Questions tagged [gdpr]

For questions about GDPR (General Data Protection Regulation, an EU privacy law) related to Stack Exchange. Do not ask questions about GDPR in general.

Filter by
Sorted by
Tagged with
-10 votes
1 answer
108 views

What data from users does Stack Exchange keep?

I'm from Europe, which has the General Data Protection Regulation (GDPR). Does Stack Exchange have a GDPR manifest? What data from users does Stack Exchange keep?
user avatar
13 votes
0 answers
192 views

stackexchange.com missing cookie consent logic

There appear to be two bugs on stackexchange.com regarding GDPR/CookieLaw and cookie consent: There's no cookie consent dialog, similar to the rest of the Stack Exchange network You can't manage ...
user avatar
  • 279
1 vote
2 answers
253 views

Why is Stack Exchange using dark patterns on its cookie permission dialog?

It would appear as though Stack Exchange is employing a dark pattern in its cookie permission dialogs. Specifically, there are two buttons presented in the initial dialog. The colour depends on the SE ...
user avatar
  • 214
3 votes
1 answer
105 views

Why does SE track post referrers?

I exported my SE data, and in /qa/[site]\PostReferralsInbound.json there are entries like {"postId":1732454,"ipAddress":"...","creationDate":"2021-05-09T21:...
user avatar
  • 3,484
-13 votes
1 answer
138 views

GDPR Request: Post Edit does not contain the edit

X\PostHistory.json contains the Initial Title, Initial Tag, Initial Body, Edit Title, Edit Tag, and Edit Body. But it does not contain what exactly was edited!
user avatar
18 votes
0 answers
131 views

In GDPR data dumps, can the backslashes in file paths please be changed to forward slashes, so they're not broken for non-Windows users?

(A quick note: I'm a primarily Windows user, but as an occasional Mac and Linux user, and having technical knowledge of the issue, I can see why this is a problem, and many others have raised this ...
user avatar
33 votes
2 answers
930 views

Chat messages and SO Jobs data are missing from the GDPR Data Access Request JSON dump

I just recently learned about the automated service provided by Stack Exchange for handling GDPR Data Access Requests. So, of course, I tried it out, and indeed promptly received a 13 megabyte zip ...
user avatar
8 votes
0 answers
227 views

Why can't I dismiss these Stack Exchange cookie popups on mobile browser?

These pop-ups keep appearing on my Android phone when browsing Stack Exchange sites. No matter what I choose these popups occur on every page refresh and whenever I try to view a question. I'm using ...
user avatar
  • 481
42 votes
2 answers
1k views

Could the cookie banner please be made less intrusive?

I frequently visit Stack Overflow and other Stack Exchange sites from private browser windows, which means I get the cookie banner over and over. Does it really have to cover the most useful part of ...
user avatar
  • 8,241
42 votes
19 answers
4k views

We’re adding more user controls for cookie consent

Update (Feb 8 2021): We’ll be doing some A/B testing with the consent interface. Once we’ve landed on a final design, we’ll use that design on all of our sites network wide. Additionally, we’re ...
user avatar
  • 3,920
21 votes
1 answer
235 views

We’re Adding our Subprocessors to the GDPR Section of Our Legal Portal

As part of our continued effort to ensure compliance with the GDPR, we are publishing a list of our subprocessors - a list of third party vendors who process personal information for each of our ...
user avatar
  • 3,920
12 votes
1 answer
328 views

With the UK now having two seemingly active versions of GDPR, at which age should a moderator consider a user underaged?

The FAQ on underage users states: Stack Exchange has decided to limit registration for all people in any EU member nation to users 16 or older, in order to ensure it remains compliant with the laws ...
user avatar
  • 34.6k
61 votes
1 answer
709 views

Stop sending me emails I didn't sign up for

In the past few days, I've had eight separate emails from Stack Overflow. I signed up for none of them, and none of them are enabled in my email settings. The Overflow #17 Charcoal Digest - Tuesday, ...
user avatar
  • 35.8k
29 votes
0 answers
366 views

We’re Updating The GDPR-Related Sections Of Our Legal Portal

We’re doing a bit of an overhaul in our legal portal when it comes to how we organize our GDPR-related pages and information. There’s no change in what we collect or how we use it. Our goal is to make ...
user avatar
  • 5,088
22 votes
1 answer
306 views

Trying to download GDPR data dump results in "Oops! Something Bad Happened!"

I'm trying to download a data portability export archive for my account. I submitted my original request via https://stackoverflow.com/legal/gdpr/request on Jan 22 18:00, it began processing Jan 22 ...
user avatar
  • 8,827
24 votes
0 answers
206 views

How long should I expect a GDPR data rectification request to take?

Likely in September (2019), through looking at my profile using moderator tools (which I no longer have access to since I resigned as a moderator in early October, and I tried very hard to avoid using ...
user avatar
  • 8,827
24 votes
1 answer
592 views

How can I submit a GDPR request (e.g. delete account, rectify data, etc)?

The GDPR gives us some rights, e.g. the right to be forgotten or to have one's data rectified. I submit this question and my answer, such that what I found might be easier for others to access. E.g. ...
user avatar
45 votes
1 answer
821 views

Is "The Loop" covered by SO's Privacy and GDPR policies?

