6 ms·

If you're jumping off Unroll.me, first log into unroll.me via your Google Login. Go to settings, turn off everything (like the ad tracking) and then delete your

If you're jumping off Unroll.me, first log into unroll.me via your Google Login. Go to settings, turn off everything (like the ad tracking) and then delete your account. It's at the bottom of the page in light grey. They'll ask why you're deleting. I'd suggest choosing "privacy". After, that head into Google > Account > "Connected Apps & Sites" > Manage Apps -- and then explicitly remove Unroll.me there too. Don't do the reverse as the Google Access is needed to log in and delete the Unroll-side data* * Assuming they delete anything, but still worth doing.

jacquesm 9y ago
If they don't delete it and they have European customers they are breaking the law.
- toomuchtodo 9y ago
  If you're a European customer who deletes your account, I'd email unroll to ask if your data has been deleted, and then report them if not.
  - brador 9y ago
    Who do you report them to?
    - toomuchtodo 9y ago
      http://ec.europa.eu/justice/data-protection/individuals/misuse-personal-data/index_en.htm http://ec.europa.eu/justice/data-protection/individuals/misu...
- singhrac 9y ago
  What would it take to get laws like that in the US? Purely hypothetical, of course, since I don't believe it's possible.
  - jacquesm 9y ago
    Less lobbying, less money in politics.
    - sputr 9y ago
      Actually what is needed is MORE lobbying ... just for the right things by the right people. We'll never stop lobbying by those who are already powerful. But those who are not can empower themselves. PS: Event doing what you propose "less lobbying, less money in politics" would require lots and lots of lobbying (as this is the current system).
- deleted 9y ago
  [deleted]
- amartya916 9y ago
  Thanks for bringing this up. This is part of the Data Protection Directive (1995): http://ec.europa.eu/justice/data-protection/individuals/rights/index_en.htm http://ec.europa.eu/justice/data-protection/individuals/righ...
  - true_religion 9y ago
    Does that apply to companies located outside the EU?
    - falcolas 9y ago
      If they are doing business in the EU, they have to comply with the EU's laws.
- MichaelBurge 9y ago
  How does that work? If I have a server in my US living room, and someone from an overprotective country visits my server, and my pokemon trading site sets an is_deleted flag to keep foreign keys valid, can you really say I'm breaking the law? It doesn't seem like laws specific to some European country should apply anywhere outside of that country. I can maybe see the EU(since they like to apply laws everywhere). You did call them 'customers', which means there's an exchange of money. Is there a restriction on European banks to prohibit them from dealing with sites that don't comply with the country's law?
  - jacquesm 9y ago
    Don't do business in the EU if you don't intend to respect the laws. I find the word 'overprotective' out of place in your comment, it says that you feel that once someone gives you their data it is yours to do with as you please. As for laws specific to a country applying outside it: you can do whatever you want but the moment you hold assets abroad or intend to travel you are exposing yourself to potential legal action, something always good to keep in mind. The United States has a long history of enforcing its laws outside its borders. Also, you are wrong about how you'd go about implementing such deletion. You don't need an 'is_deleted' flag at all to keep your foreign keys valid, all you would have to do is to overwrite the record with random data or blank the personally identifiable fields and delete anything that that user has given you. That's not that hard and purposefully mis-implementing that would not look very good if it ever came to a lawsuit. Pro-tip: consult with a lawyer versed in the matter if you want to do this stuff at all it is better to do it by the book. "Keeping foreign keys valid" is not an excuse to break the law.
    - MichaelBurge 9y ago
      > Don't do business in the EU if you don't intend to respect the laws. A lot of Japanese sites IP-ban foreigners so they don't have to deal with them. I always figured, why not leave the site open for everyone but not officially support them? I guess putting technical measures in place prevents having your assets seized, or being sued or arrested when you step foot there. If an EU customer with data retention laws uses a VPN to bypass an IP-block(and pays with bitcoin or something), would you still be subject to their laws? Or would the attempt to block them be sufficient legally?
yladiz 9y ago
It would also be really nice if Google told you the last time an app accessed your account (or at least within a certain time frame, like "last 30 days", "last 90 days", etc). Facebook shows this information, and I just went and checked my app authorizations on my Google account to make sure that Unroll.me wasn't there, since I stopped using it a while ago and deleted my account, and saw that it was still there, but with no last accessed time, only the initial authorization time. It's frustrating that Google can't add a simple piece of very useful information onto their dashboard.
- elahd 9y ago
  With regards to unroll.me, does it really matter? Once you grant access to your mail, they archive your entire inbox. The damage is already done.
  - sofaofthedamned 9y ago
    Er, ongoing, new emails?
    - elahd 9y ago
      Yeah, it cuts off new email, but my Gmail account has over 13 years of data -- I'm sure a lot of other people have had Gmail for as long. It's the initial load of data to Unroll.me that hits hardest.

