Basically, I'm revisiting this question: Under age users - could they just be suspended until of age? Instead of immediately deleting an underage user's data, consider the following protocol:

Underage user protocol:

  1. Stack Exchange creates an encrypted ZIP file of that user's data,
  2. Stack Exchange securely stores the encryption key,
  3. Stack Exchange sends the encrypted ZIP file to the underage user [who cannot decrypt it],
  4. Stack Exchange deletes the user and the encrypted ZIP file [keeping the encryption key, containing no PII].

In this way, the underage user stores their own PII---if they delete it, it's permanently gone. And it's not decipherable in the unlikely event that it's sent to the wrong user. Stack Exchange does not store the PII of an underage user.

Protocol when they reach age x (where x is their locally required age):

  1. The underage user sends the encrypted ZIP file to Stack Exchange [if they choose to do so].
  2. Stack Exchange decrypts and restores the user's data onto Stack Exchange.

Would this work?

  • 5
    Valid discussion, and it might work, but the big question is "Is it worth the development time?" or "What's the benefit for SE?" - on which the answers will most likely be that it's just not worth the efforts that are required to do it. – Shadow Wizard is Vaccinating Jul 21 '20 at 12:53
  • We all learned that post dissociation can also be used as post association when some ill received announcement was posted a while back... – Luuklag Jul 21 '20 at 13:20

We are not interested in going down that route, because it is very rare that we get underage users with large amounts of content where it is painful to have to delete their account. In those rare circumstances where it does occur, we usually give them their old profile URL and tell them to come back to us when they are of age and we will restore all of their past content.

We can reassociate all their past posts and comments to a new profile down the road, and have done that for some users in the past. All it requires is knowing the previous user Id number. That is why we give them their old profile URL to hold onto (because of the way underage deletion works, it is not possible for us to look it up again once the deletion is performed).

However, all this work does not benefit most users. The vast majority of underage users that get deleted ask low-quality questions and would not benefit in any way from having their past content reassociated to them. They'd be better off starting with a clean slate. This process is reserved for high-reputation users that we are forced to delete.

  • 6
    "halpppp my minecraft wont load and my fort is in there and it was on fire when it crashes I am only 11" is a pretty typical example of what very young users post (and how we're alerted that they're too young to participate) – Tim Post Jul 21 '20 at 14:46
  • If the user can find one of their old posts, couldn’t they get the old ID from there? It shows as user##### as far as I know (example). – Laurel Jul 21 '20 at 16:11
  • @Laurel Yes. In the end we just need some sort of indication of what the user Id was, and a link to the old profile is the easiest thing to keep. As I said, once the deletion goes through, everything indicating that profile was underage is erased and we cannot track it down again ourselves. – animuson Jul 21 '20 at 16:17
  • 2
    How do you verify that the ID claimed by the formerly underage user is actually theirs? – Emil Jeřábek Jul 22 '20 at 8:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .