Adding guides for TikTok and X

guide-steps/en/TikTok_guide.md

@@ -0,0 +1,151 @@
+
+*Currently visible at: https://privacyinternational.org/node/UPDATENODE*
+
+# Title
+Guide on TikTok settings and good practices
+
+# Summary
+This guide covers settings you can tweak on TikTok to have greater control over your data as well as good practices to keep in mind while navigating the platform.
+
+# Body
+
+TikTok can be an important tool for individuals to access information and spread messages and ideas around the globe. For these reasons, it’s not possible for some people to simply stop using it. However, we continue to be very concerned about the company’s conduct.
+
+This guide includes:
+* Two-factor authentication
+* Making your account private
+* Preventing X from suggesting your account
+* Limit your content visibility
+* Block user
+* Reviewing third party apps with access to your data
+* Minimising targeted ads on TikTok
+* Limit information sharing in the browser
+* Good practices
+
+#### Two-factor authentication
+
+Two-Factor authentication provides an extra security step in order to access your account. This way, besides asking for your username and password, TikTok will verify your identity by sending a unique code to your device.  
+
+This can be done by SMS (text message) or using a dedicated app which we recommend as a more secure solution. Check our [guide on password managers to learn more](https://privacyinternational.org/guide-step/5538/guide-password-managers).  
+
+**On the mobile app:**  
+Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings and privacy** and then click **Security & Permissions**. Finally, tap **2-step verification**.
+
+![TikTok 2FA 1](../../images/TikTok/tiktok_2fa_1.png?raw=true)
+
+You can now choose your preferred authentication method and follow the on-screen instructions to set it up:
+
+![TikTok 2FA 1](../../images/TikTok/tiktok_2fa_2.png?raw=true)
+#### Making your account private
+
+Making your account [private](https://support.tiktok.com/en/account-and-privacy/account-privacy-settings/making-your-account-public-or-private) (as opposed to "public") lets you share your content with a select group of people that you care about. Anyone else that might want to access it needs to send you a follow request and get your approval first. Note that in any case, your name, username and profile photo will always be visible to anyone on or off TikTok.
+
+**On the mobile app:**
+
+* Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy > Privacy**, and enable the **Private account** toggle.
+
+![TikTok Private Account](../../images/TikTok/tiktok_private_account.png?raw=true)
+
+**On your browser:**
+
+* On TikTok's website click on the three dots under your profile picture on the left and click on **Settings**. Then click on **Privacy** and you'll be able to tick the box for Private Account.
+
+* It is important to bear in mind that anyone already following you before you make these changes will still be following you after you set your account to private. In this case, if there is someone you want to deny access to, you have to remove them from your followers list manually. See the next section on how to do that.
+
+#### Preventing TikTok from suggesting your account
+
+In addition to making your account private, you might want to prevent TikTok from suggesting your account to your contacts and Facebook friends. Without this, even with a private account, your account might appear as a suggested account for others. To disable this feature:
+
+**On the mobile app**:
+
+- Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**. 
+- Tap **Privacy** and then tap **Suggest your account to others**
+- Disable both options
+
+![TikTok Suggesting your account](../../images/TikTok/tiktok_suggest_account.png?raw=true)
+
+#### Limit your content visibility
+
+TikTok offers a Privacy checkup function that you can use to ensure that you are comfortable with the visibility settings of your videos and photos. To do a privacy checkout:
+
+- Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**. 
+- Tap **Privacy** and scroll down to tap **Privacy Checkup**
+- Follow the instructions and select the appropriate visibility for your content
+
+![TikTok Privacy Checkup](../../images/TikTok/tiktok_privacy_checkup.png?raw=true)
+
+#### Block User
+
+This section will take you through the few steps you need to take if you want to block an account on TikTok.
+
+Blocking an account on TikTok will make them unable to find your profile, stories and posts. When you block a profile, they do not get a notification about your action. Blocking an account means you will stop getting notifications from that same account and it also means you cannot follow an account you have blocked. Keep in mind that if your profile is set to public, anyone that you have blocked can find you if they login through another account.
+
+**On the mobile app or on your browser** (procedure is exactly the same):
+
+* Go to the profile you wish to block.
+* Click the share button in the top right corner, select Block and then confirm.
+
+![TikTok block account](../../images/TikTok/tiktok_block_account.png?raw=true)
+
+**On your browser:**
+* Go to the profile you wish to block.
+* Click the three dots button at the top, select Block and then confirm.
+
+#### Reviewing third party apps with access to your data
+
+Over years of using TikTok, you might have given several apps permission to access your data stored on the platform. It's important to have control over who you want having access to your data - this is bigger than just having access to your profile. In this section we will look into how to manage third-party apps' access to your TikTok data.