jacquesm 9y ago

If they don't delete it and they have European customers they are breaking the law.

toomuchtodo 9y ago
If you're a European customer who deletes your account, I'd email unroll to ask if your data has been deleted, and then report them if not.
- brador 9y ago
  Who do you report them to?
  - toomuchtodo 9y ago
    http://ec.europa.eu/justice/data-protection/individuals/misuse-personal-data/index_en.htm http://ec.europa.eu/justice/data-protection/individuals/misu...
singhrac 9y ago
What would it take to get laws like that in the US? Purely hypothetical, of course, since I don't believe it's possible.
- jacquesm 9y ago
  Less lobbying, less money in politics.
  - sputr 9y ago
    Actually what is needed is MORE lobbying ... just for the right things by the right people. We'll never stop lobbying by those who are already powerful. But those who are not can empower themselves. PS: Event doing what you propose "less lobbying, less money in politics" would require lots and lots of lobbying (as this is the current system).
deleted 9y ago
[deleted]
amartya916 9y ago
Thanks for bringing this up. This is part of the Data Protection Directive (1995): http://ec.europa.eu/justice/data-protection/individuals/rights/index_en.htm http://ec.europa.eu/justice/data-protection/individuals/righ...
- true_religion 9y ago
  Does that apply to companies located outside the EU?
  - falcolas 9y ago
    If they are doing business in the EU, they have to comply with the EU's laws.
MichaelBurge 9y ago
How does that work? If I have a server in my US living room, and someone from an overprotective country visits my server, and my pokemon trading site sets an is_deleted flag to keep foreign keys valid, can you really say I'm breaking the law? It doesn't seem like laws specific to some European country should apply anywhere outside of that country. I can maybe see the EU(since they like to apply laws everywhere). You did call them 'customers', which means there's an exchange of money. Is there a restriction on European banks to prohibit them from dealing with sites that don't comply with the country's law?
- jacquesm 9y ago
  Don't do business in the EU if you don't intend to respect the laws. I find the word 'overprotective' out of place in your comment, it says that you feel that once someone gives you their data it is yours to do with as you please. As for laws specific to a country applying outside it: you can do whatever you want but the moment you hold assets abroad or intend to travel you are exposing yourself to potential legal action, something always good to keep in mind. The United States has a long history of enforcing its laws outside its borders. Also, you are wrong about how you'd go about implementing such deletion. You don't need an 'is_deleted' flag at all to keep your foreign keys valid, all you would have to do is to overwrite the record with random data or blank the personally identifiable fields and delete anything that that user has given you. That's not that hard and purposefully mis-implementing that would not look very good if it ever came to a lawsuit. Pro-tip: consult with a lawyer versed in the matter if you want to do this stuff at all it is better to do it by the book. "Keeping foreign keys valid" is not an excuse to break the law.
  - MichaelBurge 9y ago
    > Don't do business in the EU if you don't intend to respect the laws. A lot of Japanese sites IP-ban foreigners so they don't have to deal with them. I always figured, why not leave the site open for everyone but not officially support them? I guess putting technical measures in place prevents having your assets seized, or being sued or arrested when you step foot there. If an EU customer with data retention laws uses a VPN to bypass an IP-block(and pays with bitcoin or something), would you still be subject to their laws? Or would the attempt to block them be sufficient legally?

yladiz 9y ago

It would also be really nice if Google told you the last time an app accessed your account (or at least within a certain time frame, like "last 30 days", "last 90 days", etc). Facebook shows this information, and I just went and checked my app authorizations on my Google account to make sure that Unroll.me wasn't there, since I stopped using it a while ago and deleted my account, and saw that it was still there, but with no last accessed time, only the initial authorization time. It's frustrating that Google can't add a simple piece of very useful information onto their dashboard.

elahd 9y ago
With regards to unroll.me, does it really matter? Once you grant access to your mail, they archive your entire inbox. The damage is already done.
- sofaofthedamned 9y ago
  Er, ongoing, new emails?
  - elahd 9y ago
    Yeah, it cuts off new email, but my Gmail account has over 13 years of data -- I'm sure a lot of other people have had Gmail for as long. It's the initial load of data to Unroll.me that hits hardest.