Questions tagged [privacy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
119 views

How best to design a cookie banner for acceptance?

We have taken legal advice and we must now show three buttons on our cookie popup with 'equal' weight and color. We do not want to mislead anyone with dark patterns, but I do want to make sure that ...
2 votes
4 answers
203 views

How to best disclose in which ways a webpage is personalized?

I’ve got this idea about explaining to people how each webpage on a site was personalized to them. E.g. the currency you see can be based on the location-from-IP address, the article recommendation ...
0 votes
1 answer
53 views

Can a mobile app save data about a user without a user giving the permission?

Is it allowed to store a user id to remember him, his settings, preferences and history, without asking for his permission? Is there anyknowledge about that how that goes with privacy laws like GDPR ...
1 vote
1 answer
119 views

Anonymity in Free-text Responses

We are creating a survey that allows companies to see a detailed report about their organisational pain points. The survey is comprised mostly of questions based on Likert Scale. However, we also ask ...
0 votes
2 answers
70 views

In B2B applications where are the T&C and Privacy policy placed usually?

I'm designing the legal modules for a B2B application that is accessed via a browser. This application mainly shows different kinds of performance reports. When logging in for the 1st time, users need ...
1 vote
4 answers
2k views

How to Block Multiple Logins /Sign Up?

So, I have an App where the user needs to sign up to access the app. I'm planning to run an offer where user can order that item only once in a day. But I have the doubt that he may change login Id (...
36 votes
9 answers
18k views

Why isn't the "remember me" checkbox in login forms enabled by default?

On the majority of sites, a "remember me" checkbox on login forms is not selected by default. Most users would like to stay logged in after login. It annoys users each time to have to enter username ...
3 votes
2 answers
201 views

Should I verify a user's password before showing them that they are banned or just check the email?

If I ban a user from a website indefinitely (specific manual ban not automatic), and they'll never be able to appeal, should I verify the user's email and password, or show them that they're banned ...
14 votes
3 answers
12k views

"By posting this, you agree to our terms and conditions"

Is it okay to have a "By posting this, you agree to our terms and conditions" (i.e. like 4chan) as opposed to a "I agree to the terms and conditions" checkbox? I read about automatic agreement to ...
2 votes
3 answers
225 views

Best practice for private key backup flow on mobile

The mobile app I'm working on is using end-to-end encryption algorithm. User creates a private key to read data that is saved on the server. The key is being stored on a device and can be exported to ...
2 votes
1 answer
677 views

Should I Store User Data Locally on Device or Server Side Database

I'm currently working on a 'mental wellness' app, functionality for which include things such as; Making journal entries (typed and voice recorded) To Do Notes Setting Goals/Targets Recording ...
5 votes
1 answer
235 views

Identity and abuse in software build around anonymity

I am developing a new application (web + mobile) that sort of builds around anonymity and requires a big audience to be interesting. People will be in direct contact with each other (one on one), but ...
2 votes
2 answers
434 views

The "Hey Google" interaction - Dark UX Pattern?

Let's understand what we are talking about here - 1) On android phones - the moment you say, "Hey/Ok Google", Google starts acting based on your voice commands, i.e. becomes voice-activated. 2) On ...
0 votes
1 answer
1k views

GDPR banner accessibility - where should it be in the page tab order?

We're adding an 'accept cookies' GDPR banner across the bottom of our site. Should it be the first thing that gets focus when tabbing into the page?
1 vote
3 answers
154 views

Font size for sensitive information

I'm developing an app that allows users to manage their financial products. This app shows information about accounts, balance, cards, etc. Considering such details are private and sensitive, I'd not ...
6 votes
7 answers
28k views

Aesthetic way to hide ones face [closed]

What could be solution for hiding/ obscuring the face of a person on a photo. The need is to protect privacy, yet still keep the image visually attractive.
4 votes
4 answers
7k views

Should the "Send anonymous usage statistics" checkbox be enabled by default?

