GDPR Archives

AppWizard

August 5, 2026

Developers: Beware of Ad Libraries that Betray Your Users’ Location

Advertising companies provide software development kits (SDKs) for mobile app monetization, which often automatically transmit users' location data to ad systems and location data brokers, raising privacy concerns. Many developers and users may be unaware of this data sharing. When developers allow SDKs to collect location data, it poses risks beyond targeted ads, including potential misuse by agencies like ICE and global surveillance. Location data brokers harvest precise movements of individuals, often without their consent, through mobile applications. Some apps directly collaborate with data brokers, while others leak data through advertising SDKs during real-time bidding (RTB) auctions. An incident in 2025 revealed that many apps unknowingly contributed to a location data broker's database. Developers must understand their SDKs' location-sharing practices to mitigate risks. Advertising SDKs can collect location data automatically once users grant permission, without specific permissions for the SDKs themselves. Precise location data can be collected when apps have location permissions, leading to potential privacy violations. Several SDKs have been identified as collecting location data by default, increasing the risk of unintentional data leaks. The Electronic Frontier Foundation (EFF) found that four advertising SDKs collect users' location data by default when location permissions are granted. InMobi encourages location sharing for higher revenue, while BidMachine updated its documentation after EFF's inquiry, confirming precise location data collection. Verve's SDK also collects location data by default but presents a cautious narrative in its Play Store guidance. Huawei's SDK recommends obtaining location permissions to enhance revenue, with default location sharing occurring if permissions are granted. Location data can be shared without users' knowledge or meaningful consent, complicating informed consent issues. The focus on four SDKs does not imply that others adequately protect location data, as many have faced criticism for similar practices. Studies indicate that SDKs often encourage increased data collection through design and documentation, leading to minimal control for developers over data transmission. The EFF's analysis highlights that advertising SDKs incentivize location data sharing through default settings and unclear documentation. Developers should assess third-party SDKs and disable unnecessary data collection. Regulators must hold developers accountable for unlawful data sharing, while legislators should enact laws to protect location privacy and address online behavioral advertising, which drives data tracking.

AppWizard

August 5, 2026

Are your Android apps secretly sharing your location with advertisers? Some developers are accidentally leaving on this critical data-invading setting when using third-party SDKs

Developers often rely on third-party software development kits (SDKs) for mobile app monetization, which can compromise user privacy due to invasive data-collection features. The Electronic Frontier Foundation (EFF) has raised concerns about these SDKs' default settings that collect sensitive location data without explicit user consent. Location data is valuable for advertisers, allowing targeted marketing, but permissions granted to apps often extend to SDKs, enabling data collection without informed consent. The EFF emphasizes that app-level location permissions do not signify meaningful consent for third-party SDKs. The location data collected has been used by intelligence agencies and law enforcement, raising ethical privacy concerns. The EFF recommends that developers prioritize user privacy, regulators hold app developers accountable for unlawful data sharing, and legislators consider enacting federal laws similar to the GDPR to protect user privacy and potentially ban behavioral advertising.

AppWizard

August 5, 2026

Android Developers Unknowingly Leak User Location Data

Recent research from the Electronic Frontier Foundation (EFF) has revealed that millions of Android users' location data are being inadvertently exposed to advertisers through third-party code libraries. This occurs when seemingly harmless applications, like weather services and fitness trackers, integrate third-party SDKs that collect user location information automatically upon permission approval, often without developers' awareness. Data brokers aggregate this location information to create detailed movement profiles sold to advertisers and government agencies. Despite privacy regulations like GDPR and CCPA, enforcement is inconsistent, and developers may claim ignorance regarding data practices they did not implement. Google has improved Android's privacy controls, but visibility into third-party libraries accessing data remains limited. Developers face challenges in auditing third-party code due to resource constraints, leading to a complex landscape where user information traverses multiple entities without clear accountability. Privacy advocates are calling for new technical standards to require SDKs to disclose their data practices.

