@0x11de784a they’re allowed to verify that you’re who you say you are before giving you access to user data (due to it being potentially quite sensitive) but this sounds like way more info than they could possibly need to do that, so I’m leaning towards gdpr grey zone to non-compliant
Unfortunately, I’m not in the EU, so i cant file a complaint
@0x11de784a no idea, sorry. I know its possible because a privacy activist from Austria (Max Schrems) has already filed several but all the articles just say generalized stuff like ‘make a report to your local data authorities’ which isn’t hugely helpful
@Satsuma I'm actually not really sure but I think I already found the authority for Germany ;)
@0x11de784a oh cool! Hope they’re able to do something about it :)
@Satsuma Okay, makes sense.
Do your know more about how to file a complaint?