If you have a "Send anonymous usage statistics" checkbox in your application, should it be enabled by default or not? If you have it enabled by default, you will probably get more statistics, but some ...
3 votes
2 answers
265 views

What do we call asking for the minimum information required to do the task?

We have all got kind of used to all kinds of things requiring information they have no reasonable need to. Eg a forum requiring your phone number, address and occupation. A raffle requiring more or ...
5 votes
1 answer
5k views

Allow users to create an account without email

I have a website that requires users to enter email and password in order to create an account. I noticed that there are a lot of people that do not want to provide their email address during the ...
0 votes
1 answer
68 views

How to avoid creepiness when suggesting profile edits in a social network?

I'm building a small social network for a specific audience and have a question about how to best leverage info provided by a user's friends to help complete a user's profile. Here's two examples: ...
1 vote
2 answers
6k views

How should I handle pending follow requests when the profile privacy level changes?

Background In our system, a user's profile can be public or private. If the profile owner sets his profile to public, anyone can follow the profile. If he sets it to private, people must send a ...
5 votes
4 answers
1k views

How to prevent creation of multiple accounts under the same company?

Let's say there's Company ABC and Employee A signed-up for an account under his own email address (e.g. [email protected]). However, let's say Employee B signed-up under the same company but ...
0 votes
1 answer
67 views

Register Page - Already Exit Email - How can I give a good message to user without breaking privacy?

We have clearly mentioned that "we don't give personal data including email address to any third party" in our privacy policy. So when a user try to create a account using already exit email address,...
13 votes
2 answers
3k views

UX implications - EU General Data Protection Regulation

I'm struggling to find any UX-specific guidance on the impact of GDPR - the new EU data protection regulation - coming into force May 2018. From the reading I have done so far, I've identified use-...
0 votes
1 answer
109 views

Files downloaded from site - how to address public computers

Our site allows the user to download PDF files (either stored in our CMS system or created as a Stream from the API) that contains personal financial information We have a client who has asked if we ...
26 votes
11 answers
11k views

How to ensure users can't sign up for multiple accounts?

I'm working on a web app right now which users will normally have to pay to use, but I want to also offer a short demo period (haven't settled on how long yet, but somewhere between 1 day and 1 week). ...
1 vote
5 answers
283 views

Would users understand splitting an Android app's functionality by permission?

Say I'm developing an app for Android tablets that supports offline use, such as a mail or Usenet client. As far as I can tell, most tablets are Wi-Fi-only, and the user is likely to be away from Wi-...
3 votes
3 answers
126 views

How much should the form remember? Which fields are considered safe?

I was creating a site, that has a product page with a small three-field form: name email phone To send the form, user shouldn’t be registered. They say, it’s better to start with something, so my ...
2 votes
3 answers
166 views

How to protect user privacy when conducting research on opening bank accounts?

I work for a bank and we want to redesign our online account opening process. We don't track analytics and we have limited insight into the user experience. We don't have the ability for people to ...
1 vote
1 answer
129 views

Should I show users their IP address?

I run a small cybersecurity blog, with a big focus on privacy and anti-tracking. I have a prominent statement at the top of my homepage that there is no tracking on the site (which is true). One idea ...
-1 votes
1 answer
87 views

Standard privacy terms for collecting email address, first name, surname [closed]

Is there a standard set of terms that could be used to include (for UK website), that would cover me, asking a user for First name, surname, username, email address and an opt in for communications ...
4 votes
3 answers
354 views

What's the reason behind not notifying users that they entered a wrong email when they recover their password?

Sorry, I was not able to formulate the title shorter. Today I stumbled across the password recovery from Dropbox. Here, users have to enter their email address and Dropbox says: If a Dropbox ...
46 votes
12 answers
9k views

Obfuscating event location on map

I'm creating an events app where users can host events at their place and invite people. I want the list of hosted events to be publicly viewable on a map, designated by some icon. BUT, public event ...
3 votes
3 answers
281 views

On mobile devices, should there be a 2-step process when asking for permission to user data?