+
+**On the mobile app:**
+
+* Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**.
+* Click on **Security & permissions** and then **Apps and services permissions.
+* If you see any app that shouldn't be there, tap on it and click **Remove access**.
+
+
+#### Minimising targeted ads on TikTok
+
+ This section shows you how you can minimise the usage of your data for advertising recommendations on TikTok. **Note that the settings are different on mobile and in the browser, with more options available in the browser with regards to the topics used to target ads.**
+
+**On the mobile app:**
+
+ 1. Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**.
+ 2. Scroll down and click on **Ads**.
+
+![TikTok Ads 1](../../images/TikTok/tiktok_ads_1.png?raw=true)
+
+ 3. Turn off **Personalized ads**. You can also clear off-TikTok data which is data that advertisers shared with TikTok
+
+![TikTok Ads 2](../../images/TikTok/tiktok_ads_2.png?raw=true)
+
+
+**On browser:**
+
+1. On TikTok's website, click on the three dots under your profile picture on the left and click on **Settings**. Then click on **Ads** and you'll be able to tick the box for Private Account.
+2. Turn off **Personalized ads**. You can also clear off-TikTok data which is data that advertisers shared with TikTok
+3. Click **Manage ads topics** to remove topics TikTok uses to tailor ads
+
+#### Limit information sharing in the browser
+
+By default, TikTok allows its internal browser to autofill fields with your payment and contact information. This can be abused by malicious actors to capture sensitive information about you. To disable this behaviour:
+
+**On the mobile app:**
+
+ 1. Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**.
+ 2. Scroll down and click on **Security & permissions** and **Browser settings**
+ 3. Disable both options
+
+![TikTok Browser Settings](../../images/TikTok/tiktok_browser_settings.png?raw=true)
+
+#### Good practices
+
+ Updating your settings is important to protect your privacy, but the way you interact with TikTok can also expose a lot about you. In this section we present some simple practices to keep in mind when you are using the app.
+
+* If your account is private, don’t accept follow requests from unknown people.
+* Let people know that you don’t want videos or pictures of you posted without your consent.
+* Don’t post videos of other people without their consent.
+* Don’t post sensitive information in your photos, videos or captions.
+* Don’t reveal your location/make sure the location is not revealed by background details.
+* Don’t use hashtags that may reveal private data (or the location).
+* Be wary when posting videos or photos of your kids on social media.
+* If you log into your TikTok account from other devices (public / shared), make sure you log out every time.
+* Take some time every now and then to review your settings and be wary when granting access to third-party apps.

guide-steps/en/X_guide.md

@@ -0,0 +1,141 @@
+*Currently visible at: https://privacyinternational.org/node/UPDATENODE*
+
+# Title
+Guide on X settings and good practices
+
+# Summary
+This guide covers settings you can tweak on X (formerly Twitter) to have greater control over your data as well as good practices to keep in mind while navigating the platform.
+
+# Body
+
+X can be an important tool for individuals to access information and spread messages and ideas around the globe. For these reasons, it’s not possible for some people to simply stop using it. However, we continue to be very concerned about the company’s conduct.
+
+This guide includes:
+* Two-factor authentication
+* Making your account private (protected posts)
+* Preventing X from suggesting your account
+* Block user
+* Reviewing third party apps with access to your data
+* Minimising targeted ads on X
+* Limit information sharing in the browser
+* Good practices
+
+#### Two-factor authentication
+
+Two-Factor authentication provides an extra security step in order to access your account. This way, besides asking for your username and password, X will verify your identity by sending a unique code to your device.  
+
+This can be done by SMS (text message) or using a dedicated app which we recommend as a more secure solution. Check our [guide on password managers to learn more](https://privacyinternational.org/guide-step/5538/guide-password-managers).  
+
+**On the mobile app:**  
+- Open the left panel by taping your profile picture in the top left corner and scroll down to tap **Settings & Support** and **Settings and privacy**. Tap **Security and account access** and then click **Security**. Finally, tap **Two-factor authentication**.
+![X 2FA 1](../../images/X/x_2fa_1.png?raw=true)
+
+- You can now choose your preferred authentication method and follow the on-screen instructions to set it up:
+![X 2FA 2](../../images/X/x_2fa_2.png?raw=true)
+
+**On your browser:**
+* On X's website click on **More** above your profile picture on the left and click on **Settings and privacy**.  Then click **Security and account access** and select **Security**. Finally, click **Two-factor authentication**.
+* You can now choose your preferred authentication method and follow the on-screen instructions to set it up
+
+#### Making your account private (protected posts)
+
+Making your posts [protected](https://help.x.com/en/safety-and-security/public-and-protected-posts) lets you share your content with a select group of people. Anyone that wants to view your posts needs to send you a follow request and get your approval first. Note that in any case, your name, username and profile photo might be visible to anyone on or off X.
