221
Reddit violates CCPA (www.youtube.com)

This video shows that Reddit refused to delete all comments and posts of its users when they close their account via a CCPA / GDPR request.

This is absolutely insane, and shows that companies OWN you.

top 50 comments
sorted by: hot top controversial new old
[-] Zednix@lemmy.ca 18 points 1 year ago

I think the only solution currently is to use something like Redact to mass edit your posts and comments to remove the data that you have input into the site. Reddit lives or dies on the information that users post/comment on it.

[-] fbievan@fedia.io 25 points 1 year ago

I personally believe that reddit is the type of company to save the orginal post and revert it just out of spite

[-] Zednix@lemmy.ca 10 points 1 year ago

i wouldnt put that sort of crap past a pedophile like Spez

[-] fbievan@fedia.io 6 points 1 year ago

This honestly is much worse than twitter, because atleast with twitter, I didnt see them doing this typa shit

[-] lunarul@kbin.social 10 points 1 year ago

The difference is that Musk doesn't have the knowledge and skill to do it.

[-] fbievan@fedia.io 3 points 1 year ago

I personally doubt that.

Musk might not have his own personal knowledge. But this is violating a law in California in which the person in this video seems to in California.

Plus reddit seems to based in California.

This goes behind being a scumbag, and into the territory of ignoring the CCPA.

This is magnitudes worse than simply being a greedy capitalist.

[-] TheInsane42@lemmy.world 1 points 1 year ago

Or have the skill (or desire) to keep the personal that have the knowledge in the company.

[-] syrt@kbin.social 6 points 1 year ago

I personally believe that reddit is the type of company to save the orginal post and revert it just out of spite

They have been reverting them. I've been observing it in action my my Reddit account as I delete things. Even old posts that I recall deleting years ago (like random things on r/Hearthstone after I stopped playing Blizzard games) have been making a return over the past month. I've been going in and doing batches of edits to my post history every few days, and editing it differently. From ten years ago to now, I've had posts re-appearing and the edits getting un-edited.

Wild.

[-] GunnarRunnar@kbin.social 2 points 1 year ago* (last edited 1 year ago)

I've been going in and doing batches of edits to my post history every few days, and editing it differently. From ten years ago to now, I've had posts re-appearing and the edits getting un-edited.

Are you absolutely certain? I just as well might not bother with the mass edit then.

[-] curiosityLynx@kbin.social 3 points 1 year ago* (last edited 1 year ago)

The issue there isn't that Reddit stores the edit history (that would be too much storage space), but that it doesn't apply the edit at all and just pretends to if it you recently edited something else. You need to wait after each edit for your next edit to go through.

I had success with this Power Delete Suite fork, which waits for 5 seconds after each edit.

load more comments (1 replies)
[-] eek2121@kbin.social 1 points 1 year ago

They probably do have copies of deleted posts/comments, also copies of the original for edits. I don’t know of a single company that easily allows users to “really” delete something.

Database backups cannot easily be edited, for example.

[-] cjdaniel@kbin.social 6 points 1 year ago

I tried this using the shreddit CLI app, and they reverted my edits as well as deletions.

[-] klyde@lemmy.world 4 points 1 year ago

It feels like even that wouldn't work if they can just restore stuff but I don't know. Editing the comments before deleting would be a good idea though. If they just restore your stuff the last time it was up then all the comments would be useless.

[-] abff08f4813c@kbin.social 4 points 1 year ago

Note that redact doesn't always get everything. https://kbin.social/m/RedditMigration/t/46805/Strange-phenomenon-while-deleting-my-comments

But agree with the idea. The best way is to use a tool to mass edit and then mass delete. For example https://kbin.social/m/RedditMigration/t/65260/PSA-Here-s-exactly-what-to-do-if-you-hit-the

How do you know they don't keep post revisions too? It's trivial to implement and probably not much more data.

[-] fbievan@fedia.io 2 points 1 year ago

That's my point. I doubt altering comments would have any advantage over deleting them. You just hide what you wrote from other peasants but not from Reddit.

[-] abff08f4813c@kbin.social 1 points 1 year ago

That’s the word on the street from former devs who used to work there. It’s actually a sign of how poor in quality their system is that they don’t have a good way to reverse edits, if still true.

[-] SammichParade@vlemmy.net 3 points 1 year ago

Does Reddit save edit history?

[-] abff08f4813c@kbin.social 7 points 1 year ago

Word is that they don't, deletes are soft-deletes but edits aren't so reversible.

In this specific case it looks like it might just be that specific sub being private on the day he deleted, https://kbin.social/m/RedditMigration/t/99466/Reddit-violates-CCPA#entry-comment-406442

Watching the video i see him deleting from 11 months ago to 12 years ago. But don't see the specific 3 year old posts on r/javascript. Which would be consistent with not being able to see them due to the sub being private.

[-] aeternum@kbin.social 8 points 1 year ago* (last edited 1 year ago)

When it was open source, they didn't. But it's closed source now. So who knows. Reddit says they don't, but they have lied before, so who knows.

[-] eek2121@kbin.social 1 points 1 year ago

I was able to delete all my posts/comments without issue (My reddit username is different from this one fyi).

As you stated, the subreddit could gave been private. He also may have been viewing a stale cache.

[-] ironic_elk@kbin.social 2 points 1 year ago

They mentioned shreddit able to delete more using some kind of archive but it's $15.

Is that the only service to offer that service or are there any free/cheaper options that do the same?