SO's "GDPR Policy" states in part we describe how we collect and use your data, and how we use technologies like cookies to understand how we can better help developers. However, The Loop's first ...
user avatar
6 votes
4 answers
541 views

Can users 13 to 15 years old who are based outside of the European Union use SE while traveling to the EU?

The Terms of Service contains the following snippet: If you are located within the European Union, you must be at least 16 years old to access or use the Network or Services, including without ...
user avatar
16 votes
1 answer
326 views

What happened to accounts that were previously of age, but became underage once GDPR was adopted?

I'm aware that in 2018, the GDPR was adopted in the European Union, and in response, SE amended its license terms to require that all users from the EU be at least 16 to participate in the site. ...
user avatar
73 votes
3 answers
2k views

Can a GDPR request take up to a month to process?

Out of curiosity, I've submitted a GDPR request just now. (I live in the Netherlands, so the GDPR applies to me) The fact that I've had to confirm my request through my attached email is excellent, ...
user avatar
  • 5,842
65 votes
1 answer
1k views

"You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack Overflow." - are you sure?

This morning I received a spam email from SE ("The Overflow - issue #1..."). At the bottom it says that "You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack ...
user avatar
6 votes
3 answers
303 views

Can Community Managers contact deleted users?

The short version: This question over on Ask Ubuntu got downvoted into oblivion (-6 is oblivion for AU) and subsequently deleted. I posted an AU meta question to prevent other users from deleting ...
user avatar
  • 2,209
13 votes
1 answer
229 views

How to report bugs relating to the GDPR that have a huge impact on the reputation of Stack Overflow?

A while back, I discovered a bug in the GDPR data exporter. This data exporter is supposed to export all user data, but at the moment, it doesn't. While I didn't talk publicly about this to prevent ...
user avatar
  • 1,050
5 votes
0 answers
93 views

My data access request will be processed last year?

On October 4th I opened a GDPR Portability request ("Export my data"). Today I received an email that my request will be processed and I will receive an answer on 3rd November 2018. This is also ...
user avatar
  • 7,131
-17 votes
1 answer
184 views

Is Winter Bash's opt-in/opt-out GDPR compliant?

Quote from this comment (posted by balpha ♦): ... While the publicly visible behavior is like you don't have hats (e.g. it's not visible on your avatar, you don't count towards the site leaderbords,...
user avatar
4 votes
0 answers
48 views

GDPR banner on network sites without account

Sometimes when browsing the hot network questions I see the GDPR banner on every network site where I haven't made an account because I don't want to participate actively. Dismissing it just makes it ...
user avatar
7 votes
1 answer
234 views

Where can I download my user data? (GDPR data portability)

The GDPR (not to be confused with GDFR) does mandate data portability, which even Instagram listened to by introducing a user archive download feature. Does the Stack Exchange Network also have such ...
user avatar
5 votes
0 answers
285 views

Is embedding arbitrary external images GDPR compliant?

Currently, SE allows user to embed arbitrary images (from HTTPS sources) into posts and into comments in chat. The consequence of this is that whoever controls the server those images are hosted on ...
user avatar
47 votes
1 answer
333 views

Can I have my flair without the cookie, please?

Even though I would like so, I refrain from adding a flair link on my personal web site because solely serving the PNG flair image file already places a third party prov cookie on the computer of my ...
user avatar
334 votes
15 answers
29k views

Brace yourselves: The GDPR is coming!

It's actually nothing to worry about. You as users end up with more protection, and companies like us are left in a place where we've got a framework for handling your information that puts much ...
user avatar
  • 177k
27 votes
1 answer
346 views

Why did I not find out about the TOS change until now (two weeks later) and only from a Reddit post?

Apparently the Stack Exchange terms changed two weeks ago. According to this the change went live on the second of May, and e-mails should have been sent "in the days ahead". Well, it's now two weeks ...
user avatar
29 votes
2 answers
581 views

Can we get an official statement about how the arbitration clause will be managed for foreign countries like European ones?

DISCLAIMER: the arguments described in this topic have already been referenced in multiple posts, yet no official comment on the issue was made that I'm aware of. This post is being made to raise ...
user avatar
  • 17.3k
134 votes
26 answers
16k views

Electronic opt-out, correcting miscommunication, and additional questions answered about the 2018 ToS update

We’ve listened to what you’ve been telling us about the arbitration clause that our most recent ToS update introduced. While we can't incorporate all of the feedback you offered, we did listen to it, ...
user avatar
  • 177k
129 votes
12 answers
7k views

We're examining the implementation of arbitration in the 2018 ToS update

This is an addendum to our announcement about a recent ToS update concerning Stack Overflow For Teams and GDPR; I'm starting a separate discussion because concerns about the third bullet, an ...
user avatar
  • 177k
7 votes
1 answer
607 views

Will Stack Exchange respect EU's "right to be forgotten"?

If a citizen of EU would request all his questions and answers to be deleted from all Stack Exchange sites, would that request be carried out? I'm not just talking about account deletion, where ...
user avatar