Questions tagged [privacy]

For questions related to user privacy.

Filter by
Sorted by
Tagged with
15
votes
1answer
308 views

A user's original email address is retained in the system even after they've changed it on all sites (privacy risk, potential Area 51 sync issues)

To understand this report, first, let's have a look at the profile fields for setting one's primary email address in the system. On most sites in the network, you'll find that option in Edit profile ...
7
votes
1answer
385 views

Exactly which users PII do moderators have access to? [duplicate]

This recent question here on meta has brought to my attention something I never realized before - non-employee moderators have access to some tools that can disclose an user EMail address. Since I ...
43
votes
1answer
776 views

Restrict moderator tools that allow mass dumping of user emails

There is a tool available to moderators that can show up to 1000 email addresses at once with a single query. On smaller sites, this tool is probably powerful enough to create a dump of the email ...
17
votes
0answers
273 views

Anonymize or hash the user ID part of a shared link so that users can earn badges for sharing links without having to leak their account on the site

The "share" link underneath a post includes the sharing user's ID for the purposes of awarding the user with Announcer, Booster, and Publicist badges in case enough users from different IP addresses ...
45
votes
1answer
795 views

Is “The Loop” covered by SO's Privacy and GDPR policies?

SO's "GDPR Policy" states in part we describe how we collect and use your data, and how we use technologies like cookies to understand how we can better help developers. However, The Loop's first ...
45
votes
2answers
1k views

Social media disclaimer policy for SE Staff

The most recent SE incident (as well as several others earlier) was largely inflated by the interaction of SE/SE Staff with the press and some social media interactions (tweets/re-tweets, in ...
128
votes
6answers
2k views

Does Stack Exchange have a responsibility to protect the rights of their volunteers?

The question is focused on the company's responsibility for taking action without just cause against an appointed moderator on Meta Stack Exchange (herein called SE). There is a moderator contract ...
74
votes
5answers
2k views

Did Upper Management ignore the growing tension in the TL that resulted in Monica's being axed?

I am not asking for any statements or details of the situation in TL to be revealed. I am asking just whether Upper Management ignored the situation until the situation exploded with Monica's being ...
56
votes
3answers
731 views

Does the policy that suspension details aren't released publicly still apply even if the user says they are OK with them being released?

There is a policy that the details regarding a site suspension aren't released publicly, and that the only one who is allowed to bring it up publicly is the suspended user themselves. Officially, this ...
60
votes
4answers
712 views

Users need to be able to remove themselves and all their data from the site

Many users no longer feel safe participating here and don't feel comfortable with SE having data about them. While there is a way to delete your account which will result in all your posts being ...
276
votes
5answers
7k views

Under what circumstances will Stack Exchange, Inc. share private/sensitive information with the press?

What are Stack Exchange, Inc.'s policies regarding whether and when private or sensitive information will be shared by the company with the public, and particularly with the press? By "private ...
2
votes
0answers
57 views

Area 51 login apparently requires the HTTP referer to be on

I have a Mac on Mojave 10.14.6 (10.15 is newest) with Firefox 69.0.1 (according to Mozilla's website, the current release is 69.0.3). I just tried to log in to Area 51, and got stuck on the page ...
19
votes
0answers
265 views

Why can't SE use a non-Google captcha that invades my privacy less?

One reason that I do not like using SE is third-party elements that track me and invade my privacy: specifically, Google captcha, which I am forced to use even when logged in. I use various blockers ...
-22
votes
2answers
285 views

Prefer only 'they' for personal pronouns due to privacy and security

This is specifically regarding updates to the new CoC (Official FAQ on gender pronouns and Code of Conduct changes) addressing personal pronouns. The point, up front With Internet hackers, bots, and ...
5
votes
1answer
462 views

Are there any topic boundaries for the private chat room Teachers' Lounge?

Because privacy and confidentiality means "what happens here, stays here", does that mean that participants there can freely voice concerns or questions that when brought to the public would be closed,...
46
votes
1answer
404 views

Are you sure that The Overflow newsletter is GDPR compliant?

