MN and access to our PMs

[WichBitchHarpyTerfThatsMe]

I've been told today that admins at a fairly junior level in MN have access to our PMs. I'm not certain whether or not it is true but as a precaution I've deleted all of mine.

Given the recent leaks with the MF FB members and the concerns about the past behaviour of certain MN staff I don't think we can be too careful.

I know that in relation to meeting up for WPUK meetings I shared my phone number and geographical whereabouts with some other MN members via PMs so I've deleted those messages as a precaution. All the MN women I met up with were lovely btw and not narcissistic psychopaths so am pretty sure they are trustworthy, MN staff on the other hand - I don't know.

Oh dear.

Could it be because the recipient left Mumsnet do you think?

It seems to be the case that if I delete a message in my inbox, the origninal message to me is also deleted in the sender's outbox.

Thats a testable theory.
I did wonder if they were making space on their servers?

Oh no that's not right I didn't look closely at my sent folder, just selected all and deleted.

In the interests of security it would be good if we could opt to have PMs we've sent deleted from other people's inboxes when we delete our own copy.

It doesn't seem right at all that PMs we've sent could be deleted from our own sent folder because the recipient deletes their copy.

Perhaps the messages get deleted when they get to a certain age?

In the interests of security it would be good if we could opt to have PMs we've sent deleted from other people's inboxes when we delete our own copy
No way. That would be a data protection issue. Once the recipient has received the msg it’s their data not yours. There could be a ‘request to recall’ like with email but the recipient would have to consent. Also to whoever asked if deleted msgs are kept. Yes they are, they will have to be for legal reasons, you could be discussing anything that might have to be handed to the police for instance, the only question is who can see them which comes down to MNHQ administrator rights and how they are set up.

I know that was talked about DrDre, after the Emma leak I think, but I found this on the privacy policy:

Private Messages are stored until you delete them. If you delete your account, your messages will also be deleted.

But also at the bottom of the page under 'Updates':

22 May 2018: deletion policy on Private Messages updated

With no further details

Last year I sent some seeds to someone and once they had them, they deleted the message from their end, and it disappeared from my in box; this isn't a new thing.

And further, the Admin rights should be very tight, with many tiers and dual access for sensitive data. Judging by the leaked screenshots showing IP addresses a couple of months ago, that certainly didn’t seem to be the case then. Let’s hope it is now.

On the GDPR FAQ page:

What about my Private Messages?

Private messages are not visible to the public. You can delete Private Messages you have sent at any time by going to your My Account page.

But I can see nothing in My Account related to PMs.

TellsEveryoneRealFacts
If that is correct, and it’s policy rather than a glitch, that is appalling. Imagine if someone had a sustained bullying campaign against you by pm and all they had to do was to delete it from their end to make it disappear? As I said above the msgs in your inbox are your data not the sender’s. The security and data protection on this site seems naive at best judging by the last couple of months events.

There was a discussion around autodeleting PMs over 60 days old when GDPR came in. The consensus was no.

If that is correct, and it’s policy rather than a glitch, that is appalling. Imagine if someone had a sustained bullying campaign against you by pm and all they had to do was to delete it from their end to make it disappear? As I said above the msgs in your inbox are your data not the sender’s. The security and data protection on this site seems naive at best judging by the last couple of months events.

Aye - screen capture anything you want to save, is my motto.

To the person I sent seeds to - I agree that you should delete your address, I would have anyway and I didn't screen shot your address! [otherwise i'd probably have sent you loads more seeds]...