Incident #65EE04 · 27 JUL 2026minor
Upscrolled's EU privacy policy appears as a full new document, with the old page content gone
The old version contained only navigation and logo text in the diff, while the new version is a complete privacy policy covering data collected, sharing, retention, EU/UK GDPR rights and a Dutch data controller. This likely reflects the archive capturing the full page rather than a change in practice. It also states that unauthorised scraping to train automated systems may lead to enforcement.
Taken from you
- Policy permits sending marketing communications and personalising your experience as legitimate-interest processing
- Precise location may be collected if you add a location tag to a post
- Deleted content may persist in backups and on third-party sites outside UpScrolled's control
- Safety-related data may be kept longer than other data
Won back
- Stated commitment not to sell or trade personal information
- EU/UK GDPR rights to access, correct, delete, restrict, object and port data
- Right to complain to a supervisory authority, with a named DPO and UK representative
- Minimum age of 16 and human moderators having the final role in most enforcement decisions
Evidence · 4 of 4 quotes matched in source
activity designed to train automated systems or datasets without authorisation; or+ inserted · ✓ matched in source
We do not sell or trade your personal information to external parties.+ inserted · ✓ matched in source
If you choose to add a location tag to a post, we may collect precise location data at the time the tag is created.+ inserted · ✓ matched in source
Archived version ↗ · 2,860 words changed