I’ve been curious for a while about what kinds of data Facebook application developers get access to. To that end, I’ve set up a “Facebook Security Quiz” application using the Facebook Developer app and API. Currently this application is in “sandbox” (developer only) mode, so is inaccessible. The “about” “privacy” and “terms of use” links all point to this page.

Privacy
I will be making all code available online in some form for review, and plan on storing no more data than is absolutely neccessary to make the application run. I plan, currently, to display, for each user taking the “Security Quiz”, all of the data they chose to make accessible to this application. The display will be “passthrough” from the Facebook API directly to screen rendering, bypassing the database. I expect to use MySQL for storage of the application’s API key and secret. I may need to keep a hash of the Facebook IDs of users with their score, so that they’re able to display these scores on profile boxes, purely as a means of advertisement for the quiz. If I require storing more information than that, then profile boxes / publishing will not happen.

Terms of Use
This application is not to be used for any data gathering purpses, even if redeployed by another user as their own application. This tool is a way to allow Facebook users to see precisely what data they have chosen to make available to application developers. No other use of this tool is authorized.

Copyright and License
I will open-source my code once I’ve actually read the licenses from a developer perspective and can understand them.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]