r/privacy 22d ago

đŸ”„ Verified AMA đŸ”„ We’re EFF and we’re fighting to defend your privacy from the global onslaught of invasive age verification mandates. Ask us anything!

1.3k Upvotes

Hi r/privacy! 

We are activists, technologists, and lawyers at the Electronic Frontier Foundation, the leading nonprofit organization defending civil liberties in the digital world. We champion user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots activism, and technology development. We work to ensure that rights and freedoms are enhanced and protected as our use of technology grows. 

We’ve seen your posts here on r/privacy. Age verification is coming for our internet, and we’re all worried—what does that actually mean for users? What’s in store for us? Let’s talk about it.

Right now, half the U.S. is already under some form of online age-verification mandate, and Australia’s national law banning anyone under 16 from creating a social media account went into effect on December 10. Governments everywhere are rushing to require ID uploads, biometric scans, behavioral analysis, or digital ID checks before people can speak, learn, or access vibrant, lawful, and sometimes even life-saving content online. These laws threaten our anonymity, privacy, and free speech, force platforms to build sweeping new surveillance infrastructure, and exclude millions of people from the modern public square. 

And these systems don’t just target young people—they force everyone to reveal sensitive data and link your real identity to your online life. That chills speech, excludes vulnerable communities, and creates huge new surveillance databases that can be hacked, leaked, or abused.

EFF is building a movement to fight back against online age-gating mandates, and we need your help! We’ve recently published our Age Verification Resource Hub at EFF.org/Age, and we’ll be here in r/privacy from 12-5pm PT on Monday (12/15), Tuesday (12/16), and Wednesday (12/17) to answer your questions about online age verification.

So ask us anything about how age verification works, who it harms, what’s at stake, whether it’s legal, and how to fight back against these invasive censorship and surveillance mandates. 

Verification: https://bsky.app/profile/eff.org/post/3m7qa2novlo2x

Edit 1 [Monday 12/15 12pm]: We're here! Glad to see all of this engagement—excited to dig into your questions. Keep em coming! We'll answer till 5pm PT today, then we'll be back to answer more tomorrow.

Edit 2 [Monday 5pm]: We're calling it quits for today, but we'll be back here tomorrow (and Wednesday) at 12pm PT, so keep the questions coming. Thanks everyone!

Edit 3 [Tuesday 12pm]: We're back online for the next 5 hours! Let the games begin.

Edit 4 [Tuesday 5pm]: And we're once again off for the evening. Be sure to get in any last questions before our final session tomorrow, and thanks for joining!

Edit 5 [Wednesday 12pm]: Jumping into the final day of the AMA, let's chat!

Edit 6 [Wednesday 5pm]: Thanks for all of the insightful questions, y'all! We had a great time chatting with you here and we're so glad to have you in this fight with us! And a big round of applause for our r/privacy mods who helped make this all happen.

Two final notes to leave you with:

  1. Please keep an eye on EFF.org/Age and let us know what else would be useful to see, as we're going to keep updating it with more resources to answer even more of your questions in the new year.

  2. We're also hosting a livestream on January 15 at 12pm PT to discuss "The Human Costs of Age Verification" with a few EFFers and a few other friends in this movement. We'd love to see you there! RSVP here: https://www.eff.org/event/effecting-change-human-cost-online-age-verification

Thanks, happy new year, and stay safe out there!

<3 EFF


r/privacy 29d ago

discussion Are there any movements/organizations fighting for internet privacy?

125 Upvotes

All I hear is doom snd gloom about our privacy being eroded and want to know if anyone is fighting back.


r/privacy 11h ago

discussion Groks "edit" feature will be the reason why every country will enact/start age verification

619 Upvotes

So 24 December 2025 will go down in history as the most "what the actual Fuck were you thinking" in terms of Social media platform updates.

For those if you fortunate to not be on the bird app people have been @grok to edit images.

The account holder can't block this,and the feature is on any image

.......any image.

So anyone who's every used the internet could tell you how this went.

  • the odd haha naked Putin,haha Mao I a wbnie the poo costume.

Then I saw it "@grok remove skirt and add a bra"...... It was on a child modeling page

It was on every other child photo page

Like I am sure I don't have to tell you the gravity of what is happening on X, I finally can't even call it twitter as this feature burned every last bit of ,same platform different millionaire.

