https://discordapp.com/privacy
Their policy seems to allow for them to do so, dispite them publicly stating otherwise
it all stems from the wording, non-identifiable user data is not personal data and can be sold (not saying its currently being sold). this can be text, images, links as they do not directly identify the user, its just content.