# Data privacy concern

**URL:** <https://meta.discourse.org/t/data-privacy-concern/153787>\
**Category:** Support\
**Created:** [June 4, 2020, 8:16am UTC](https://meta.discourse.org/t/data-privacy-concern/153787 "2020-06-04T08:16:42Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Hilario](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/hilario/32/152199_2.png) [@Hilario](https://meta.discourse.org/u/Hilario)\
**Post date:** [June 4, 2020, 9:17am UTC](https://meta.discourse.org/t/data-privacy-concern/153787/3 "2020-06-04T09:17:03Z")

</div>

Very fast answer. Thanks @rishabh.  
I just would like you elaborate on the first point because I am not a RSS / JSON expert:

- I understand I just have to rebuild to apply this fix?
- what does it mean to “block the individual user RSS & JSON routes”?

And some added questions.

- Is there an option to  
check by default the “Hide my public profile and presences features”?
- If I disable directory it is disabled even for administrators. I think should be a way to limit User directory access with more granularity (administrators, and moderators should be able to have always access I think)
- I have checked “hide user profiles form public”. But Anonymous till receive a list of users, limited list but till a list. Should be an option to block all ANONYMOUS users to personal info and listing. (may this be part of what I am missing in your fix?)

---

_[View the full topic](https://meta.discourse.org/t/data-privacy-concern/153787)._