Security issue in privacy settings of the "AdWords API and Google Ads API Forum"

[Mat]

Is it intended that the login email addresses of all contributors are published in the "Abridged summary"?

Similarly, poorly obfuscated email addresses of contributors appear here in the forum in responses from members of the Google Ads API Team.

I think both are security issues that should be fixed.

BTW: in the Google Ads Script Forum this is not the case. If in doubt, ask the admin there how to set it correctly ;-)

Regards

Mat

[Google Ads API Forum Advisor Prod]

Hey Mat, 
Can you post a screenshot of what you're talking about? We didn't find any major discrepancies between the Ad Sense forum and the Ads API forum. Thanks.

ref:_00D1U1174p._5001UBn5Wy:ref

[Mat]

sure - I sent it via privat message

[Google Ads API Forum Advisor Prod]

Hi Mat, thanks for replying with the screenshots. 
I think what you're seeing is the difference between a group member who has set a display name in their personal group settings, and one who has not. If you'd like your email to be hidden from email summaries, please feel free to set a display name. Otherwise, the groups are configured the same way. Thanks for bringing this concern to our attention.
 

Jon

ref:_00D1U1174p._5001UBn5Wy:ref

[Mat]

Hi Jon,

sadly, you are missing the point.

My settings are the same in both forums. And as you can clearly see in this thread, I've set a display name. It's "Mat". 

The point is, that in the "Abridged summary of adwor...@googlegroups.com" daily email of this forum the email addresses of all contributors are published - next to their display name (as you can see in the screenshot I've provided), while in the "Abridged summary of adwords...@googlegroups.com" daily email of the Google Ads Script forum, there are no email addresses published at all but only the display names. And the latter is the way it should be.

And as you can see in your answer to my last post, my email address shows up in your posting, almost non obfuscated. And that too is not the case in the Google Ads Script forum and a security and privacy violation by itself.

Would you mind escalating this topic to someone with a better understanding of privicy and security matters?

Regards

Mat

[Mat]

As I can see, you are still distributing all of your contributors Google Account Login addresses (including mine without my permission) to anyone who subscribes to the daily digest of this forum.

If you are not willing or able to fix this privacy violation, you probably should not offer this service in Europe:

https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

Regards

Mat

[Google Ads API Forum Advisor Prod]

Hello,

This was escalated to me.

I am looking into whether there are any setting differences between this forum and the scripts forum. I will let you know what I find out.

Regards,
Mike, Google Ads API Team

ref:_00D1U1174p._5001UEIUpJ:ref