Questions tagged [privacy]
The privacy tag has no usage guidance.
63
questions
0
votes
1
answer
31
views
Can a mobile app save data about a user without a user giving the permission?
Is it allowed to store a user id to remember him, his settings, preferences and history, without asking for his permission?
Is there anyknowledge about that how that goes with privacy laws like GDPR ...
1
vote
1
answer
65
views
Anonymity in Free-text Responses
We are creating a survey that allows companies to see a detailed report about their organisational pain points. The survey is comprised mostly of questions based on Likert Scale. However, we also ask ...
0
votes
2
answers
69
views
In B2B applications where are the T&C and Privacy policy placed usually?
I'm designing the legal modules for a B2B application that is accessed via a browser. This application mainly shows different kinds of performance reports. When logging in for the 1st time, users need ...
3
votes
2
answers
198
views
Should I verify a user's password before showing them that they are banned or just check the email?
If I ban a user from a website indefinitely (specific manual ban not automatic), and they'll never be able to appeal, should I verify the user's email and password, or show them that they're banned ...
2
votes
1
answer
472
views
Should I Store User Data Locally on Device or Server Side Database
I'm currently working on a 'mental wellness' app, functionality for which include things such as;
Making journal entries (typed and voice recorded)
To Do Notes
Setting Goals/Targets
Recording ...
5
votes
1
answer
228
views
Identity and abuse in software build around anonymity
I am developing a new application (web + mobile) that sort of builds around anonymity and requires a big audience to be interesting. People will be in direct contact with each other (one on one), but ...
2
votes
2
answers
421
views
The "Hey Google" interaction - Dark UX Pattern?
Let's understand what we are talking about here -
1) On android phones - the moment you say, "Hey/Ok Google", Google starts acting based on your voice commands, i.e. becomes voice-activated.
2) On ...
0
votes
1
answer
1k
views
GDPR banner accessibility - where should it be in the page tab order?
We're adding an 'accept cookies' GDPR banner across the bottom of our site.
Should it be the first thing that gets focus when tabbing into the page?
1
vote
3
answers
151
views
Font size for sensitive information
I'm developing an app that allows users to manage their financial products. This app shows information about accounts, balance, cards, etc. Considering such details are private and sensitive, I'd not ...
1
vote
4
answers
2k
views
How to Block Multiple Logins /Sign Up?
So, I have an App where the user needs to sign up to access the app.
I'm planning to run an offer where user can order that item only once in a day.
But I have the doubt that he may change login Id (...
0
votes
1
answer
67
views
How to avoid creepiness when suggesting profile edits in a social network?
I'm building a small social network for a specific audience and have a question about how to best leverage info provided by a user's friends to help complete a user's profile. Here's two examples:
...
1
vote
2
answers
4k
views
How should I handle pending follow requests when the profile privacy level changes?
Background
In our system, a user's profile can be public or private. If the profile owner sets his profile to public, anyone can follow the profile. If he sets it to private, people must send a ...
0
votes
1
answer
59
views
Register Page - Already Exit Email - How can I give a good message to user without breaking privacy?
We have clearly mentioned that "we don't give personal data including email address to any third party" in our privacy policy.
So when a user try to create a account using already exit email address,...
2
votes
3
answers
215
views
Best practice for private key backup flow on mobile
The mobile app I'm working on is using end-to-end encryption algorithm. User creates a private key to read data that is saved on the server. The key is being stored on a device and can be exported to ...
3
votes
3
answers
110
views
How much should the form remember? Which fields are considered safe?
I was creating a site, that has a product page with a small three-field form:
name
email
phone
To send the form, user shouldn’t be registered.
They say, it’s better to start with something, so my ...
2
votes
3
answers
165
views
How to protect user privacy when conducting research on opening bank accounts?
I work for a bank and we want to redesign our online account opening process. We don't track analytics and we have limited insight into the user experience. We don't have the ability for people to ...
1
vote
1
answer
125
views
Should I show users their IP address?
