Questions tagged [gdpr]
For questions about GDPR (General Data Protection Regulation, an EU privacy law) related to Stack Exchange. Do not ask questions about GDPR in general.
39
questions
12
votes
1
answer
313
views
We've updated the Data Subject Rights (DSR) request page
We’ve updated the Data Request page to use a native solution from our consent provider, OneTrust.
What is changing?
Data Subject Rights (DSR) requests, as a part of Stack Overflow’s global privacy ...
- 1,299
6
votes
0
answers
163
views
How do I permanently set my cookie preferences?
I visit Stack Overflow on my phone several times a week, and it seems like about once a week (maybe more?) I get this cookie banner.
I make my selections, and expect the site to remember them. A week ...
- 180
40
votes
1
answer
551
views
The Flow State homepage is tracking users without consent
I just took a look at the Agenda of the SO Flow State conference, and I noticed that it seemed a bit absurdly slow and buggy for such a simple site. So I poked around with the dev tools and noticed ...
- 184k
-10
votes
1
answer
127
views
What data from users does Stack Exchange keep?
I'm from Europe, which has the General Data Protection Regulation (GDPR). Does Stack Exchange have a GDPR manifest? What data from users does Stack Exchange keep?
user1161087
17
votes
0
answers
266
views
stackexchange.com missing cookie consent logic
There appear to be two bugs on stackexchange.com regarding GDPR/CookieLaw and cookie consent:
There's no cookie consent dialog, similar to the rest of the Stack Exchange network
You can't manage ...
- 319
2
votes
3
answers
329
views
Why is Stack Exchange using dark patterns on its cookie permission dialog?
It would appear as though Stack Exchange is employing a dark pattern in its cookie permission dialogs.
Specifically, there are two buttons presented in the initial dialog. The colour depends on the SE ...
- 244
3
votes
1
answer
111
views
Why does SE track post referrers?
I exported my SE data, and in /qa/[site]\PostReferralsInbound.json there are entries like
{"postId":1732454,"ipAddress":"...","creationDate":"2021-05-09T21:...
- 4,778
-13
votes
1
answer
141
views
GDPR Request: Post Edit does not contain the edit
X\PostHistory.json contains the Initial Title, Initial Tag, Initial Body, Edit Title, Edit Tag, and Edit Body. But it does not contain what exactly was edited!
- 91
19
votes
0
answers
145
views
In GDPR data dumps, can the backslashes in file paths please be changed to forward slashes, so they're not broken for non-Windows users?
(A quick note: I'm a primarily Windows user, but as an occasional Mac and Linux user, and having technical knowledge of the issue, I can see why this is a problem, and many others have raised this ...
34
votes
2
answers
991
views
Chat messages and SO Jobs data are missing from the GDPR Data Access Request JSON dump
I just recently learned about the automated service provided by Stack Exchange for handling GDPR Data Access Requests. So, of course, I tried it out, and indeed promptly received a 13 megabyte zip ...
- 31.6k
9
votes
0
answers
566
views
Why can't I dismiss these Stack Exchange cookie popups on mobile browser?
These pop-ups keep appearing on my Android phone when browsing Stack Exchange sites. No matter what I choose these popups occur on every page refresh and whenever I try to view a question.
I'm using ...
- 491
41
votes
2
answers
1k
views
Could the cookie banner please be made less intrusive?
I frequently visit Stack Overflow and other Stack Exchange sites from private browser windows, which means I get the cookie banner over and over.
Does it really have to cover the most useful part of ...
- 13.3k
42
votes
19
answers
5k
views
We’re adding more user controls for cookie consent
Update (Feb 8 2021): We’ll be doing some A/B testing with the consent interface. Once we’ve landed on a final design, we’ll use that design on all of our sites network wide. Additionally, we’re ...
- 4,230
21
votes
1
answer
269
views
We’re Adding our Subprocessors to the GDPR Section of Our Legal Portal
As part of our continued effort to ensure compliance with the GDPR, we are publishing a list of our subprocessors - a list of third party vendors who process personal information for each of our ...
- 4,230
12
votes
1
answer
331
views
With the UK now having two seemingly active versions of GDPR, at which age should a moderator consider a user underaged?
The FAQ on underage users states:
Stack Exchange has decided to limit registration for all people in any EU member nation to users 16 or older, in order to ensure it remains compliant with the laws ...
- 39k
61
votes
1
answer
771
views
Stop sending me emails I didn't sign up for
In the past few days, I've had eight separate emails from Stack Overflow. I signed up for none of them, and none of them are enabled in my email settings.
The Overflow #17
Charcoal Digest - Tuesday, ...
- 36.2k
29
votes
0
answers
374
views
We’re Updating The GDPR-Related Sections Of Our Legal Portal
We’re doing a bit of an overhaul in our legal portal when it comes to how we organize our GDPR-related pages and information. There’s no change in what we collect or how we use it. Our goal is to make ...
- 5,162
23
votes
1
answer
329
views
Trying to download GDPR data dump results in "Oops! Something Bad Happened!"
I'm trying to download a data portability export archive for my account.
I submitted my original request via https://stackoverflow.com/legal/gdpr/request on Jan 22 18:00, it began processing Jan 22 ...
- 8,937
24
votes
0
answers
209
views
How long should I expect a GDPR data rectification request to take?