+
+**On the mobile app:**
+
+* Open the left panel by taping your profile picture in the top left corner and scroll down to tap **Settings & Support** and **Settings and privacy**. 
+* Tap **Privacy and safety** and then click **Audience and tagging**. 
+* From here, you can enable the **Protect your post** option.
+
+![X Protected Posts](../../images/X/x_protected_posts.png?raw=true)
+
+**On your browser:**
+
+* On X's website click on **More** above your profile picture on the left and click on **Settings and privacy**. 
+* Click **Privacy and safety** and then click **Audience and tagging**. 
+* From here, you can enable the **Protect your post** option.
+
+It is important to bear in mind that anyone already following you before you make these changes will still be following you after you set your account to private. In this case, if there is someone you want to deny access to, you have to remove them from your followers list manually. See the next section on how to do that.
+
+#### Preventing X from suggesting your account
+
+In addition to making your account private, you might want to prevent X from suggesting your account to people who have your email address or phone number. Without this, even with a private account, your account might appear as a suggested account for others. To disable this feature:
+
+**On the mobile app (more options available)**:
+
+- Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**. 
+- Click **Privacy and safety** and then **Discoverability and contacts**.
+- Disable the **three** options available. You might also want to use the **Remove all contacts** feature
+
+![X Discoverability](../../images/X/x_discoverability.png?raw=true)
+
+**On the browser:**
+
+- On X's website click on **More** above your profile picture on the left and click on **Settings and privacy**. 
+- Click **Privacy and safety** and then **Discoverability and contacts**. 
+- From here, disable the **two** options offered. You might also want to use the **Remove all contacts** feature
+
+
+#### Block User
+
+This section will take you through the few steps you need to take if you want to block an account on X.
+
+Blocking an account on X will make them unable to follow you, interact with your posts or DM you. If your posts are not protected, they will remain visible to them. When you block a profile, they do not get a notification about your action. Blocking an account means you will stop getting notifications from that same account and it also means you cannot follow them. You will still be able to view their posts if you want by visiting their profile. 
+
+**On the mobile app**:
+
+* Go to the profile you wish to block.
+* Click the three dots in the top right corner, select Block and then confirm.
+
+![X Blocking Account](../../images/X/x_blocking_account.png?raw=true)
+
+**On your browser:**
+* Go to the profile you wish to block.
+* Click the three dots button at the top, select Block and then confirm.
+
+#### Reviewing third party apps with access to your data
+
+Over years of using X, you might have given several apps permission to access your data stored on the platform. It's important to have control over who you want having access to your data - this is bigger than just having access to your profile. In this section we will look into how to manage third-party apps' access to your X data.
+
+**On the mobile app:**
+* Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**.
+
+**On the browser:**
+- On X's website click on **More** above your profile picture on the left and click on **Settings and privacy**. 
+
+After that, the steps are similar:
+- Click **Privacy and safety** and then **Security and account access**. 
+- From here, click **Apps and sessions** and **Connected apps**
+- If you see any app that shouldn't be there, tap on it and click **Remove access**.
+#### Minimising targeted ads on X
+
+ This section shows you how you can minimise the usage of your data for advertising recommendations on X. **Note that the settings are different on mobile and in the browser, with more options available in the browser with regards to the topics used to target ads.**
+
+
+ **On the mobile app:**
+* Go to your profile by clicking the bottom right corner icon. Then tap the three stripe icon on the top right and choose **Settings & Privacy**.
+* Click **Privacy and safety** and then **Ads preferences**. 
+- Untick **Personalized ads**
+
+![X Ads](../../images/X/x_ads.png?raw=true)
+
+**On the browser (more options):**
+- On X's website click on **More** above your profile picture on the left and click on **Settings and privacy**. 
+- Click **Privacy and safety** and then **Ads preferences**. 
+- Untick **Personalized ads**
+- You can also remove interests from this screen
+
+#### Good practices
+
+ Updating your settings is important to protect your privacy, but the way you interact with X can also expose a lot about you. In this section we present some simple practices to keep in mind when you are using the app.
+
+- If your posts are protected, don't accept follow requests from unknown people.
+- Let people know that you don't want your picture posted without your consent.
+- Don’t post photos of other people without their consent.
+- Don’t post sensitive information in your photos or captions.
+- Don’t reveal your location/make sure the location is not revealed by background details.
+- Don’t use hashtags that may reveal private data (or the location).
+- Be wary when posting photos of children on social media.
+- If you log into your X account from other devices (public / shared), make sure you log out every time.
+- Take some time every now and then to review your settings, and be wary when granting access to third-party apps.
+