I run a small cybersecurity blog, with a big focus on privacy and anti-tracking. I have a prominent statement at the top of my homepage that there is no tracking on the site (which is true).
One idea ...
0
votes
1
answer
100
views
Files downloaded from site - how to address public computers
Our site allows the user to download PDF files (either stored in our CMS system or created as a Stream from the API) that contains personal financial information
We have a client who has asked if we ...
-1
votes
1
answer
79
views
Standard privacy terms for collecting email address, first name, surname [closed]
Is there a standard set of terms that could be used to include (for UK website), that would cover me, asking a user for First name, surname, username, email address and an opt in for communications ...
6
votes
1
answer
4k
views
Allow users to create an account without email
I have a website that requires users to enter email and password in order to create an account.
I noticed that there are a lot of people that do not want to provide their email address during the ...
4
votes
3
answers
336
views
What's the reason behind not notifying users that they entered a wrong email when they recover their password?
Sorry, I was not able to formulate the title shorter.
Today I stumbled across the password recovery from Dropbox. Here, users have to enter their email address and Dropbox says:
If a Dropbox ...
5
votes
4
answers
1k
views
How to prevent creation of multiple accounts under the same company?
Let's say there's Company ABC and Employee A signed-up for an account under his own email address (e.g. employeeA@companyabc.com). However, let's say Employee B signed-up under the same company but ...
13
votes
2
answers
3k
views
UX implications - EU General Data Protection Regulation
I'm struggling to find any UX-specific guidance on the impact of GDPR - the new EU data protection regulation - coming into force May 2018.
From the reading I have done so far, I've identified use-...
45
votes
12
answers
9k
views
Obfuscating event location on map
I'm creating an events app where users can host events at their place and invite people. I want the list of hosted events to be publicly viewable on a map, designated by some icon. BUT, public event ...
2
votes
4
answers
184
views
How to best disclose in which ways a webpage is personalized?
I’ve got this idea about explaining to people how each webpage on a site was personalized to them. E.g. the currency you see can be based on the location-from-IP address, the article recommendation ...
1
vote
1
answer
187
views
On checkout, is it possible to include "Visa Checkout", "Amex Checkout", Mastercard Securecode + Paypal?
My goal is to create a signup screen that allows the easiest and most secure way to pay for a product.
In most cases, I can improve the security and reduce payment disputes by using brand specific ...
17
votes
6
answers
3k
views
How to handle rejected Terms and Conditions?
We have a mobile app (iOS specifically) and we want to display a popup to our users when our Terms and Conditions or Privacy Policy changes and explicitly require them to accept or reject the new ...
4
votes
2
answers
796
views
Do users want to be asked about analytics collection?
We're introducing analytics into our iOS and Android apps for the first time. Is it the done thing to pop something up to make users aware, and allow them to opt out, or are people generally fine with ...
2
votes
1
answer
40
views
Should I have different toggles for collecting usage data and crash reports?
I am developing a mobile app and I am currently working on the usage and crash report functionalities, which made me start wondering: should I ask the user two different permissions for these features,...
2
votes
2
answers
2k
views
Best way to verify a user for a dating app? [duplicate]
What is the most user friendly way to verify a user’s identity for a dating app?
We currently use Facebook login but we receive a lot of complaints that we don’t have another login method. So I’m ...
5
votes
3
answers
191
views
How to communicate that an app never sends information to a server?
If you have an app that never sends any information to any server, what would be the best way to communicate this via the UI?
Background:
I produce an app that stores data chosen by the user, ...
6
votes
7
answers
27k
views
Aesthetic way to hide ones face [closed]
What could be solution for hiding/ obscuring the face of a person on a photo. The need is to protect privacy, yet still keep the image visually attractive.
5
votes
1
answer
165
views
Should I hide the details of banned users?
I'm developing a website where users can be banned for unwanted behavior.
When a user is banned, he won't be able to log in on his account anymore.
As a result he wouldn't be able to change/remove his ...