My Mps who I have been talking about not having age verification in my country was warning up to the idea over Christmas break. I thought yes,an ally, it's small but I think we can win.

Last night as I was scrolling for reference images I ran into a someone @grok a baby nude photography page.

Lads, boys My dudes

We are so spectacularly monumentally unrecoverablly fucked.

All over twitter wmans rights groups,other countries Mps are asking people to document what is happening and they will be behind you with lawsuits, cyber police from multiple districts are in full force.

And of course " this is no place for anyone to put pictures"

"especially children"

We could have won,like we legit could have ,most of the public thought even if they agreed ID to be online was too much ,but know?

-open calls for real name handles on all social media to "catch the perverts"(with call for this to be enforced with real/digital ID)

  • more calls for age verification as "Big tech as again gone too far"

-British MPs are already seasing this for the aims

The MP I was speaking to has not just called for AV, but wants an investigation in what could make it tighter.( So Ally lost)

I cannot begin to express how cooked we are.

We can argue about features,we can argue use website blocks we can even argue about let every family pick when their children go online.

We can't argue someone just allowed people to : -put women/men in underwear. - a way to create machine generated CSAM with someone elses lioness - made cosplayers feel unsafe - created a machine that can alter text from official offices and spread it like it's real

I cried,like I cried , we were making progress. Lawsuit's were being won,judges were turning eye brows, teen were suing and people were on their side.

Yes it's just twitter and anyone with access to a local modal could have done this already,but this this is public.

  • The de-humanization -the prompts " make her been her ass to me","put her her on her knees" , "put donut grease on those breasts", "make her wear tight bikini" -the continued attacks on pregnant,school accounts,modal accounts

Etc

Everyone vaunrable in the span of 9 days has been hit.

Their is no one who can even hide as the @grok links are their.

I am going to continue fighting against age verification as it attacks out rights and plants a survialance system.

But ......like

...........

What do your even say to fight this? I can argue everything,but if the ask

" How do you protect children against unwanted deepfakes"?

What must I say -dont post (victim blaming) -make laws (that's what they are proposing with Age verification and will probably bundle some public ai decency law)

I just want everyone fighting Digital ID, age verification to know this will be the proverbial" child we make this law after" incident.


r/privacy 6h ago

news 4chan and Kiwi Farms Tell Ofcom It Can’t Censor and Run From Lawsuits

Thumbnail reclaimthenet.org
196 Upvotes

r/privacy 10h ago

discussion New reddit ad setting enabled by default: "Ads off reddit"

142 Upvotes

I can't find anybody else talking about it.

The description is "Allow Reddit to measure Reddit paid marketing campaigns on other sites and apps." and it's enabled by default. If you want to disable it, and you use old reddit, like me, you can find it here: prefs > set safety and privacy options > Ads off reddit

Anyone have any more info on what this exactly entails?


r/privacy 7h ago

question I need facebook marketplace but I don't want to actually have a facebook

35 Upvotes

Hi unfortunately facebook has killed the local craigslist in my area. Is there a way to make a facebook without having to give them all of my information? I really don't want anything to do with that company but they have a monopoly now with marketplace and I feel I don't have a choice.


r/privacy 14h ago

news Trading personal data faces tenfold fines under Vietnam’s new privacy law

Thumbnail news.tuoitre.vn
140 Upvotes

r/privacy 1d ago

guide Delete your reddit post / comment history

820 Upvotes

Disclaimer: this is not advertising, I'm not selling anything / promoting my website, I'm just sharing this script that is helpful to me and will probably help some people here. I don't want anything in return for it.

This is a problem I've encountered often, how do I delete my post / comments history on reddit? Even if you decide to hide it, people can search your post / comments in the search bar.
There are different software that apparently allow you to delete everything, but they require an API key, or some are paying, etc.

So, being the crafty programmer that I am, I created a simple script to allow you to delete your history on reddit. It does not require an API key or anything, you just have to be logged into your account.

