Community Privacy & Controls Audit
community-privacy-controls · v1.1.0 · paid
Assesses profile visibility settings, content privacy, data export, account deletion, consent management, and user control over their data.
Profile & Content Visibility
visibility · weight 0.25
- criticalRight-to-erasure removes or anonymizes all PII within documented windowab-000715
- criticalConsent for non-essential processing collected via explicit opt-inab-000716
- criticalDirect messages not used as training data without separate opt-inab-000717
- mediumProfile visibility enforced at three or more tiers at API layerab-000718
- mediumIndividual posts carry independent visibility, enforced server-sideab-000719
- mediumSearch indexing respects visibility; private excluded from resultsab-000720
Data Rights & Portability
data-rights · weight 0.3
- highData export generates complete machine-readable archive within 72 hoursab-000721
- highAccount deletion confirmed with cooling-off periodab-000722
- highDeleted account content removed or attributed to anonymized placeholderab-000723
- highConsent records stored with timestamp, policy version, and mechanismab-000724
- highUsers can withdraw consent from settings; withdrawal stops processingab-000725
- mediumData export does not include other users' private messagesab-000726
- lowData export rate-limited to prevent harvesting abuseab-000727
Consent & Third-Party Sharing
consent · weight 0.25
Account Control & Deletion
account-control · weight 0.2
- lowActivity status can be disabled; excluded from API responses when offab-000731
- lowFollower and following lists independently visible and revocableab-000732
- lowPrivacy settings grouped by functional area with plain-language descriptionsab-000733
- lowData retention periods documented in policy and enforced by automated jobsab-000734