Tracker / Image/video generation

Is Midjourney private? Does it train on your prompts? Midjourney admin guide

Midjourney's EU training-content summary says user interaction data (prompts and images) is used for training. Creations are public on the website unless you use Stealth Mode, which only Pro and Mega plans have. Even with Stealth Mode, anything made in public Discord channels stays visible.

Vendor: Midjourney, Inc. · Last checked Oct 22, 2026 · 2 plans tracked

Plan by plan

Basic / Standard consumer

Trains on your data?
Yes User input and prompts (text and image) are used to train the model. We found no opt-out. source ↗ checked Oct 22, 2026
Retention
Unknown Not verified from a vendor-owned source yet.
SSO
Unknown Not verified from a vendor-owned source yet.
SCIM
Unknown Not verified from a vendor-owned source yet.
Audit logs
Unknown Not verified from a vendor-owned source yet.
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
Unknown Not verified from a vendor-owned source yet.

Stealth Mode is not available on these plans, so creations are visible on the website.

Pro / Mega consumer

Trains on your data?
Yes source ↗ checked Oct 22, 2026
Retention
Unknown Not verified from a vendor-owned source yet.
SSO
Unknown Not verified from a vendor-owned source yet.
SCIM
Unknown Not verified from a vendor-owned source yet.
Audit logs
Unknown Not verified from a vendor-owned source yet.
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
Unknown Not verified from a vendor-owned source yet.

Stealth Mode can hide creations on the website. Public Discord channels stay visible.

How to block or allow Midjourney

We haven't found a vendor-documented way to enforce this tool (tenant header, admin switch or MDM policy) yet. Your options are blocking the domains below at your secure web gateway or DNS filter, or using your browser-management policy (for example Chrome/Edge URLBlocklist).

Domains

“Primary domain only” means we haven't found a full endpoint list from the vendor, so blocking just this domain may not catch every API or desktop-app endpoint.

Change history

Sources