From companies like Yahoo and Facebook (now known as Meta) experiencing data breaches and password leaks, to TikTok being accused of data harvesting (who have since rejected these claims as ‘baseless’), our online data is constantly at risk of being disclosed and landing in the wrong hands.
But you can greatly reduce that risk when you actively protect your online data.
Regularly changing your passwords, reading app reviews, and exercising good judgment of new websites asking for personal information are all great ways to ensure your online data is kept safe and secure. But there’s loads more to data protection.
We spoke to Vamp’s VP of Engineering, Sophie Troy, to get her expert advice on why we should be taking data security seriously, how to do it effectively, and how Vamp works to ensure our app stores our creators data safely.
Online data is any form of data or information, either personal or non-personal, that is collected by apps and websites and stored for future use. Examples of personal data include your name, age, home address, and financial information.
Basically, anything that can be used to identify you. Non-personal data can include things like the type of mobile device you use and the language you speak.
Websites and apps collect this data from you for multiple reasons. Including offering you specific services or creating a tailored user experience. And of course, for things like your financial information and home address, this information is required to purchase something online.
There are two main reasons why you should make it a priority to actively keep your online data safe. First, you want to avoid identity theft. This is when someone illegally gains access to your personal information for fraud, scams, or to gain other benefits.
This brings me to my next point. Protecting your online data will help you avoid having to deal with scammers. The more data malicious scammers have about you, the more they can target you specifically. Keeping your online data safe will reduce your chances of being scammed.
It’s not all doom and gloom. There are plenty of quick and easy ways to protect your online data. Here is a couple you can start implementing today:
Solid password protection
This is one of the best ways to keep cyber criminals away from your personal data. To begin, I suggest setting secure passwords that aren’t easy to guess. The name of your dog who you regularly post on Instagram won’t cut it!
Instead, use a secure password generator such as Google’s ‘Password Suggestions’ or Apple’s ‘Keychain’. You can also use these platforms as password managers so all your passwords can be kept in one central and safe location. Another great password manager is 1Password.
You should also set different passwords for different accounts. Reusing passwords is risky and can increase your chances of getting hacked.
And finally, don’t ignore those messages from Google that say your password has been breached or compromised. As soon as you see these messages, take action immediately and change your passwords. These alerts should also be a reminder for you to regularly change all of your passwords.
Exercise good judgment
Make it a habit to ask yourself: “Why does this website or app need this information? Is there a clear reason for sharing this information?” If not, we suggest holding off sharing until you understand what the app will use this information for and until you know it’s secure (skip to the next question to learn how to check a website or app’s security levels).
For example, Vamp asks for our creators to provide their shipping address when applying for a campaign so that if they are approved by the brand, we can ship the product out to them almost immediately. There is a clear need for this information that can be easily understood.
No matter what website you’re on, it’s always best practice to check if they have the lock symbol next to their URL. If they do, this means your data is being sent over a secure network and is kept private. It’s a red flag if they don’t have this symbol, so avoid entering any of your data on that site.
A few more tips include checking whether or not the company has a clear and accessible privacy policy and if their contact details are clearly stated on their website. These are two really good signs that your online data will be kept safe as they help legitimize a company.
When using a new app, we recommend checking the customer reviews in the App Store or Google Play. Once you know that others haven’t experienced any privacy issues, you’ll be safe to enter your personal information and have your data stored in the app.
Some other tips include checking to see if the app has a clear and accessible privacy policy and if you’re downloading it from the App Store, you can see exactly what data is being collected by the app via their Apple Policy.
Most countries have a company or government body you can report a data breach to. For example, Australians can report data breaches to the Office of the Australian Information Commissioner, or, in the UK, you can contact the Information Commissioner’s Office.
You’ll then want to go and change your passwords for all online accounts and cancel any cards if you think your financial information has been compromised.
Finally, if they haven’t come to you first, reach out to the website or app where the breach occurred so they are aware and can communicate with other users or give you advice. Vamp (and most other credible apps and websites) have protocols and actions we need to take if user data is breached.
There are two data collection points when applying to join the Vamp platform; Creating your Vamp account and connecting your social media accounts.
Starting with creating your Vamp account, we’ll ask you to enter your best contact email address and mobile number so that we can contact you with campaign opportunities and remind you when campaigns are ready to be actioned.
You’ll also be required to enter your age, location and gender so that we can serve you relevant campaign opportunities from brands looking to collaborate with specific creators. And finally, when creating your Vamp account we’ll ask for your shipping address. This is so we can ship your campaign products out to you quickly.
Next, we’ll ask you to connect either your Instagram or TikTok account (you can connect your YouTube account after this). When you connect one of your social accounts, you need to give Vamp permission to access your account data.
