Hacker News new | ask | show | jobs
by Jon_Lowtek 2000 days ago
the so called "facebook pixel" allows webservice owners to tell FB about all the people interacting with their service. Next to page impressions and interaction events it allows to send the customers personal data (name, address, phone number, email and gender) to FB, so the interaction can be matched to a profile. Cookies, IP address and browser metadata are always sent due to loading of code from FB servers. AdBlockers kill that ridiculous violation of consumer rights.

However a good number of online services with user registration integrate some identity resolution provider that sends all customer data to FB among others on the backend in exchange for a link to the profile, if it exists, reasoning that automated stalking increases the performance of their sales/support agents.

Even if not integrated directly many use some crm/csm/lead/sales/support/stuff-tooling that gets a copy of all their customers personal data and then shares it with services they integrate in bulk. Registering for one service can thus create many "shadow profiles" with other companies the consumer never directly interacts with.

The consumer facing corporations are required to disclose such third parties in their privacy policies (and should strife to make such data sharing configurable by optin -> see consent), but often skimp on the data protection impact assessment, at most disclose why they share with some other company but not what actually happens with the data, and prefer to tell lies about how much they value privacy, while they don't actually care who gets a copy of their customers personal data as long as they don't have to pay for sharing it.

So if you regularly register with some fancy new service, then there is a non zero chance that FB has a "shadow profile" about you even if you don't have a FB account. Same goes for SalesForce, Google, Adobe and other players in the big data business.

Now in EU-vs-FB the megacorp stated they are not keeping data on non-fb-users because they are getting so much data about registered users, who are the people they are getting paid to show targeted content to by their customers, that they really don't care about people who are not on their platform. And since it would be illegal to profile them, they are especially not doing that. Rumors are this is a lie and FB is keeping huge data swamps, but i have seen no proof: so far there is a certain lack of whisteblowers.