Tumblr tried to sneak in data collection under the radar. After a few taps, you can get a list of who they're sharing data with.

The list takes 19 screenshots to see all the names on my phone.

NINETEEN.

List of names of the "partners" Tumblr shares your data with

1/5

List of names of the "partners" Tumblr shares your data with

2/5

List of names of the "partners" Tumblr shares your data with

3/5

List of names of the "partners" Tumblr shares your data with

4/5

List of names of the "partners" Tumblr shares your data with

5/5

Also worth mentioning a very nice (no) dark pattern. The last name in the list is always behind the gradient block, which means you can never untick it.

That's Oath, the new owners.

Go read they shitty website in which they try to justify their invasion of your privacy, and also minimize the rights you have to control that data: https://www.oath.com/en-gb/my-data/

The deletion right is barely mentioned, at the very end, and they don't even give you a link to do so.

You gotta figure that one out yourself, I guess?

Let's also analyze for a bit the UI of their mandatory privacy disclaimer. Keep in mind the spirit of the GDPR is all about the need to have "informed consent" to collect data about a user.

First of all, you get a massive wall of text. Please excuse the french, but notice how faded (light grey one white) the button to modify the settings is.

That's the first dark pattern of this flow. Clearly the goal is to put everyone to sleep and hope everyone will blindly click on the bright blue button to simply accept everything.

If you do click the button to have more options, the next screen still tries to make you click the "OK" button, and the actual settings are a link on the side, barely more visible than a regular link.

And if you do click that link, you are taken to a third page that still tries to make you accept the new conditions without actually giving you control.

You need to click the "display" links to have some control.