I (European citizen) just received "The Overflow" newsletter, which I was opted into without my active consent. The GDPR is very clear that users should be told in advance what their personal ...
64
votes
1answer
784 views

“You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack Overflow.” - are you sure?

This morning I received a spam email from SE ("The Overflow - issue #1..."). At the bottom it says that "You’re receiving this email because you are subscribed to The Overflow Newsletter from Stack ...
189
votes
1answer
3k views

A general call for increased transparency from Stack Exchange, Incꓸ

As everyone who has so much as glanced at Meta.SE or any of a number of site metas over the last few days knows by this point, there has been a lot of controversy over the demodding (which many have ...
25
votes
1answer
431 views

Do I have a right for references to my username to be anonymized if I delete my account?

I'm posting this from an anonymous account for privacy reasons. I understand that, should I remove my account, content remains available. However, there are many references to my username scattered ...
15
votes
0answers
130 views

Use a privacy-friendly reCaptcha alternative

I'm very concerned with Google tracking my online activity. According to this article, Google's reCaptcha v3 poses significant privacy concerns, including: sending "hardware and software information, ...
20
votes
0answers
378 views

Anonymized chat messages are now searchable by user

Something appears to have changed recently whereby anonymised messages have become searchable under the user. For example; https://chat.stackoverflow.com/search?user=1640606&q=stackoverflow This ...
13
votes
1answer
201 views

Shield icon in Firefox: Tracking attempts blocked

When browsing sites in the StackExchange network, Firefox shows a shield by the address bar, and if you hover it it says "Tracking attempts blocked". Why is this shown? What does StackExchange sites ...
120
votes
2answers
10k views

Is SE allowing ads to use fingerprinting to track users?

This is pretty much a follow-up to this meta announcement by SE. Ideally that announcement would have resolved the issue, but the language in it was vague and evasive, and there have been no ...
31
votes
3answers
516 views

Technical reasons to use googleapis.com on SE websites

10 years ago, Employer blocks jQuery from Google, DOH! question was posted and Jeff Atwood (SE Founder) answered the following: We looked at this, but unfortunately the fallback from failure-to-...
2
votes
0answers
52 views

How to change my login and login provider [duplicate]

I have been using an authentication through my Gmail account because many years ago I thought it was a good method from a security standpoint, (even if the fact to use an E-mail as an account is a ...
-2
votes
2answers
123 views

Archive Stack Exchange posts (or make them private)

Is there a way to archive posts on Stack Exchange? I want them to be private.
12
votes
2answers
167 views

Which of my email addresses can mods see?

I can have email address(es) on my Stack Exchange account for logging in with, and I can have email address(es) for receiving emails about Stack Exchange. I understand that moderators can see user ...
106
votes
2answers
2k views

Off-site avatar images are a privacy risk

The user avatars that are displayed on every post are not all hosted on SE's imgur account, but on sources outside the control of Stack Exchange. The most prominent ones are Gravatar, Facebook and ...
16
votes
1answer
234 views

Can't disable usage of my on-site activity

https://meta.stackexchange.com/users/preferences/current After clicking the page just refreshes, and I can't change this option.
2
votes
0answers
44 views

Each site's moderator agreement - privacy policy linked to stack overflow page instead of the site's own page [duplicate]

On every Stack Exchange site except Stack Overflow, in the Moderator Agreement (<sitename.com>/legal/moderator-agreement) page's The agreement section contains two links. The first link is ...
26
votes
1answer
199 views

Misleading header “Information from Third Parties” in privacy policy

The following section is in the SE privacy policy: Information from Third Parties We may share personal information with third parties who provide services to Stack Overflow, such as payment ...
63
votes
2answers
2k views

More than 15k bottles of Viagra from Kenya, asking 110+ people for money, seriously?

I received a strange mail from a well-known SE user with the following body two days ago: HALLO EVERYONE. I am writing to you from Kenya. I have recently come into contact with a great bunches of ...
27
votes
1answer
361 views

Google Plus privacy leak and Stack Exchange usage

I just received a notification "Important Information about Google+ APIs" about the profile information leak to apps by Google+ API. The attachment states that the app "Stack Exchange" had access to ...
3
votes
2answers
84 views

Is there a need to protect users if they reveal traceable personal information?