Tech Optimizer

August 4, 2026

Automated PII redaction for Amazon RDS for PostgreSQL audit logs

The article discusses a serverless pipeline for creating an irreversibly redacted and queryable archive of Amazon RDS for PostgreSQL audit logs. It sanitizes sensitive information, such as Social Security numbers, credit card details, and email addresses, before storing the clean logs in Amazon S3, which can be queried using Amazon Athena. The deployment process is facilitated by a single AWS CloudFormation template. The challenge is that pgAudit logs sensitive data in cleartext to Amazon CloudWatch Logs, which poses compliance risks under regulations like GDPR and HIPAA. While CloudWatch Logs Data Protection offers reversible masking of PII, this is insufficient for compliance needs requiring permanent separation of PII from audit evidence. The proposed pipeline creates an irreversibly redacted copy stored in Amazon S3, ensuring original values cannot be restored. The deployment requires an active AWS account with specific permissions, AWS CLI v2, a compatible AWS region, and confirmation of service quotas. The CloudFormation template has four main parameters for deployment, including ProjectName, DBInstanceClass, DBAllocatedStorage, and EnvironmentType, with sensible defaults provided. Three deployment options are available: via the AWS console, AWS CLI, or a deploy script. After deployment, users can generate test data, trigger the redaction pipeline, and verify results in Athena. The process includes steps to create a PostgreSQL table, insert records with PII, run queries, and monitor the execution of the redaction pipeline. The article emphasizes that unredacted PII remains in the source CloudWatch Logs, recommending enabling CloudWatch Logs Data Protection for added security. To clean up resources and avoid charges, users must empty the S3 buckets and delete the stack. Cost considerations for the pipeline include infrastructure costs and the expense of achieving irreversibility.

Tech Optimizer

June 20, 2026

pgEdge Announces ColdFront for PostgreSQL, Seamlessly Uniting AI, Analytical and OLTP Workloads

pgEdge ColdFront is a data tiering solution for PostgreSQL that allows seamless access to hot and cold storage without changing application code, reducing storage costs by up to 90%. The cold tier is writable, enabling operations like UPDATE and DELETE on archived rows using standard SQL commands. ColdFront automatically migrates older data to Apache Iceberg in Parquet format, compatible with S3-compatible object stores, while maintaining full accessibility through a single Postgres table name. It enhances performance with the DuckDB vectorized columnar engine, achieving 10-100x faster analytical performance on cold data. ColdFront simplifies data management by automating the movement of cold data to cost-effective storage, addressing challenges like increased storage costs and operational complexities. It allows for compliance tasks, such as GDPR deletion requests, to be executed with a single SQL statement. Key features include a directly writable cold tier, no application changes required, open-source operation, automated partition lifecycle management, cost-effective operations, and distributed access in multi-master clusters. ColdFront is beneficial for sectors like SaaS, IoT, and regulated industries, and is currently available as a production-grade beta, set to be integrated into pgEdge Cloud in the second half of 2026.

Winsage

June 10, 2026

Microsoft to Allow Users to Disable Web Search in Windows 11

Microsoft is introducing new controls for Windows 11 that will allow users to disable web search and remove Microsoft Store suggestions from their search results. The update, demonstrated on June 2, 2026, will include two toggles in the Windows 11 Settings app under Privacy and Security → Search Permissions. The first toggle will turn off Bing-powered web results in the taskbar search and Start menu, while the second will control the appearance of Microsoft Store app suggestions. This change replaces the previous method of disabling web search, which required complex registry edits. The new settings aim to enhance user experience by prioritizing local search results and addressing privacy concerns, as user queries will no longer be transmitted to Microsoft’s servers. The toggles are expected to roll out through the Windows Insider program before becoming available to all users.