The data we ask for is limited to your general user profile information, user insights, audience insights, and content insights. It’s important to note that we have read-only access for this data and we only request permission for information Vamp needs for a creator to participate in a campaign.
At no point do we ever have visibility of your password and we’ll never request or have permission to post content or edit your profile on your behalf.
We require you to connect your social media accounts to our platform in order to empower our clients to select creators who best match their campaign objectives and to allow creators to showcase how well their content has performed in a campaign.
For example, we show audience data to brands when they are selecting creators for a campaign. If a brand is focusing on a specific country or region, they may choose creators with a high local audience in that country.
We also provide brands with reporting on how specific content has performed which enables them to make informed choices. For example, if a specific post has a particularly high engagement rate, they may choose to further promote that content via paid media which amplifies the overall campaign.
As official Meta Business Partners, YouTube Creative Partners and TikTok Creative Marketing Partners, Vamp takes data privacy very seriously. Our partners are also very strict about data sharing. We had to go through a review process to get access to their API’s, which is what allows you to connect your social accounts to our app.
Vamp is also GDPR compliant, which is the EU standard for data protection. Your personal data and social account data is encrypted in transit and at rest (when it’s being stored).
We have strict access controls in place so only brands that need to see specific data have access to it. For example, brands can only see the post insights for content you created specifically for their campaign. They cannot see detailed information of any of your other posts.
We also have safeguards in place to prevent unauthorised users gaining access to your Vamp account. We will lock an account for 24 hours after 3 failed login attempts.
And finally, we’ll periodically have an external company test the Vamp platform for vulnerabilities to ensure best practice is being followed.
If you’re interested in learning more about data protection within the Vamp app, speak to one of our support team members via our helpdesk.
Cookie | Duration | Description |
---|---|---|
__cf_bm | 30 minutes | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
_abck | 1 year | This cookie is used to detect and defend when a client attempt to replay a cookie.This cookie manages the interaction with online bots and takes the appropriate actions. |
_GRECAPTCHA | 5 months 27 days | This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
bm_sz | 4 hours | This cookie is set by the provider Akamai Bot Manager. This cookie is used to manage the interaction with the online bots. It also helps in fraud preventions |
cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category . |
cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
CookieLawInfoConsent | 1 year | Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie. |
csrftoken | past | This cookie is associated with Django web development platform for python. Used to help protect the website against Cross-Site Request Forgery attacks |
elementor | never | This cookie is used by the website's WordPress theme. It allows the website owner to implement or change the website's content in real-time. |
viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
Cookie | Duration | Description |
---|---|---|
__hssc | 30 minutes | HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. |
__hssrc | session | This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session. |
__hstc | 5 months 27 days | This is the main cookie set by Hubspot, for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). |
_ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
_ga_56JWQ0019V | 2 years | This cookie is installed by Google Analytics. |
_gat_UA-132076027-1 | 1 minute | A variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance. The pattern element in the name contains the unique identity number of the account or website it relates to. |
_gcl_au | 3 months | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. |
_gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
bscookie | 1 year | LinkedIn sets this cookie to store performed actions on the website. |
CONSENT | 2 years | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. |
hubspotutk | 5 months 27 days | HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. |
Cookie | Duration | Description |
---|---|---|
_fbp | 3 months | This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. |
_pin_unauth | 1 year | This cookie is placed by Pinterest Tag when the user cannot be matched. It contains a unique UUID to group actions across pages. |
AnalyticsSyncHistory | 1 month | No description |
bcookie | 1 year | LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID. |
bscookie | 1 year | LinkedIn sets this cookie to store performed actions on the website. |
fr | 3 months | Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. |
IDE | 1 year 24 days | Google DoubleClick IDE cookies are used to store information about how the user uses the website to present them with relevant ads and according to the user profile. |
lang | session | LinkedIn sets this cookie to remember a user's language setting. |
lidc | 1 day | LinkedIn sets the lidc cookie to facilitate data center selection. |
MONITOR_WEB_ID | 3 months | The cookie is used by: TikTok The functionality is: to store if the user has seen embedded content. The purpose is: Marketing/Tracking |
test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
ttwid | 1 year | No description available. |
UserMatchHistory | 1 month | LinkedIn sets this cookie for LinkedIn Ads ID syncing. |
VISITOR_INFO1_LIVE | 5 months 27 days | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
yt-remote-connected-devices | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
yt-remote-device-id | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
yt.innertube::nextId | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |
yt.innertube::requests | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |
Cookie | Duration | Description |
---|---|---|
li_gc | 5 months 27 days | No description |
ln_or | 1 day | No description |
msToken | 10 days | No description |
wp-wpml_current_language | session | No description available. |