[-] abff08f4813c@kbin.social 2 points 1 year ago

You can use the shreddit cli script from github as it has the same option for free.

[-] jemorgan@lemm.ee 17 points 1 year ago

Sign me up for the class action. I was thinking of just spinning up a selenium script because I’ve tried using one of the bots to delete post history before, and it didn’t work, so I was assuming the API was resisting. Disappointing to see that even clicking through everything doesn’t work reliably.

[-] fbievan@fedia.io 2 points 1 year ago

Seriously...

[-] JonEFive@kbin.social 2 points 1 year ago

That would be my suggestion as well. There's a chance that all reddit users will be part of the class, but there's also a chance that only users who attempted to delete data or request that data be deleted will be part of the class.

Attempt to edit and/or delete a few of your comments at the very least and prepare for the class action lawsuit. It'll probably take a couple years, but there's no way that some law firm isn't already looking into it and gearing up to start the process. There's a particular law firm that I follow that has gotten some really good settlements from social media companies such as this one against facebook. I would believe that if anyone decides to take on a data privacy issue against a large social media company, it would be them.

[-] sunaurus@lemm.ee 13 points 1 year ago

Not only do they refuse to delete your comments, they do it in such an underhanded way - quietly restoring everything after showing the user that the deletion was successful. For me personally, this is even worse than the whole killing 3rd party apps thing.

[-] vacuumflower@vlemmy.net 2 points 1 year ago

Ah, well, that's what they are used to. All that obscurity in recommendations, weird way comment scores change over time (bots they don't fight or their own messing), weird way those affect karma, inconsistent application of rules, and so on.

Social media mods like obscurity which is alone a sufficient reason not to use that crap.

[-] fbievan@fedia.io 1 points 1 year ago
[-] ArugulaZ@kbin.social 6 points 1 year ago

Un-deleting deleted comments is certainly sleazy, but I didn't realize it was illegal.

[-] fbievan@fedia.io 6 points 1 year ago

Under the CCPA you own your data. That data should be deleted under request.

Same thing with the European GPDR

You can request your data too (like on discord)

[-] fbievan@fedia.io 2 points 1 year ago
[-] ahriboy@kbin.social 2 points 1 year ago

Texas, soon to be the next TERF US State after Florida. Why can't the Federal Congress do the same California did and stop companies from lobbying?

[-] fbievan@fedia.io 2 points 1 year ago

Also this guy lives in California and Reddit is based in California sooo... These protections should apply to him

[-] mcgravier@kbin.social 4 points 1 year ago

It depends. If undeleted comments included your personal data, like IP address, home adress or your real name, it certainly is illegal

[-] kestrel7@kbin.social 2 points 1 year ago

Is it just me or is there an unethical way to try and entrap reddit here by posting your real name, deleting the post, and seeing what happens?

[-] SpicyPeaSoup@kbin.social 2 points 1 year ago

My name is Giovanni Giorgio.

[-] Morphior@feddit.de 1 points 1 year ago

But everybody calls me Giorgio.

[-] dojan@lemmy.world 4 points 1 year ago

This feels like something that ought be reported to the EDPS. I’m sure they’ll be thrilled that an American company is holding user PII hostage.

[-] Atxu@lemmy.world 4 points 1 year ago

Time to Europeans to take action!

[-] fbievan@fedia.io 1 points 1 year ago

Or Californians, heh

[-] Riptide502@lemm.ee 2 points 1 year ago

Will this realistically go anywhere? I have a strange feeling that this’ll just get swept under the rug. I hope it doesn’t turn out like that. Ideally, I’ll like to see some charges/legal proceedings brought up right ahead of their IPO.

[-] enitoni@beehaw.org 2 points 1 year ago

Apparently, this was not actually Reddit restoring the comments, but rather privated subs being made public and therefore giving the illusion that reddit had restored everything on their account. Though it is dumb that you cannot access or delete content that you made on a sub that is private.

[-] CanadaPlus 2 points 1 year ago* (last edited 1 year ago)

So what's the penalty for violating the CCPA?

BTW CCPA != GDPR. They do similar things but are for different jurisdictions. If they openly break GDPR the EU will basically maul them, I imagine.

load more comments (3 replies)
[-] Skasi@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

The Reddit User Agreement Section 5 clearly states that you own your data:

You retain any ownership rights you have in Your Content

So you could try to use that argument to get what you want.

The agreement also continues to say you grant them a license to use this content which can not be taken away. But I would argue that if you decide to remove your content then there is nothing to license away. In other words the license is still there but the content is gone.

Of course that's just my personal interpretation. Law is a fucked up thing that doesn't follow any logic. If you're lucky your country/state might have laws that work on your favour.

load more comments (1 replies)
[-] MiddleWeigh@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

Not surprising. That's the stuff their after anyway. Im trying to cut myself from this type of thing, as much as possible for sure.

[-] HerrLewakaas@feddit.de 1 points 1 year ago

It doesn't show that Reddit owns you. It shows that we can majorly stick it to Reddit by reporting them to the appropriate agencies. A GDPR violation fine will hurt them badly

load more comments
view more: next ›
this post was submitted on 27 Jun 2023
221 points (100.0% liked)

Reddit Migration

196 readers
1 users here now

### About Community Tracking and helping #redditmigration to Kbin and the Fediverse. Say hello to the decentralized and open future. To see latest reeddit blackout info, see here: https://reddark.untone.uk/

founded 1 year ago