I always had a sort of a pet-peeve with mobile applications asking, out of the blue most of the time, for access to my Contacts, Calendar, Location etc. As far as I can figure, my reluctance in giving ...
1 vote
1 answer
187 views

On checkout, is it possible to include "Visa Checkout", "Amex Checkout", Mastercard Securecode + Paypal?

My goal is to create a signup screen that allows the easiest and most secure way to pay for a product. In most cases, I can improve the security and reduce payment disputes by using brand specific ...
17 votes
6 answers
4k views

How to handle rejected Terms and Conditions?

We have a mobile app (iOS specifically) and we want to display a popup to our users when our Terms and Conditions or Privacy Policy changes and explicitly require them to accept or reject the new ...
4 votes
2 answers
804 views

Do users want to be asked about analytics collection?

We're introducing analytics into our iOS and Android apps for the first time. Is it the done thing to pop something up to make users aware, and allow them to opt out, or are people generally fine with ...
2 votes
1 answer
42 views

Should I have different toggles for collecting usage data and crash reports?

I am developing a mobile app and I am currently working on the usage and crash report functionalities, which made me start wondering: should I ask the user two different permissions for these features,...
5 votes
3 answers
191 views

How to communicate that an app never sends information to a server?

If you have an app that never sends any information to any server, what would be the best way to communicate this via the UI? Background: I produce an app that stores data chosen by the user, ...
2 votes
2 answers
2k views

Best way to verify a user for a dating app? [duplicate]

What is the most user friendly way to verify a user’s identity for a dating app? We currently use Facebook login but we receive a lot of complaints that we don’t have another login method. So I’m ...
5 votes
1 answer
176 views

Should I hide the details of banned users?

I'm developing a website where users can be banned for unwanted behavior. When a user is banned, he won't be able to log in on his account anymore. As a result he wouldn't be able to change/remove his ...
6 votes
2 answers
687 views

Redacting and combining ID cards (college ID, passport, license, 4 H club)

I need a UI that will encourage privacy, and allow a user to selectively disclose information on a need-to-know basis, in real life and online. This can be ANY information, from a catalog of sorts ...
1 vote
1 answer
95 views

Displaying the actual encrypted data or replace its value with wild card

So we have a column on a table where we display different user names and their recent daily activities. The admin has the option to encrypt the actual user names due to privacy concerns. The current ...
2 votes
1 answer
261 views

usability testing with sensitive and private information

The current product I'm testing requires users to connect their financial information (such as their bank, credit cards, etc.); after this info is connected, the user is shown their balances, credit ...
0 votes
1 answer
66 views

Asking feedback and contact data after leaving signup form

Is it smart to do this ?. Everybody clearly wants to know why the user that was willing to signup leaved the form. The only thing that could backfire are the users that wanted to signup at later time ...
4 votes
1 answer
119 views

Is liability enough justification to prevent a user from deleting an account?

I'm referencing this question and this question about the negative impact of making account deletion difficult. However, I have a case where I'm tracking legal agreements that apply to two or more ...
2 votes
1 answer
65 views

Should a customer/product support forum display the name of the asker?

Customer support forums are a place where, in addition to having their questions answered, users can act as supplementary product support in order to build a reputation in the community as an expert. ...
2 votes
1 answer
66 views

How best to provide contact info in a member directory while preventing 'data harvesting'?

I am working on a searchable online directory. People will use it to find other members, service providers, and the like. It's critical that the results include contact data. However, my clients are ...
0 votes
2 answers
183 views

Recommended ways to show the user how we use their information?

If I'm building an app that requires a Facebook login, users' first gut reaction is, "this app is going to spam my wall and my friends' walls, isn't it?" How do you get around that? Tinder is an app ...
1 vote
2 answers
220 views

HTML5 Geolocation in user registration

I have sign-up page on startup, where user should provide his location - Country, State/Region and City. This is necessary information in user wants to use our service. Question is, how user will ...