me a little uneasy, as I ā as āThe Adminā am also part of the community, which contains many people who are friends. I donāt know, I feel this setup could set the stage for drama down the line.
ouf!!
And when my government has laws about it? where I live exist some acts that deny me access DM and PM called LGPD looks likes GDPR unfortunately I define the use both to level 4 for while.
Some tools how ai-toxicity ai personas doestāt works for me so basically idk what to do.
We canāt provide legal advice here, but you should maybe seek out a second opinion on this. Itās incredibly unlikely that it completely prevents DM and PM access, as that would make it impossible to adhere to other laws. Most data protection laws include information about reasons for legitimately accessing this sort of content, though you may have to disclose that you can access it in the siteās privacy policy.
3 Likes
I did thank you for answer Iāll consider these.
There used to be support for an encryption feature with discourse personal messaging but that has been depreciated:
Looks like you are talking about Brazil with LGPD, says here that ābroadly alignsā with GDPR policies:
2 Likes
There is also this plugin. But looking at the repo may need some updating possibly
There is also potentially some AI options to do this kind of thing these days as well
1 Like