่ทณๅˆฐไธป่ฆๅ†…ๅฎน

Chat Users Automatically Stored Without Conversion

JM โ€œcryptotestnetโ€ Morales
support
need-reviewux

image.png

๐Ÿ›ย Summary

On the ArcBlock Community chat page (https://community.arcblock.io/chat),ย users are automatically stored in the chat system without user consent or conversion. This behavior violates privacy expectations and may lead to unintended data storage of chat participants.

๐Ÿ”ย Steps to Reproduce

  1. Navigate to:ย https://community.arcblock.io/chat
  2. Click Chat Any User Profile.
  3. Note thatย users are automatically storedย in the chat systemย without explicit user action or conversionย (e.g., no opt-in, no confirmation).
  4. Verify in chat logs or backend that user data is stored without conversion.

๐Ÿ“‰ย Severity

Highย โ€“ Violates user privacy and data handling policies.

๐Ÿ“ย Additional Notes

  • The issue occurs consistently across multiple chat sessions.
  • No error messages are shown, but user data is stored automatically.
  • Reproducible in [specify browser/network if known].

๐Ÿ› ๏ธย Expected Behavior

  • Users shouldย explicitly consentย to being stored in chat logs (e.g., opt-in, confirmation prompt).
  • Chat data should not be stored automatically without user awareness.

๐Ÿงชย Actual Behavior

  • Users areย automatically storedย in chat logsย without conversion or consent.
  • No user prompt or confirmation is shown before storage.
ๅ›žๅค