A user was asking a sensitive question. There were comments saying "change your username and picture". I went and traced his picture and name and arrived at a website with their resume (no address ...
-6
votes
1answer
389 views

What privacy expectations are moderators who gain privileges by being SE employees subject to?

The moderator agreement, located at https://meta.stackexchange.com/legal/moderator-agreement, has the following text at the bottom: I acknowledge and agree that I am an independent volunteer ...
4
votes
0answers
61 views

Don't show hidden communities on “Top Posts” in network profile

I love the Hidden communities feature. Its official definition is (emphasis mine): Hiding a community means other users will not see it in your Communities list or Top Network Posts. The "...
3
votes
0answers
171 views

Is embedding arbitrary external images GDPR compliant?

Currently, SE allows user to embed arbitrary images (from HTTPS sources) into posts and into comments in chat. The consequence of this is that whoever controls the server those images are hosted on ...
6
votes
0answers
289 views

What information is collected about users when they are OFF site, and how is this used?

From the Stack Exchange Cookie Policy: "If you use the Stack Overflow Network, both Stack Overflow and third parties will use cookies to track and monitor some of your activities on and off the ...
34
votes
1answer
750 views

To refuse arbitration, give us your name and address

To opt out of mandatory arbitration and retain the right to participate in a class action, the terms of service state: Your written notification must be mailed to us at Stack Overflow, Attn: Legal ...
3
votes
1answer
71 views

Punctuation issues in the privacy policy page

In the Stack Exchange, Inc. Privacy Policy page, there are two punctuation issues. In front of the "This privacy policy" the space is missing. In the first paragraph: ... and as such are committed ...
29
votes
1answer
369 views

When opting out of arbitration, how will the email address I provide be used?

As a followup to Can an anonymous user opt out of arbitration? and We're examining the implementation of arbitration in the 2018 ToS update, I would like more information as to how the email ...
-9
votes
2answers
375 views

How do I opt-out of chat?

I think that chat is bad because it is permanent and searchable. If it existed for some reasonable time, like 30 days - no problem. I don't want my words retained for posterity and findable by anyone ...
23
votes
0answers
673 views

How is Stack Exchange preparing for the General Data Protection Regulation (GDPR)?

Is Stack Exchange making any changes in preparation for GDPR? What will the procedures be in order to comply with this regulation? The General Data Protection Regulation (GDPR) (EU) 2016/679 is a ...
5
votes
1answer
562 views

Will Stack Exchange respect EU's “right to be forgotten”?

If a citizen of EU would request all his questions and answers to be deleted from all Stack Exchange sites, would that request be carried out? I'm not just talking about account deletion, where ...
-19
votes
3answers
309 views

How should I request an embargo on access of my personal data by moderators?

I would like to request an embargo on access of my personal information collected by Stack Exchange. This embargo should relate to newly elected moderators of the Academia Stack Exchange site. As ...
39
votes
0answers
276 views

Stop automatically merging accounts without asking the users

Currently, users are automatically merged if SE detects certain situations that indicate that the users belong to the same real person. Some aspects of this have been mentioned in meta posts, but in ...
-15
votes
3answers
224 views

Why do Stack Exchange staff use their real names?

I was wondering why Stack Exchange staff use their real names, e.g. the community managers, Rob, Tim, and Shog (if he replies to an email). Shouldn't the same safety / privacy considerations be the ...
-20
votes
3answers
229 views

Do all of the Stack Exchange staff have access to a user's information?

When a user of Stack Exchange runs into trouble, e.g. gets into an argument with another user or moderator and incurs a suspension, I understand that volunteer diamond moderators and some Stack ...
6
votes
1answer
59 views

Privacy trust certificate looks outdated

Banner on the bottom of the privacy policy page says that certificate is valid today: But on the certificate page it looks outdated:
7
votes
0answers
134 views

If a user signs in with Facebook, their avatar comes from graph.facebook.com which may be blocked by privacy protection tools [duplicate]

It appears that some privacy protection tools (I use Privacy Badger in Chrome) block the domain on Stack Exchange sites. That means that the avatar doesn't load. It seems like this issue on the ...