⚠️ Account deletion is permanent
We receive multiple requests every week to restore accounts accounts that were previously deleted.
How can we improve this?
⚠️ Account deletion is permanent We receive multiple requests every week to restore accounts accounts that were previously deleted. How can we improve this? 54 comments
@pixelfed@mastodon.social Honestly, that seems like enough, but maybe an extra popup with a big ol warning sign and bright red text saying "Are you absolutely sure? This CANNOT BE UNDONE. There is no going back" with the confirm button having a label like "Yes, I fully understand that this is the end of my account", and you have to hold down the button for 3 seconds @pixelfed perhaps an option to download an archive of the account and a way to restore it to a new account later? Don't know how feasible that is though, would certainly mess with timelines and replies. @pixelfed Could a queue system work? Disable the account, put it in a queue for X days, then process the full removal? @cjerrington @pixelfed This right here is a solid option, queue it up for deletion after 7 days or 30 days in standard for some other sites, so they would be a good option to consider for sure. Make sure the users are clearly aware of the number of days they have if by chance they want to re-activate their account before the time is up. @pixelfed @cjerrington @scottytrees People can delete their account for various reasons including security risks and queuing it would mean them being unable to do so immediately. I think the current version is pretty clear already. People ask to recover just because they did want do delete their account and changed their mind later so they want to see if something can be done about it. Any options to export their data to an archive so they are least have that for the future? 🫤🤷♂️ @pixelfed @pixelfed Does it immediately perform the account deletion? I would consider having it be queued for deletion, maybe after 7 days, and send the user an email after "request account deletion" (instead of immediate deletion) as well as one day beforehand. Basically "hey if you change your mind or think this is a mistake, click here to cancel your account deletion". @pixelfed maybe have people type in the name of their account one last time, instead of just requiring a button click? i think that would require a little bit more attention in case they just skip the warning text. @pixelfed I like the github approach. Let them type out "I am sure I want to delete my account" or something shorter. @pixelfed I saw in a few applications that is required to type a particular word or phrase to perform that kind of actions. (Note: I'm not familiar on how other social networks do that) My guess: - Disable for a short period of time (like 1 week) and then actually delete. - Warn about this behavior, and add an option to delete data immediately. - I suppose this is already being done, but make sure it's the actual owner of the account who is doing this [1/2] About the last one, Youtube comes to mind, from time to time accounts get's invaded and content could be deleted, but on YT you can restore bc it's not immediate AFAIK. In this case, it might be better to not offer the option of immediate content deletion? @pixelfed when a user deletes their account, don’t actually delete it for 30 days. During those 30 days, the account is deactivated — appearing as deleted for all intents and purposes. If the user logs in during that 30 day window, reactivate the account. Continue to offer the option to delete immediately but make it difficult to find. @pixelfed I think people are just used to the idea that telling a company "Delete My Data" is more a gentle suggestion than a request. Everyone kinda knows that "Delete" just means, "I know you're going to keep my data and use it for whatever, but you're going to hide it from me and prevent me from logging into this account." @pixelfed Another thought - if this turns out to be one of these "force of nature" situations where there's nothing to be gained from fighting it - how long do they go before doing this process and coming back to restore it? Maybe you could do a time bomb thing. And maybe from there, see about making a "actually, delete this now!" button. So most people would just click "okay" instead. They'd have to go out of their way to "do it now". Maybe that won't work, but maybe worth a try? @pixelfed Requires a bit of work, but giving two clear, clean an unambiguous options might drive the point that deletion is final home. Something like: [delete my account and make my user name available] [delete my account and prevent users from creating an account with my user name] (perhaps dumb example, but forcing a user to choose between options makes them consider the impact that each one has) @pixelfed is the biggest complaint usernames? I'd love to be able to get mine back from when I was testing the waters @pixelfed You shouldn’t change what you’ve got. It’s clear. Giving users the ability to permanently delete their account at will is a good feature, it means the data belongs to the users and you respect that. @pixelfed the idea of a 30 days cool-down period is the best approach in my opinion. It’s allows to protect the user against him/her-self, or maybe a bad actor who might want to delete someone’s else account. @pixelfed
- use soft deletion and wait a well communicated amount of time before hard deletion - offer a signed backup archive which could be used to restore the account. Signed, to prevent importing maliciously altered backups. @pixelfed With a grace period? "Your account will be deleted in 30 days, unless you reactivate it in the meantime" @pixelfed Have a data retention-then-deletion policy of 30 days. This can be reflected in the database with a flag ‘pendingDeletionSince’ with either a null or a datetime in it. Then a daily cron can delete accounts marked for deletion more than 30 days ago. A very different story is how to make those accounts contents not visible while they are awaiting deletion… need to do some magic on the feed mixer and search service that check for this parameter presence > You don't want to change what you have. That's understandable. Giving users the ability to delete their account at will is a good feature, it means the data belongs to the users and you respect that.
@pixelfed i would suggest a 30 day deactivation period before deletion. enough time to people just change their minds @pixelfed this is an interesting social rather than technological problem. People got so used to services that retain their information, even when asked to delete it, that they get confused when they use a service that actually does what they asked. "Wait, what? I asked you to delete my data and you ACTUALLY deleted it? I'm confused now" @pixelfed Everything in the photo seems outlined clearly and I wouldn’t change anything. Maybe a consideration for people who are dyslexic or otherwise text-impaired, like a graphic showing permanent deletion. Perhaps a link on the word “instance” that defines it for people not familiar with the Fediverse. Otherwise, people need to take responsibility for their own actions…as always. Never delete accounts permanently AND instantly. When a user requests an account deletion, first hide the account from public but have a period of at least several days when they can log into it and cancel the deletion and reinstate their account. Only actually irreversibly delete stuff from the database when that period has expired. @pixelfed Make people write a 1000 word essay of how it came to be that they need to resurrect the deleted account before resurrecting? @pixelfed 1. Have a really big in your face message with "ALL YOUR DATA WILL HE DELETED. THIS CAN NOT HE UNDONE" |
@pixelfed Maybe list a few of the most recent photos to visualise that they will be gone as well? E.g. "*all* of your pictures will be gone."