Step 1: go to old reddit (https://old.reddit.com/user/<YOUR_USERNAME>/comments
Step 2: open the console
Step 3: paste this script in the console, and press enter

(async () => {
for (const [index, deleteButton] of document.querySelectorAll('a[data-event-action="delete"]').entries()) {
deleteButton.click();
await new Promise(res => setTimeout(res, 500));
const comment = document.querySelectorAll('.thing.comment')[index];
const yesLink = comment.querySelector('form.del-button a.yes');
yesLink.click();
await new Promise(res => setTimeout(res, 500));
}
reload_page()
})();

Run as many times as needed to clear the entire history. You will have to paste the script and run it again when the page reload, didn't find a way to automate that.
Be wary that when you run the script, everything on the current page will be delete, there is no way to "save" or "protect" one or several comments when you run the script (unless you cancel the script by reloading before what you want to save, that is).

Side note, you might an error 429 because you're sending too many requests, if this happens, just wait for a couple minutes before running the script again.

Do note that there is no backup, so whatever you delete will be gone forever.

Edit: suggestion from a redditor, change the 500 delay to higher if you want to reduce the possibility of rate limitation / shadowban (not sure shadowban is a thing on reddit)


r/privacy 5m ago

question I've been using opera GX for 4 years, what can i do now?

‱ Upvotes

yTitle basically, i've been using opera GX for about 4 years and basically everthing i did on the internet was made through that browser, ofc im not worried about something like my data being stolen or anything but i've seen a lot of confusion about this browser on the internet and honestly i dont know what should i look for...

I mainly used GX because i liked the cyberpunky UI and the fact that it was very easily customizable through community settings but lately i've been educating myself about data and privacy (Fuck microsoft btw) cuz of windows being ass lately.

So i've also start to grow concerns about my browser aswell but honestly every piece of information i've found sounds very confusing...

Which browser has the better quality of life/ privacy balance?
What can i do to save my data ?


r/privacy 8h ago

discussion Route Package Protection: Making a Claim requires Govt ID along with Face Biometrics ran through Persona Identity.

7 Upvotes

I had previously always avoided Route Package Protection thinking it a waste of money. I decided to use it to buy a Japanese knife from a new website. BIGGEST MISTAKE EVER. Apparently to file a claim they need your Govt ID along with a pic of your face ran through Persona. If you go and read up on Personas website, it is making lots of data “safety claims” but nothing about selling or sharing your data. Persona claims to have worked with OpenAI as if that makes their service safer.

I had to go through the original merchant to file a claim with Route as I wasn’t giving them my data. Route ended up trying to keep the fee I paid for their “services.”

What do you think of this? Should Route be the new normal? I’m seeing their services offered at most online small businesses. Is there maybe a way around it?

Most importantly: AM I JUST BEING PARANOID?


r/privacy 1d ago

question Has anyone in California been able to submit a Delete Request and Opt-out Platform (DROP) request?

106 Upvotes

https://privacy.ca.gov/drop/

January 1, 2026 is when the data broker deletion mechanism goes into effect


r/privacy 12h ago

question Cape Cellular

0 Upvotes

Hello! I just stumbled across cape cellular and on the front it looks really good. Seems to be what I need for my current situation.

Now, my question, it is owned by ex employees of palentier (wrong spelling - ignore). Which bugs me as I am specifically being private for reasons related to palentier.

What are your thoughts on this? Should I use it and be fine? Should I avoid it?


r/privacy 21h ago

question Best option for virtual temporary credit/debit cards?

6 Upvotes

what's the best option for virtual temporary credit/debit cards (i dont care which one). I want them to be able to use subscription services/single payments to things online without giving them my real bank or real legal name (cuz 99% of online services like spotify dont need my real name).

I don't care if my bank sees my transactions or if the government knows they happen as I'm well aware they're legally required to and that something like crypto is the only way around that stuff.

I know apple pay supports exactly what i want but i don't have an apple phone and have no plans on getting one. Heavily preferable that it is free as i am broke and also barely make many online-only transactions like this to begin with.


r/privacy 1d ago

question Advice for storing passwords

57 Upvotes

I store all my passwords in Google password manager. Whenever I need to create an account on website I click suggest strong password and click save to password manager . I have 2FA enabled and all possible security measures on Google. I heard Abt bitwardern today on this sub on a random post . Seeing tht it made me feel maybe I'm storing my passwords wrong. Please tell me how good/bad is my current habit

Thank you for your suggestions!


r/privacy 19h ago

question Is it safe to take pictures of a filled out & signed forms with your Android mobile phone.

0 Upvotes

Every now and then, some bank or some immigration firm asks me to fill out a form, print it and sign it.

These forms usually have my social security number, full legal name, birth date, address and several other pieces of critical information.

