Heads up, Internet privacy advocates: a new report[*1] released in June warns the 7+ million members of OkCupid that the site is "a privacy heartbreak waiting to happen."
Since being acquired by Match.com last year, OkCupid's service terms allow the site to share user data with more than 50 websites owned by Match's parent company, IAC/InterActive Corp., and with IAC partners. The site may even archive data after users have closed their accounts or deleted information from their profiles.
Sarah Downey gives a detailed rundown of OkCupid's privacy weaknesses in the report:
- OkCupid does not support HTTPS, a standard web encryption that ensures secure browsing by sending and receiving information in an encrypted form. Without HTTPS, information appears as plain text. With HTTPS, information looks like random characters. The lack of HTTPS on OkCupid means that anyone on your wireless network could potentially read things like emails, profile info, and the answers to your hidden questions on the site.
- OkCupid uses nine different tracking companies and ad networks to obtain information about its visitors. None are part of OkCupid - all are independent third parties mining user data, like pages visited and time spent viewing a specific profile. The FTC requires dating sites to inform members about how their data will be used, but that information is often hidden deep within confusing terms of use or privacy policies.
- OkCupid can keep your data forever. The site's privacy policy states that it collects OkCupid users' "personal interests, gender, age, education, occupation and certain relationship preferences. . . name, email and photo," along with their browser and IP address. It also says that OkCupid "may keep such information archived indefinitely." But on the bright side, you can email OkCupid at privacy@okcupid.com to request that your information not be shared with others.
- Match's takeover of OkCupid means even more data sharing. Match's parent company owns sites like CitySearch.com, CollegeHumor.com, and Vimeo.com, and IAC's privacy policy allows it to share information freely between the companies it owns. "In other words," Downey writes, "your OkCupid data can be shared freely among the 6th largest online network in the world. Not very private."
So what can you do to protect your data online? "Think twice before posting any content on OkCupid or any other dating website," Downey says. "Even if you delete it later, it may be archived permanently." Use a browser add-on to block trackers and ad networks. Use an alias and an anonymous email addresses. And only provide information that is absolutely necessary - if it's optional, don't fill it in.
For more information on this dating site you can check out our OkCupid review.