121
Imgur demands details impossible to remember for my UK GDPR request (lemmy.world)
submitted 8 months ago by to c/privacy@lemmy.ml
18 comments fedilink hide all child comments
 

I tried logging into Imgur recently, but they now block all UK traffic and redirect you to a GDPR deletion form, which I was happy to fill in.

Note that I was responding from the email registered to my account, and even though they could verify it, they still demanded:

  • A description of any private images (I cannot recall, it's a 10+ year old account I barely used)
  • My last login location (no idea either as it was probably years ago. Was I on VPN?)

I made a real effort to answer, giving my best guesses for both, but their responses were consistently passive-aggressive, as if I was the one being unreasonable! And all that friction just for them to delete my email address and a couple of images that I may or may not have uploaded to Imgur over the last 10 years.

After going back and forth, they left me no choice but to file an ICO complaint.

Has anyone else experienced this with Imgur?

top 17 comments

sorted by: hot top controversial new old
[–] 55 points 8 months ago (1 child)

That seems unreasonable.. proving ownership of the email address should be considered sufficient so ICO complaint it is.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 16 points 8 months ago* (3 children)

    The only identifable information you should have to provide is the information you signed up with.

    I've had a couple sites ask for id, but that wouldnt verify I own the account anymore than just me sending them the email from the same address I used to sign up with.

    GDPR has a flaw iirc, where it allows this, I guess the UK version isnt any different.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 7 points 8 months ago

    The only identifable information you should have to provide is the information you signed up with.

    There was a bill in the US that would've required sites let you delete your info without providing anything extra besides what you provided to sign up.

    Last I knew, it failed to become law. I'm sure every tech company in the galaxy was lobbying against it.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 8 points 8 months ago (2 children)

    If it isn't many images, couldn't you just login on VPN (i think proton has free one) and delete images?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] [S] 5 points 8 months ago (1 child)

    I did think of that, not to delete anything, just to check what's actually there so I could answer their questions. But I've got a feeling if I try to bypass the UK block with a VPN, they'll just hit me with even more obstacles.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 6 points 8 months ago (4 children)

    That is bs. I should consider deleting mine but now i cba. Though i can still access mine with a vpn. So i might delete through the site.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] [S] 2 points 8 months ago

    Deleting through the site is definitely the better option if they allow permanent deletion. But I wouldn't be surprised if they claim unable to confirm your location due to the VPN and question if UK GDPR applies to you and then demand a driving license...

  • permalink
  • fedilink
  • source
  • parent
  • [–] [S] 1 point 8 months ago

    Deleting through the site is definitely the better option if they allow permanent deletion. But I wouldn't be surprised if they claim unable to confirm your location due to the VPN and question whether UK GDPR applies to you and then demand a driving license...

  • permalink
  • fedilink
  • source
  • parent
    • [–] 3 points 8 months ago (1 child)

    This is over the top. I've had this trying to get a rarely used email account back, but if you own the account that can reset the password...why do this?

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 3 points 8 months ago* (last edited 8 months ago)

    I use imgur rarely, without account. Sharing images in sites like Lemmy, Mastodon, and other ActivityPub sites don't need an image sharer, images can be uploaded directly or simply with copy paste. Hosting or backup images and any other files with Filen or Koofr, both 10 GB for free and from the EU (Germany and Slovenia)

  • permalink
  • fedilink
  • source
    •