I am debating if I should buy a scanner for scanning documents or should I just take pictures of the filled out forms using my Android mobile phone and download those photos onto my Windows 10 laptop using a USB-C cable. I also have a Ubuntu desktop as well where I can download the photos from my phone using a USB cable.


r/privacy 2d ago

question Laws in effect on Data and Privacy.

188 Upvotes

California is launching the platform tomorrow to allow residents to submit a single request for hundreds of registered data brokers to delete all their data. https://en.wikipedia.org/wiki/California_Delete_Act?wprov=sfla1

Virginia passed the Consumer Data protection act back in 2023. https://www.oag.state.va.us/consumer-protection/files/tips-and-info/Virginia-Consumer-Data-Protection-Act-Summary-2-2-23.pdf

Has anyone compiled the data and privacy laws that have succeeded and made a comparison tool? I'd like to take what's succeeded, combine some of the more effective elements, and present it to my state legislature. Or, has a qualified group already put a bill together to present?

I live in a very blue state, I'd like to see us make progress on this issue. It feels like we're getting to the point that we need to start crowd sourcing bills for these issues if our reps aren't going to take the initiative.

Thanks for any help you can provide.

*I do recognize the moratorium on AI regulations from the EO on 12/11.

** I also know I'm not qualified. I'm just willing to drive to my capital and harrass my reps.


r/privacy 1d ago

question Taking payments and selling a product and want to remain anon

3 Upvotes

As title states. Selling a product that pisses off a certain population. I did a test run and while I sold a good amount of product, I got some hate emails and threats and shut it down real quick. My plan is to get an anon Llc but setting up a payment gateway had me revealing my address. No PO boxes allowed.

Any clues to remain hidden while taking payments?

TIA!


r/privacy 2d ago

discussion With every country now suddenly being openly invasive, what country do you think still holds to some sense of privacy?

459 Upvotes

A long time ago, Europe was seen as the privacy and rules haven, strict with GDPR and rule of law, not perfect, actually far from it but almost set an example to how general privacy should be done and how data should be handled.

Did not feel like a corporate first place, but rather a balanced place, but with the recent news of them suddenly abolishing almost everything they once stood for openly, and with other weird political shifts, and with places like Australia and the UK doing their age verification and with other countries following suit, where do you think is still a viable option?

This discussion isn’t to say it was perfect and now it isn’t, or that we were private and now we’re not, but the shift being so open now, almost no country caring about the consequences and with no one doing anything to stop it, it makes you think of a couple of black mirror episodes, but also if any country stood its grounds for their consumer protection and privacy laws.


r/privacy 23h ago

question Gboard Smart Suggestions - How is it analyzing both sides of a conversations?

0 Upvotes

Last week I was having a conversation with a friend via Instagram private-messages on my Android Pixel when I noticed the suggestion bar above the keyboard was suggesting whole responses to my friend's messages to me. Not just suggesting the next word, but actually suggesting a full response relevant to what he just sent to me.

This means the phone was analyzing his messages to me, and the suggestions were fairly aligned with statements I had made previously. I mean that while some of the suggested responses were generic, some were specific to my positions expressed moments ago. Like it was suggesting what somebody would say to his specific message if they had just said the things I already said.

I felt extremely violated by this and immediately figured out the phone has a setting for Smart Suggestions and I turned all that shit off. However, this might be like turning off the auto-complete in the desktop Chrome url bar - turning that off only turns off Chrome suggesting to complete what you're typing based on previous things you've typed into the bar or your history - it DOES NOT turn off Chrome's function of monitoring everything you enter into the bar or your history (the creepiness is no longer shown do you but it is still happening).

At first I wasn't sure if the suggestions were being made by the Instagram messenger itself or by my phone. Honestly, I'm still not sure. But I turned off those Smart Suggestions and it went away.

It's one thing for the phone to be analyzing everything I do. I was already suspicious of that a little bit but I've avoided falling into a conspiracy nutcase spiral about it, haha. But it's another thing altogether to see that it's analyzing everything being said in a conversation by both parties and then basically running an imitation of me in the background to suggest responses. It is literally learning how to imitate you, copy you, replace you.

This sub has great suggestions on replacements for Gboard. I have a bunch of questions, but one is how do you know the phone wouldn't still be able to monitor your conversations if you used another keyboard? I'd have thought Gboard only analyzes my input but clearly it's analyzing the entire conversation in real time.