AppWizard

May 25, 2026

Monitor live traffic from V2X signals with V2X2MAP open-source Android app and an ESP32-C5 development board

The OpenTrafficMap initiative has introduced the ESP32-C5 C-ITS receiver board, which uses 802.11p / ITS-G5 V2X communication over the 5.9 GHz WiFi 6 spectrum for traffic management. Peter Holzhauser has forked the firmware for this receiver and ported it to the Waveshare ESP32-C5-WIFI6-KIT development board, adding Bluetooth Low Energy (BLE) streaming capabilities. He also developed the V2X2MAP open-source Android app to interface with the board, allowing users to monitor live traffic and visualize detected nodes on the OpenTrafficMap website. The ESP32-C5 C-ITS receiver board includes an ESP32-C5-WROOM-1 module, a GPS module, and an Ethernet port with Power over Ethernet (PoE). The V2X2MAP app captures signals from vehicles' on-board units (OBUs) and roadside units (RSUs) on the 5.9 GHz V2X band, collecting data such as GPS coordinates, speed, hazard alerts, traffic light countdowns, and intersection geometry. The app can update maps offline and refresh data via MQTT. The source code for the firmware and the V2X2MAP app is available on GitHub under an MIT license. The firmware has been adapted for the Waveshare ESP32-C5-WIFI6-KIT, which is available for purchase online. Users are cautioned about legal considerations regarding the reception and forwarding of ITS-G5 radio data, particularly concerning GDPR compliance in Europe. The ITS-G5 standard is primarily used in Europe, while other regions may rely on C-V2X technology.

AppWizard

April 29, 2026

How to turn off Meta AI (Facebook, Instagram, and WhatsApp)

Meta AI has been integrated into Facebook, Instagram, WhatsApp, and Messenger, enhancing user experiences with features like search functionalities, chat interactions, and content generation. Users express a desire to limit their interactions with Meta AI due to concerns about transparency, privacy, and data security. The AI model is trained on diverse data sources, including public posts and user interactions, raising issues regarding data control. On WhatsApp, personal messages and calls are end-to-end encrypted, while Instagram may share past messages with Meta AI for context. Security vulnerabilities have been reported, including incidents of data mishandling. Currently, there is no comprehensive option to disable Meta AI across all platforms, but users can take steps to limit interactions, such as muting AI prompts and adjusting privacy settings. Users in the E.U. and U.K. can object to certain data uses under GDPR by submitting requests through their Meta accounts. To protect privacy, users are advised to opt out of AI training, limit personal data sharing, and use privacy tools like VPNs.

Tech Optimizer

April 27, 2026

The Best Internet Security Solutions Out There Right Now

Mysterium VPN offers a decentralized infrastructure with over 7,500 residential IPs across 100 countries, ensuring user privacy without requiring contributions of personal IPs. It features DNS and IP leak protection, a kill switch, ChaCha20 encryption, and a no-logs policy, complying with GDPR. Mysterium supports up to 15 devices simultaneously and is priced at .59 per month with a 7-day money-back guarantee. Bitdefender Total Security provides comprehensive antivirus protection, including malware detection, ransomware protection, firewall management, and device optimization tools, along with webcam protection and anti-phishing features. Kaspersky Premium delivers real-time antivirus protection, identity theft monitoring, secure payment tools, and parental controls, maintaining high threat detection capabilities. Proton VPN, based in Switzerland, emphasizes privacy and transparency, offering a solid free tier and premium features like Secure Core routing, although its speeds may vary. Malwarebytes Premium focuses on detecting newer or less common threats, evolving from a malware removal tool to a comprehensive security platform. Avast One integrates antivirus protection, VPN services, and performance optimization tools, providing identity monitoring and breach alerts, while working to enhance transparency after past scrutiny. 1Password specializes in secure password storage, generation, and autofill capabilities, along with features to alert users to compromised credentials and secure document storage.

Tech Optimizer

April 27, 2026

Why developers are betting on Postgres for AI

Organizations are intensifying the development of AI applications and agents, which rely on access to existing enterprise data to avoid inaccuracies in responses, a phenomenon known as "hallucination." Jensen Huang, CEO of Nvidia, and Phillip Merrick, co-founder of pgEdge, emphasize that structured data is essential for AI effectiveness. PostgreSQL is highlighted as a preferred database for AI applications, with 66% of respondents in the Stack Overflow 2025 Developer Survey indicating they wish to continue using it. Merrick notes PostgreSQL's advantages, including its open-source model, scalability, and ability to handle both structured and unstructured data. The pgEdge toolkit supports the entire lifecycle of AI application development, including document ingestion and vector embedding generation. PostgreSQL offers deployment flexibility and robust security features, making it suitable for critical sectors like finance and healthcare.