Public by Design: How W Social Makes Their Verified Users’ Personal Details Visible on the Open Web
A blog post explaining how the social network W Social is publishing as a record on the open social web the full names, nationalities and approximate birthdays of their verified users - who may be unaware this information is available for all to see, outside of the social network.

W Social: Verifiziert heisst veroeffentlicht
Das europaeische Netzwerk verspricht Anonymitaet trotz Ausweispflicht. Seine eigenen Datensaetze erzaehlen etwas anderes. Und die DSGVO hat dazu eine ziemlich klare Meinung. Analyse eines Privacy Fails, der auch die EU-Kommission betreffen duerfte! Wsocial Fail - Wenn Datenschutz kein Feature ist! | MeTacheles Tonspur🚨 W Socials Privacy-Fail! Anonym versprochen, halbes Profil

Move your account - w-tools
ATProto/ActivityPub rivalry notwithstanding, omfg if I were Mastodon today I'd be so angry at this
ewan
I really feel like wsocial.eu should be in conjunction with @eurosky.social.
#WSocial’s advice here is TERRIBLE - deleting your account won’t change a thing. Just now I found the record of a minor (15yo) who was verified by #WIdentity. His account status is now “taken down” but his full name, nationality and approx. date of birth are still visible on W's verification list!
W Social
We understand that you may prefer not to share your age range and nationality publicly. If so, you can delete your account under Settings → Account → Delete account. You can read more about how it works and the reasoning behind it here: wsocial.eu/profile/wsocial.eu/post/3mxgl…
Under the 1st option only the name is said to be public. You still publish nationality & birth-year date for those users. Nothing in your privacy notice, your TOS or this screen allows that. @ec.europa.eu & @ad4europe.eurosky.social is this the platform you want to endorse, or time for your own PDS?
W Social
This is not a leak. It is public information all our users have given consent when they verified
I did it. I finally migrated to @eurosky.social. Thanks to @support.wsocial.eu for fixing a bug that prevented me from. Big thanks to @liabelle.me and @caesar.dev for staying in touch with me at any time! My reason for the migration from @wsocial.eu to @eurosky.social:
Dear #WSocial verified users, who had your account verified after 16-09-2026: if you are not comfortable with your full name, nationality and approx. age being shared *outside* of W, on the open web, please DO NOT delete your account. You need to file a proper right of deletion request instead #GDPR
Alban_bdx
@wsocial.eu @anna.wsocial.eu I’m not happy that my approximate date of birth and nationality can be read by anyone in my W Social verification record. Please explain your legal basis for publishing it, and delete it. #WsocialFacts #GDPR
We understand that you may prefer not to share your age range and nationality publicly. If so, you can delete your account under Settings → Account → Delete account. You can read more about how it works and the reasoning behind it here: wsocial.eu/profile/wsocial.eu/post/3mxgl…
birthDateApprox stores a generated date: 1 January of the birth year, shifted randomly within a 24-month range. The day and month have no connection to your birthday, and even the year may differ. We use it to derive an age range, balancing privacy with context about who is behind the keyboard.
Hi Jan. Thanks for sharing. Do you believe that the average user will understand fully that their full legal name, nationality and in many cases *real* birth dates and email addresses (We can send you DIDs in private) will be published to the open web, where W cannot retain control?
I understand perfectly well. My questions concern the people behind the flood of content about W since we launched our beta in June. Who are they? Who funds them? What other financial interests might they have? And why is the site anonymous? Those are reasonable questions about transparency.
You know, part of the reason why I’ve been so concerned about the-letter-that-shall-not-be-named is because I was worried about their users being misled or their legal IDs potentially being leaked, but the responses under the ridiculous announcement from the official account suggest I shouldn’t care
even if you're going to do legal identity verification (which sucks!), i don't like that they didn't even attempt to make the user own their own data in their own repo, and make verification only be a record with a strongRef in W's repo. why publish full names and birthdates to W's own repo? wild
Kirsten Fiedler
🤦♀️ #WSocial is posting legal names, nationalities and approx. birthdays of verified users as a public record on the Atmosphere. Confronted, they claim it's "by design" 🤯
* Not so much “quit” as “you probably shouldn’t move to/sign up for” (just following my naming convention in this “series”). To be clear, I think it’s (probably) totally fine that it exists as an option (unless the potential security concerns turn out to be relevant), but personally I would advise against choosing that option based on what I’m learning. I’m sure it’s a good choice for some people, just probably not anyone I know