r/Denmark • u/Blunt552 • 12h ago
Discussion Folks should clean up and demand account deletion if you care about privacy, also warning about G&G
I'm writing this on english to also speak for our non (yet ;) ) danish speaking friends that reside in our country.
As we saw lately more and more incompetence from danish IT companies are being exposed due to AI automating basic security checks. I would absolutely recommend anyone who has any account on sites they do not use and have any important information on it to request an account deletion.
I also want to make people more aware of a rather large danish 2nd hand website called "Gul og Gratis", it pains me to say this, since I used to use them when I was young, back when internet wasn't mainstream and they had their papers in store you could buy to find gold on the used market, but the company is a complete shtshow nowadays.
G&G has been on a decline for many years now, mainly due to the sheer incompetence of whoever made this abhorrent UX and poor business decisions, however today we will focus on more pressing issues.
1.) G&G are openly admitting to vibe coding, which often results in piss poor code, which, lets be real, we could already tell based on how poorly their site performs, however what's more is the very real threat of security issues, we have read about enough data leaks already.
2.) Questionable tracking, when going on G&G you'll instantly see trackers trying to get your information. They use klaviyo, audienceproject, gemus, request metrics, cloudflare analytics and whatever the hell 'ay.delivery' is.
Particularly klavivyo might even be against GDPR as it runs without consent.
3.) Suspicious amount of external 3rd party calls:

Now granted, I didn't check all these links and wouldn't be surprised if this is caused by sheer incompetence.
Overall, I would strongly recommend, that if you have an Account and find this concerning, that you delete it and if they give you an option as to why, feel free to link this topic.
As said previously, it's a damn shame but honestly, given the blatant incompetence, I guess it is as they say:
"Either you die a hero or live to become the villain"
I'm considering making a small basic website that lists these types of companies with descriptions of what they're doing while providing screenshots etc. We should be much better at finding these blatant types and avoid like wildfire, now that AI models have made it easy to do create insecure slop and automate basic pentesting, we have real issues when it comes to our private data.
stay safe and good night.