Chat Users Automatically Stored Without Conversion
🐛 Summary
On the ArcBlock Community chat page (https://community.arcblock.io/chat), users are automatically stored in the chat system without user consent or conversion. This behavior violates privacy expectations and may lead to unintended data storage of chat participants.
🔁 Steps to Reproduce
- Navigate to:
https://community.arcblock.io/chat - Click Chat Any User Profile.
- Note that users are automatically stored in the chat system without explicit user action or conversion (e.g., no opt-in, no confirmation).
- Verify in chat logs or backend that user data is stored without conversion.
📉 Severity
High – Violates user privacy and data handling policies.
📝 Additional Notes
- The issue occurs consistently across multiple chat sessions.
- No error messages are shown, but user data is stored automatically.
- Reproducible in [specify browser/network if known].
🛠️ Expected Behavior
- Users should explicitly consent to being stored in chat logs (e.g., opt-in, confirmation prompt).
- Chat data should not be stored automatically without user awareness.
🧪 Actual Behavior
- Users are automatically stored in chat logs without conversion or consent.
- No user prompt or confirmation is shown before storage.