94 votes

Obfuscating event location on map

If your mapping framework provides the feature, highlighting a "suburb" might be appropriate for your use case. Of course the actual size of what is considered a suburb varies widely from region to ...
Boinst's user avatar
  • 851
51 votes
Accepted

Obfuscating event location on map

I would not use the map as a user interface when the address is still private information. Because, the map is used to represent precise locations at some level you will always run into the issue of ...
Andre Dickson's user avatar
16 votes

Obfuscating event location on map

Another option, not sure if you've considered this: Ask the person setting up the event for a nearby public landmark (library, shopping center, etc.). Then use that location. That saves you from ...
derobert's user avatar
  • 331
15 votes
Accepted

How to handle rejected Terms and Conditions?

Whenever your TOS change, you should show them whenever the app starts. Here's a simple mockup: The user must click on the "Proceed" button to continue using the app. This button is enabled only if ...
dr_'s user avatar
  • 693
14 votes

Obfuscating event location on map

Your idea sounds like a reasonable solution. I would, however, ensure that this offset is not just randomly generated every time the map loads... With enough randomly-generated offsets, it would be ...
maxathousand's user avatar
  • 19.5k
9 votes
Accepted

What's the reason behind not notifying users that they entered a wrong email when they recover their password?

First, I thought they try to prevent attackers from randomly guessing email addresses and checking whether they are registered or not. Imagine you know that [email protected] is registered to, e....
Drown's user avatar
  • 295
8 votes

What's the reason behind not notifying users that they entered a wrong email when they recover their password?

You don't want anyone knowing even that someone has an account. If a malicious actor is searching for info on someone, it could be potentially damaging just knowing that someone even has an account / ...
Mike M's user avatar
  • 24.7k
8 votes

Obfuscating event location on map

Use the postal codes and corresponding area locations. It's an already implemented obfuscation/aggregation system adjusted for population density.
tROMsø's user avatar
  • 91
4 votes

Obfuscating event location on map

If you limit the zoom and use a fairly large blob rather than a pin marker, this has a natural feel of low precision. Here's a mockup: Only major roads are shown but you can still see which side of ...
Chris H's user avatar
  • 1,439
4 votes

Obfuscating event location on map

You obviously cannot just take your precise loction and cover it with a blurb of grey; it still pinpoints right to the destination. What you can (easily) do, though, is pick the next city, point out ...
AnoE's user avatar
  • 887
4 votes

The "Hey Google" interaction - Dark UX Pattern?

2) Can this be termed as dark UX? Short Answer: No. Why? Because Dark Pattern is a user interface that has been carefully crafted to trick users into doing things, such as buying insurance with ...
Sooraj MV's user avatar
  • 3,609
4 votes

How best to design a cookie banner for acceptance?

You ask, how to make the users click the “Accept” button without reading the text. This is a dark pattern, regardless of your company’s intentions given. While this wish is understandable from the ...
Sven Puschmann's user avatar
3 votes

UX implications - EU General Data Protection Regulation

Here are two great starting points on GDPR, UX & Marketing that i have found helpful myself: GDPR: 10 examples of best practice UX for obtaining marketing consent This article contains key UX ...
Lisanne van Hooff's user avatar
3 votes

UX implications - EU General Data Protection Regulation

I was reading through the regulation itself and opinions on it. I was thinking that by the end of my inquiry I can come up with UX guidelines. Nope, did not happened. Here's are my takeaways: You ...
Jurijs Kovzels's user avatar
3 votes
Accepted

Identity and abuse in software build around anonymity

Those verification methods are common and could be viable, but the underlying app may have conceptual problems. There's a lot to unpack here, so bear with me. For starters, it sounds like users ...
Nathan Rabe's user avatar
  • 8,888
2 votes

Best way to verify a user for a dating app?

Log in (via social or generic sign up) and verification can be two separate thing. Some dating website/app offer generic sign up (username and password) to reduce the barrier of entry to on board user....
adamsoh's user avatar
  • 1,787
2 votes

Obfuscating event location on map

If you internally divide the world space into a grid (say, 1x1 mile squares), then events can be classified as being inside some single square and whenever you render the map, you could just randomly ...
Doug Kavendek's user avatar
2 votes

How to prevent creation of multiple accounts under the same company?

Others have mentioned that there is no technical way to enforce this restriction 100%. People can be clever, people will find ways around this. One approach would be to legally enforce this, by ...
uliwitness's user avatar
  • 1,977
2 votes
Accepted

Allow users to create an account without email

You should first consider whether it's really necessary to register. E.g. many webshops allow ordering without registration (and in the case of digital content, users don't even need to enter an ...
Glorfindel's user avatar
  • 3,320
2 votes
Accepted

How to protect user privacy when conducting research on opening bank accounts?

For this scenario, if you truly can't rig up test accounts, I would suggest testing with high fidelity mockups/prototypes. This could be as simple as taking screenshots on each page of the account ...
DasBeasto's user avatar
  • 15.3k
2 votes

Best practice for private key backup flow on mobile

If you use any kind of "cloud" distribution system (either something like Dropbox or your own servers), then good security policy would dictate that the private key should neither be transmitted nor ...
TripeHound's user avatar
  • 2,655
2 votes
Accepted

GDPR banner accessibility - where should it be in the page tab order?

Yes it should be the first item that gains focus, even before 'skip links'. It is the only use case I can think of where 'logical tab order' does not apply. To comply with GDPR you must alert users ...
GrahamTheDev's user avatar
  • 2,598
2 votes

The "Hey Google" interaction - Dark UX Pattern?

Answer to #1 As a good interaction practice to aid users being comfortable about their data and privacy - shouldn't the interaction at least warrant the user to click on an icon or tap at a ...
Shreyas Tripathy's user avatar
2 votes
Accepted

Should I verify a user's password before showing them that they are banned or just check the email?

This is more a security/privacy question but that often touches the UX too. You should verify e-mail and password for the same reasons you do that for all users. If a user tries to log in with a non-...
jazZRo's user avatar
  • 11.8k
1 vote
Accepted

Should I show users their IP address?

I'm a little confused about your goals here. You're actively trying to communicate with your audience that you are not tracking nor selling their information. Adding a message like "You are browsing ...
Wendy Wojenka's user avatar
1 vote

Files downloaded from site - how to address public computers

I wouldn't want to go for anything that would significantly change expected behavior of downloads, but a well worded confirmation dialog appearing after the user has tried to initiate the download may ...
Miles Reiter's user avatar
1 vote

Standard privacy terms for collecting email address, first name, surname

since you say you're running a UK website, the best reading you can do is on the ICO (which is among the better agencies worldwide when it comes to guidance imho). You'll find pretty much all the ...
Simon's user avatar
  • 111
1 vote

What's the reason behind not notifying users that they entered a wrong email when they recover their password?

You got the rationale right. This is a protection from letting someone check whether someone is registered at a service. You also got right that, if you try to create an account, it will give you an ...
uliwitness's user avatar
  • 1,977
1 vote

Obfuscating event location on map

Instead of showing the location of each event, show only the average-locations of groups of 2 or more events. Here's a quick mock-up: The pink dots are because I made this from a screenshot of ...
Slipp D. Thompson's user avatar
1 vote

Obfuscating event location on map

You could internally divide your map into predefined hexes with each hex being maybe 1 mile/2 km across. For any given event, its location will fall into exactly one hex. You could then show a circle ...
Doktor J's user avatar
  • 421

Only top scored, non community-wiki answers of a minimum length are eligible