Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My website (not canvas app) uses facebook as it's membership system. It stores the user's facebook uid (with their permission). This info is never shared with anyone and the privacy policy specifically details how their facebook info is used.

Here's "the grey area" for me. Linking to a user's profile picture looks like this: http://graph.facebook.com/[uid]/picture?type=small.

I use this code to show the user's profile pictur, at several places throughout the site (where the content was submitted by that user). Anyone viewing the site can see their profile picture.

As far as I can tell from reading the docs, as long as I'm not sharing uid's with third parties my website is appropriately using their uid's.

This scenario sounds common to me, but I want to make sure it's ok for me to use uid's like this.

share|improve this question

To be honest, if you aren't sure if you are in violation or not the best thing to do would be to contact Facebook directly.

If you have confirmation directly from Facebook then you are in a pretty good position should anyone wish to complain or contend your privacy procedures.

share|improve this answer
You're right. So I went to their forums and the docs were right. It's ok to do this, at least at this time. – Chad Feb 2 '11 at 3:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.