Skip to main content

Bundles/community-privacy-controls

Community Privacy & Controls Audit

community-privacy-controls · v1.1.0 · paid

Assesses profile visibility settings, content privacy, data export, account deletion, consent management, and user control over their data.

Profile & Content Visibility

visibility · weight 0.25

Right-to-erasure removes or anonymizes all PII within documented window
ab-000715
critical
Consent for non-essential processing collected via explicit opt-in
ab-000716
critical
Direct messages not used as training data without separate opt-in
ab-000717
critical
Profile visibility enforced at three or more tiers at API layer
ab-000718
medium
Individual posts carry independent visibility, enforced server-side
ab-000719
medium
Search indexing respects visibility; private excluded from results
ab-000720
medium

Data Rights & Portability

data-rights · weight 0.3

Data export generates complete machine-readable archive within 72 hours
ab-000721
high
Account deletion confirmed with cooling-off period
ab-000722
high
Deleted account content removed or attributed to anonymized placeholder
ab-000723
high
Consent records stored with timestamp, policy version, and mechanism
ab-000724
high
Users can withdraw consent from settings; withdrawal stops processing
ab-000725
high
Data export does not include other users' private messages
ab-000726
medium
Data export rate-limited to prevent harvesting abuse
ab-000727
low

Consent & Third-Party Sharing

consent · weight 0.25

Ad targeting data not shared with third parties without affirmative opt-in
ab-000728
medium
Third-party analytics and ad scripts disclosed in privacy policy
ab-000729
medium
OAuth and third-party app grants viewable and individually revocable
ab-000730
low

Account Control & Deletion

account-control · weight 0.2

Activity status can be disabled; excluded from API responses when off
ab-000731
low
Follower and following lists independently visible and revocable
ab-000732
low
Privacy settings grouped by functional area with plain-language descriptions
ab-000733
low
Data retention periods documented in policy and enforced by automated jobs
ab-000734
low