2
votes
1
answer
255
views
usability testing with sensitive and private information
The current product I'm testing requires users to connect their financial information (such as their bank, credit cards, etc.); after this info is connected, the user is shown their balances, credit ...
1
vote
5
answers
267
views
Would users understand splitting an Android app's functionality by permission?
Say I'm developing an app for Android tablets that supports offline use, such as a mail or Usenet client. As far as I can tell, most tablets are Wi-Fi-only, and the user is likely to be away from Wi-...
6
votes
2
answers
684
views
Redacting and combining ID cards (college ID, passport, license, 4 H club)
I need a UI that will encourage privacy, and allow a user to selectively disclose information on a need-to-know basis, in real life and online. This can be ANY information, from a catalog of sorts ...
0
votes
1
answer
65
views
Asking feedback and contact data after leaving signup form
Is it smart to do this ?.
Everybody clearly wants to know why the user that was willing to signup leaved the form.
The only thing that could backfire are the users that wanted to signup at later time ...
4
votes
1
answer
115
views
Is liability enough justification to prevent a user from deleting an account?
I'm referencing this question and this question about the negative impact of making account deletion difficult.
However, I have a case where I'm tracking legal agreements that apply to two or more ...
26
votes
11
answers
11k
views
How to ensure users can't sign up for multiple accounts?
I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week).
...
2
votes
1
answer
61
views
How best to provide contact info in a member directory while preventing 'data harvesting'?
I am working on a searchable online directory. People will use it to find other members, service providers, and the like. It's critical that the results include contact data. However, my clients are ...
2
votes
1
answer
64
views
Should a customer/product support forum display the name of the asker?
Customer support forums are a place where, in addition to having their questions answered, users can act as supplementary product support in order to build a reputation in the community as an expert. ...
3
votes
2
answers
231
views
What do we call asking for the minimum information required to do the task?
We have all got kind of used to all kinds of things requiring information they have no reasonable need to.
Eg a forum requiring your phone number, address and occupation.
A raffle requiring more or ...
1
vote
1
answer
92
views
Displaying the actual encrypted data or replace its value with wild card
So we have a column on a table where we display different user names and their recent daily activities. The admin has the option to encrypt the actual user names due to privacy concerns. The current ...
1
vote
2
answers
219
views
HTML5 Geolocation in user registration
I have sign-up page on startup, where user should provide his location - Country, State/Region and City. This is necessary information in user wants to use our service.
Question is, how user will ...
0
votes
2
answers
173
views
Recommended ways to show the user how we use their information?
If I'm building an app that requires a Facebook login, users' first gut reaction is, "this app is going to spam my wall and my friends' walls, isn't it?" How do you get around that?
Tinder is an app ...
3
votes
1
answer
5k
views
Terms and conditions checkbox and/or Accept/Decline buttons
The curent UX for my app is:
Terms & Conditions
text: Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque ut turpis ipsum. Ut cursus cursus scelerisque. Mauris lacus neque, ...
4
votes
1
answer
157
views
What best practices exist for preserving, protecting, or passing your digital footprint to another after death?
Yesterday I saw on the news that a father appealed to Facebook publicly to unlock the video "look back" of their deceased son. Because he hadn't shared the password with his parents (and what teen ...
-1
votes
1
answer
115
views
Anonymity / free vs trust [closed]
This is a two-part question. I'm going to pick on Craigslist, but I think it applies to other sites as well.
One of the drawbacks to free/anonymous posting is the amount of spam (including mass-...
3
votes
1
answer
98
views
Child registering for a service/app, parental concerns. Any experiences?
I am working on a project where we require parent permission to register. In practice, we ask Parent email in registration, and the parent needs to confirm. The app is a single-user experience, and ...
3
votes
3
answers
276
views
On mobile devices, should there be a 2-step process when asking for permission to user data?
I always had a sort of a pet-peeve with mobile applications asking, out of the blue most of the time, for access to my Contacts, Calendar, Location etc. As far as I can figure, my reluctance in giving ...