This container is a piece of art. Ever since using this, Facebook no longer has any "Off-Facebook Activity" about me.

Have you managed to verify this or you're just assuming it ? I'm just assuming it, that's why I'm asking. Like have you made a request for your data from Facebook / data brokers and it looks straight ? I trust Mozilla to the fullest and have made no effort to investigate.

You can verify it for yourself. Facebook lets you view this information. https://www.facebook.com/off_facebook_activity

I don't trust that this is all they have about me. Wasn't there reports that they were generating dark profiles about people not even on Facebook (by mining contact information from others)?

That skepticism is definitely healthy, but by the GDPR, this is required to be every single thing they have on you, under penalty of significant fines.

That doesn't mean it is everything... but it at least makes that a little more likely? Some light optimism for you, I guess.

Edit: seems even this isn't necessarily true.. damn.

They have to tell you everything they know about you, by law... but that doesn’t mean this webpage contains every information they collected. And getting everything is rather complicated: https://ruben.verborgh.org/facebook/

Only for EU citizens.

Facebook collected this data for years but only recently started disclosing it. There's no reason to trust that they're disclosing all the data they're collecting.

Interesting...I've been using the Facebook container for well over a year and have been very careful to only access facebook from it....but they still list very recent (like yesterday) data in my off_facebook_activity. This is very frustrating.

Use umatrix to block all trackers. You are probably getting caught by third party trackers

"If you want to continue, you have to log in"

lol

I guess I though it would be something like https://www.facebook.com/shadow_profile_activity

Thank you very much for that link. I didn’t know about it.

You can check this in the settings. They really obfuscate and have dark patterns here but last time I checked it was there.

Facebook managed to get some off-Facebook activity from me even using this. The site in question was also loaded in a Private Browsing window and Facebook claimed it was from pixel tracking. I'm guessing they've inferred it based on IP, especially as I live by myself.

How this is legal under GDPR, given I'm a UK citizen, I'm really not sure.

Is the GDPR still in effect in the UK, now you've left the EU?

Yes. It’s not like all the EU laws the UK had adopted before Brexit suddenly went out the window overnight.

Not necessarily true, since regulations are EU law that is immediately enforceable in member states, and are not generally transposed into state law.

I guess it depends on the country. In Poland my experience is that every time EU passes some regulation Polish parliament passes the corresponding bill implementing it. So even if we left EU tomorrow those bills will still be in effect.

Also, I'm not sure about this "immediately enforceable" part - I recall some cases where member states delayed implementing EU laws for years, sometimes ending up being sued to European Court of Justice.

> I guess it depends on the country.

AFAIK it works pretty much the same in all countries and only depends on whether it's an EU regulation[0] or an EU directive[1].

[0]: https://en.wikipedia.org/wiki/Regulation_(European_Union)

[1]: https://en.wikipedia.org/wiki/Directive_(European_Union)

EU Regulations and Decisions directly affect member states. Whereas EU Directives require member states to enact new laws.

As the GDPR is a regulation, it directly applied to member states.

When the UK left the EU they made a paralled law

> The GDPR has been incorporated into UK data protection law as the UK GDPR see: https://ico.org.uk/for-organisations/dp-at-the-end-of-the-tr...

Yes, the UK has the DPA-2018 legislation which basically implements GDPR in the UK. [1] Its application is supervised by the ICO. Subject Access Request can be issued to pretty much any public institution / company [2]

"You have the right to find out if an organisation is using or storing your personal data. This is called the right of access. You exercise this right by asking for a copy of the data, which is commonly known as making a 'subject access request"

[1] https://en.wikipedia.org/wiki/Data_Protection_Act_2018

[2] https://ico.org.uk/your-data-matters/your-right-to-get-copie...

GDPR directly doesn't apply to the UK anymore (except for organisations that handle data of EU citizen, of course) but the UK chose to enact the GDPR into UK law via the Data Protection Law of 2018, which is aptly dubbed "UK GDPR".

I do this, but to every webpage - so there should be much less cross-site talk. Not that the advertising machine doesn't have a million other ways of getting though.

https://addons.mozilla.org/en-US/firefox/addon/temporary-con...