Likely in September (2019), through looking at my profile using moderator tools (which I no longer have access to since I resigned as a moderator in early October, and I tried very hard to avoid using ...
- 8,937
24
votes
1
answer
889
views
How can I submit a GDPR request (e.g. delete account, rectify data, etc)?
The GDPR gives us some rights, e.g. the right to be forgotten or to have one's data rectified. I submit this question and my answer, such that what I found might be easier for others to access.
E.g. ...
- 595
45
votes
1
answer
827
views
Is "The Loop" covered by SO's Privacy and GDPR policies?
SO's "GDPR Policy" states in part
we describe how we collect and use your data, and how we use technologies like cookies to understand how we can better help developers.
However, The Loop's first ...
- 591
6
votes
4
answers
559
views
Can users 13 to 15 years old who are based outside of the European Union use SE while traveling to the EU?
The Terms of Service contains the following snippet:
If you are located within the European Union, you must be at least 16 years old to access or use the Network or Services, including without ...
16
votes
1
answer
330
views
What happened to accounts that were previously of age, but became underage once GDPR was adopted?
I'm aware that in 2018, the GDPR was adopted in the European Union, and in response, SE amended its license terms to require that all users from the EU be at least 16 to participate in the site. ...
73
votes
3
answers
2k
views
Can a GDPR request take up to a month to process?
Out of curiosity, I've submitted a GDPR request just now.
(I live in the Netherlands, so the GDPR applies to me)
The fact that I've had to confirm my request through my attached email is excellent, ...
- 7,734
65
votes
1
answer
2k
views
"You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack Overflow." - are you sure?
This morning I received a spam email from SE ("The Overflow - issue #1..."). At the bottom it says that "You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack ...
6
votes
3
answers
306
views
Can Community Managers contact deleted users?
The short version:
This question over on Ask Ubuntu got downvoted into oblivion (-6 is oblivion for AU) and subsequently deleted. I posted an AU meta question to prevent other users from deleting ...
- 2,258
13
votes
1
answer
232
views
How to report bugs relating to the GDPR that have a huge impact on the reputation of Stack Overflow?
A while back, I discovered a bug in the GDPR data exporter. This data exporter is supposed to export all user data, but at the moment, it doesn't.
While I didn't talk publicly about this to prevent ...
- 1,050
5
votes
0
answers
100
views
My data access request will be processed last year?
On October 4th I opened a GDPR Portability request ("Export my data").
Today I received an email that my request will be processed and I will receive an answer on 3rd November 2018. This is also ...
- 7,300
-17
votes
1
answer
186
views
Is Winter Bash's opt-in/opt-out GDPR compliant?
Quote from this comment (posted by balpha ♦):
... While the publicly visible behavior is like you don't have hats (e.g. it's not visible on your avatar, you don't count towards the site leaderbords,...
- 6,882
4
votes
0
answers
50
views
GDPR banner on network sites without account
Sometimes when browsing the hot network questions I see the GDPR banner on every network site where I haven't made an account because I don't want to participate actively. Dismissing it just makes it ...
- 264
7
votes
1
answer
275
views
Where can I download my user data? (GDPR data portability)
The GDPR (not to be confused with GDFR) does mandate data portability, which even Instagram listened to by introducing a user archive download feature.
Does the Stack Exchange Network also have such ...
- 392
6
votes
0
answers
390
views
Is embedding arbitrary external images GDPR compliant?
Currently, SE allows user to embed arbitrary images (from HTTPS sources) into posts and into comments in chat. The consequence of this is that whoever controls the server those images are hosted on ...
- 184k
47
votes
1
answer
344
views
Can I have my flair without the cookie, please?
Even though I would like so, I refrain from adding a flair link on my personal web site because solely serving the PNG flair image file
already places a third party prov cookie on the computer of my ...
- 696
335
votes
15
answers
29k
views
Brace yourselves: The GDPR is coming!
It's actually nothing to worry about. You as users end up with more protection, and companies like us are left in a place where we've got a framework for handling your information that puts much ...
- 181k
27
votes
1
answer
352
views
Why did I not find out about the TOS change until now (two weeks later) and only from a Reddit post?
Apparently the Stack Exchange terms changed two weeks ago. According to this the change went live on the second of May, and e-mails should have been sent "in the days ahead".
Well, it's now two weeks ...
user136873
29
votes
2
answers
594
views
Can we get an official statement about how the arbitration clause will be managed for foreign countries like European ones?
DISCLAIMER: the arguments described in this topic have already been referenced in multiple posts, yet no official comment on the issue was made that I'm aware of. This post is being made to raise ...
- 25k
135
votes
26
answers
16k
views
Electronic opt-out, correcting miscommunication, and additional questions answered about the 2018 ToS update
We’ve listened to what you’ve been telling us about the arbitration clause that our most recent ToS update introduced. While we can't incorporate all of the feedback you offered, we did listen to it, ...
- 181k
129
votes
12
answers
7k
views
We're examining the implementation of arbitration in the 2018 ToS update
This is an addendum to our announcement about a recent ToS update concerning Stack Overflow For Teams and GDPR; I'm starting a separate discussion because concerns about the third bullet, an ...
- 181k
7
votes
1
answer
621
views
Will Stack Exchange respect EU's "right to be forgotten"?
If a citizen of EU would request all his questions and answers to be deleted from all Stack Exchange sites, would that request be carried out?
I'm not just talking about account deletion, where ...
- 259