Facebook Connect, privacy/security issues?

[Canis]

Given the recent Facebook controversy.

What Facebook user-data is stored in the forum database?
Can Facebook collect any data from the forum database through Facebook Connect?

What happens to the forum account if a Facebook-registrered user leaves Facebook?

[Mark]

2 hours ago, Canis said:

What Facebook user-data is stored in the forum database?

• Their Facebook profile ID
• If they created their account via Facebook or have enabled syncing, possibly their:
  • Name
  • Email address
  • Profile photo
  • Cover photo.
• Tokens which allow Invision Community to (in theory) fetch other data the user has granted it access to (though it is only ever used for fetching those above things) and information about how long those tokens are valid for.

2 hours ago, Canis said:

Can Facebook collect any data from the forum database through Facebook Connect?

No, all the data comes from Facebook, unless you enable the ability to autoshare content on Facebook, in which case that content is sent to Facebook at posting time (if the user checked that checkbox) so it can post that share.

2 hours ago, Canis said:

What happens to the forum account if a Facebook-registrered user leaves Facebook?

If their name, email, profile photo or cover photo has been imported from Facebook, it will remain in the local database. If they have only ever logged in with Facebook they will need to use the "forgot password" tool to regain access to their account.

[Canis]

Many thanks Mark.

[Canis]

What about 3.party IPB addons, can they, in theory, extract sensitive information like email and IP addresses?

[bfarber]

5 hours ago, Canis said:

What about 3.party IPB addons, can they, in theory, extract sensitive information like email and IP addresses?

We cannot speak as to what third party addons do, as we do not review the code for third party addons. In theory, these addons may be able to access additional details from Facebook that we do not currently pull/collect.