Hack Club has been handling children's data for 4 years without a privacy policy

Re:Hack Club has been handling children's data for 4 years w... by hrimfaxi on Thursday November 13, 2025 @10:33AM (#45916082)

> Actually this Chris guy has a point. I don't call it breach either. It's PII data exposure but it is a serious exposure.

At least California defines it as

> unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person.

[ Parent | on HN ]

Re:Hack Club has been handling children's data for 4 years w... by bo1024 on Thursday November 13, 2025 @02:28PM (#45919393)

So I guess if you authorize the entire world to read the data, it’s not a breach.

[ Parent | on HN ]

Re:Hack Club has been handling children's data for 4 years w... by SigmaEpsilonChi on Thursday November 13, 2025 @05:41PM (#45921639)

If nobody reads the data it is not a breach.

[ Parent | on HN ]

Re:Hack Club has been handling children's data for 4 years w... by Benjamin_Dobell on Thursday November 13, 2025 @07:28PM (#45922489)

So the junior engineer who couldn't secure an endpoint implemented thorough request logging and auditing? Impressive.

[ Parent | on HN ]