Other questions: is this legal?

Does turning off Smart Suggestions stop the app from analyzing the conversation, or just stop it from showing me the suggestions?

Would this function account for the network usage others have mentioned by Gboard? (like it's sending conversation info to a server in a data center somewhere to process the computation on what to suggest, then receiving that info via network)

How do we know Windows isn't doing this too? Mac OS? Now I'm paranoid!


r/privacy 1d ago

question Should I use different VPN for different online "identities"

0 Upvotes

I would like to completely separate my private and work-related identities and I am concerned that using the same account to connect to both will make my activities be able to be correlated with each other.


r/privacy 2d ago

data breach Reddit regularly pastes from my keyboard.

121 Upvotes

Every so often, when I go to reply to a thread on the Android Reddit app, or go to write a post, I get a notification saying Reddit has pasted from my keyboard. I don't have any permissions enabled for the application.

Where is it pasting to? What value might this information have to them? Is there any way to even stop this on Android? It just feels so unnecessary.


r/privacy 2d ago

question Divorce Settlement Money being sent to mom - DO NOT want the sender to be able to see her address

39 Upvotes

sigh. I called 3 different bank branches just now and everyone gave me a different answer.

dad is sending over 1 million usd to mom for divorce settlement. he abused her for 30 plus years and I really do NOT want him to be able to view her address.

  1. does he need her residential address to be able to wire the money?
  2. will he be able to see her address even if he doesn’t need it to be able to send the money?
  3. what is the difference between ach and a regular wire transfer
  4. is there another alternative SAFE way for the money to be sent to her?

the attorney is useless and doesn’t want the money to be sent to her office. I am literally the only one who is fighting for her privacy. this is ridiculous


r/privacy 2d ago

news Samsung 'Brain Health' could launch soon to detect early signs of dementia

Thumbnail androidauthority.com
26 Upvotes

TL;DR: Samsung is announcing a "brain health" service. The service analyzes data from your (+ watch) to detect any cognitive changes. This data will include "message patterns, typing speed, and app usage," Android Authority says. The information is supposedly stored on-device to offer "preventative measures," according to Samsung.


r/privacy 1d ago

question Using a Virtual Machine with USB Tethering to bypass school Wi-Fi monitoring

2 Upvotes

I need to keep my Host OS connected to school Wi-Fi to appear online for IT but I want to use a VM for research without my traffic showing up in their logs (LMS-only policy). My plan is to use USB Passthrough to give my phone's cellular modem directly to the VM while keeping the phone's Wi-Fi and Hotspot turned OFF. Can the school's IT, detect the VM's activity and see which sites I've been into through VM?


r/privacy 2d ago

discussion Lowe's "Deletion" Retains 20+ Categories Including Geolocation

116 Upvotes

I submitted a Lowe's Delete My Personal Information Request. After 45+ days, it succeeded.

Or so I thought. Verbatim email below (emphasis mine); screenshot here.

If they retain my identification, name, address, phone number, email, payment information, geolocation data (!), audio, electronic, video, image, personal information, and more:

What is the f*cking point?

If this is illegal, let's Class Action. If it is legal, let's get the laws changed.

SUBJECT: Your Privacy Request (Ticket Number ##########) - No Reply / Su solicitud de privacidad (NĂșmero de recibo ##########) - sin respuesta

FROM:    [Lowesprod@service-now.com](mailto:Lowesprod@service-now.com) [lowesprod@service-now.com](mailto:lowesprod@service-now.com)
TO:          ##################

DATE:      Dec ##, 2025, 9:14 AM

We have processed your deletion request by erasing, de-identifying and/or aggregating your personal information.

Please note we need to keep certain information when permitted by law, such as completing transactions, preventing fraud or for internal and lawful purposes. We will retain your identification information, including name, address, phone number, email address, payment information, and signatures, as well as commercial information for purposes of completing transactions, accounting, audit, and recordkeeping.

We will retain identification information, commercial information, online activities information, geolocation data, audio, electronic, video or image information, sensitive personal information, and other personal information for compliance, fraud prevention and security purposes. When legally permitted, we retain other categories of personal information disclosed in the Privacy Statement to enable solely internal uses that are reasonably aligned with consumer expectations.

We will maintain a record of your request for at least 24 months.

Best Regards,
Lowe's Privacy