140 votes

A Post-Mortem on the Recent Developer Story Information Leak

Frequently Asked Questions What telephone number was leaked? The telephone number listed under your Job Match preferences, which was expected to be only used as a way for employers to contact you if ...
70 votes
Accepted

Asking for personal contact information in comments

That is completely your decision What you want to disclose is completely up to you. Some people are more than happy to offer that information for a multitude of reasons. off-topic support Internet ...
  • 44.3k
68 votes
Accepted

Sensitive Info Disclosure

Thanks for finding this. We've fixed it immediately as it was never supposed to be exposed information. The phone number is listed under your Job Match preferences and would be used as a way for ...
  • 241k
58 votes

A Post-Mortem on the Recent Developer Story Information Leak

We sincerely apologize if anyone was inconvenienced in any way as we corrected the bug and worked to mitigate any potential lingering effects. What I hoped to read at this point is a text like: We ...
  • 40.4k
57 votes

Embedding Facebook avatars enables tracking of Stack Overflow users

Firefox has an answer in terms of containers, sandboxing a group of URLs so their cookies remain within that group/container. There is an official extension available that lets you create custom ...
  • 101
57 votes

A Post-Mortem on the Recent Developer Story Information Leak

While the information disclosed is personally-identifiable, it was: Not actually printed to the screen, it was only visible in the HTML source of the CV page. Not easily correlatable; you ...
  • 19.7k
54 votes
Accepted

What to do when an OP posts someone's email address?

Edit the email to end in @example.com (or .org, .net if one of those is more appropriate). It's worth doing this immediately, since it will at least defeat the dumb scrapers that don't understand ...
  • 28.6k
41 votes

Embedding Facebook avatars enables tracking of Stack Overflow users

"Stack Overflow directly links to profile pictures from Facebook, which allows Stack Overflow users to be tracked by Facebook - even if we don't have a Facebook account." First paragraph of the ...
40 votes
Accepted

Did someone use Stack Overflow data in a bad way?

Makoto's & Martijn Pieters' answers seem to be the best from what we can tell about the other party: All things considered, you do provide a link to your GitHub account, and one of your commits ...
  • 1,382
29 votes
Accepted

Is my account data deleted on account deletion?

Account deletion doesn't remove the part of data necessary to maintain the anti-recidivism system: The system that deals with users who request deletion in order to evade restrictions that are ...
  • 6,222
27 votes
Accepted

Where to find my user data dump?

You're looking for the Your Personalized Prediction Data page: You can get to it by going to the Edit Profile and Settings tab on your profile, then Preferences, then the Manage personalized ...
26 votes
Accepted

Does a user's personalized prediction data include all tags?

We started maintaining Tag View data as of September 1, 2014. So that's the earliest possible information in your personalized prediction data. If you've got a Stack Exchange account we'll maintain ...
  • 38.7k
23 votes

When answering a question, is it ethical to ask for a Google sheets file even when such a request violates a user's privacy?

In general, one can't violate one's own privacy (at least not in a legal sense). If the user shares material containing someone else's personal information, that would really be a problem. But sharing ...
  • 20.7k
20 votes
Accepted

What does IsHighRepEarner field in Personalized Prediction Data feature stand for?

It's nothing fancy. It's just an indicator of whether you've passed an arbitrary reputation threshold on the site, telling the system whether you are a "high-rep user" or not. I don't know the exact ...
  • 53.5k
19 votes
Accepted

Export User Data (GDPR requirement)

There is a data access request form at https://stackoverflow.com/legal/gdpr/request. For a confirmatory staff reply, see Where can I download my user data? (GDPR data portability) on MSE.
  • 32.9k
16 votes
Accepted

Survey Request From Software Performance, Analysis, and Reliability Lab (SPEAR) at Concordia University

As you've surmised, this survey (and many others like it) is not official or sanctioned by Stack Overflow. These do happen from time to time with students seeking to collect data for a paper or some ...
14 votes
Accepted

I have added a mobile number to my developer story profile — who can see that?

According to this answer: The phone number is listed under your Job Match preferences and would be used as a way employers could contact you if you’re expressed interest in being contacted or ...
  • 28.5k
12 votes

Disclosure of personal data with certificates

I think you're referring to the data contained within the certificate. That data is public and available within the published certificate (signed or not). You could always use it to generate your own ...
  • 30.6k
12 votes

Where did SO get my old phone number from?

I ran down the list of possibilities on how this could have happened, even taking into consideration possible glitches on our side. Long story short, you almost certainly provided it without noticing, ...
  • 33.1k
11 votes

Sensitive Info Disclosure

This also happens to me if you google your email in double quotes... "youremail@gmail.com" I get a result of my Stack Overflow CV that has no mention of my email on that page.
  • 14.4k
10 votes
Accepted

Being called after leaving personal data on SO accidentally

The first issue is that you linked to a Fiddle instead of putting your code in the question. Even when we delete revisions, we can't control what other sites do. That's a good reason to not use ...
8 votes

Do the cookies already work while you just log in on the login screen of a Stack Exchange?

When you load https://stackoverflow.com in an incognito window, one cookie (prov) is set: (No idea what that is) Then, immediately when you consent to cookies, two ore more cookies are added: Only ...
  • 69.5k
7 votes
Accepted

Is the Account Removal process GDPR Compliant?

I have now had a reply to my comment as follows; At the moment there is no way to expedite the process except for a GDPR request. Please keep in mind, this is an edge case because you are the ...
  • 3,339
7 votes

Asking for personal contact information in comments

I would say this is not really what Stack Overflow is about and comments asking for such information should be flagged (as "not constructive" probably). If you want people to contact you, you're free ...
6 votes
Accepted

Where does Stack Overflow get the list of Recommended Readings on our Developer Stories?

You might have forgotten that you have added them a long time ago, even before the Developer Story feature was released. You can edit them in your Developer Story tab. Just hover over the ...
  • 75.6k
6 votes
Accepted

When answering a question, is it ethical to ask for a Google sheets file even when such a request violates a user's privacy?

Given the latest support for tables, I believe using tables solves a lot of the issues mentioned. I'm adding a answer, so users referred here might use tables instead of sharing a sheets file. ...
  • 44.3k
4 votes

Can someone explain the parameters tracked by "Personalized Prediction Data"?

This is what those parameters show for me: "DisplayAdPersonas": { "BigData": 0.0185441107163209, "Cloud": 0.0460837117725306, "DevOps": 0.0281699718062293, "FrontEnd": 0.33013315812635, "IOT": 0....
  • 69.5k
2 votes
Accepted

How frequently is Personalized Prediction Data updated?

The file is updated every day at around about 0:00 GMT
  • 10.9k

Only top scored, non community-wiki answers of a minimum length are eligible