Severe privacy issue.
Dancing_Rain
I just started using Raindrop recently and one of my favorite features was embedding a collection into a web page. For example, I could embed Raindrop collection page in my note taking app. However, I just came to know that anyone can access the collections I have shared by just putting my username at the end of the raindrop URL. I know it says that anyone can see the page with the URL but I thought I will need the "full big" url to access the page but there is this workaround too.
I don't know if it's a known issue or if it's even an issue but I think it's a privacy concern for users (especially on this forum; username visible) who don't know about this thing. At least inform the user that all shared pages will be available on the link
raindrop.io/username
. Maybe, a work around could be a big unpredictable URL or maybe some other method to privately embed a collection into other app. This is a really nice feature and it would be awesome if this issue could be solved.
Thank you.
Log In