HN Explorer

Ask HN: Can I download my HN data?

76 points by conroy ↗ HN
Github recently announced the ability to download all your Github data[0]. Facebook, Twitter, Instagram, and Google all offer similar services. Is there a way to do this for my comments, votes, and submissions on HackerNews?

[0] https://blog.github.com/2018-12-19-download-your-data/

29 comments

[ 3.5 ms ] story [ 229 ms ] thread
[deleted]
(comment deleted)
megous
Scrape it? It's in your profile.
hoppelhase
The stuff you can't scrape is the interesting stuff.
sgillen
What stuff can you not scrape?
1337biz
How somebody voted/flagged on posts.
hoppelhase
Sessions, IP addresses and User Angents associated with oneself.
beokop
If you’re in the EU you can refer to the GDPR and request all the data they have on you.
yorwba
Sure you can, but HN is not GDPR-compliant, so you'll just get pointed at the public API.
twtw
How can HN just choose to be noncompliant? Aren't there penalties?

I don't understand the jurisdiction of GDPR very well, but I thought it applied to all EU users.

beokop
It does apply to all EU users and they risk fines if they don’t comply.
mattr47
It does not apply as HN is not in the EU. If an EU citizen does not want their data collected then they can choose not to participate, as the EU has no jurisdiction over HN.
mdekkers
That isn't how the GDPR works. There are many GDPR primers on the web, here is a random one. https://www.recode.net/2018/5/16/17360944/gdpr-us-business-e...
zenexer
The EU claims that's not how it works. Everyone else claims that is how it works. It's highly unlikely that the EU will actually be able to enforce it globally.
mdekkers
It's highly unlikely that the EU will actually be able to enforce it globally

If you want to do business in some way with the EU, or have your business officers visit the EU, then that is how it works. The EU took a leaf out of the USA "global jurisdiction" book.

freehunter
Yeah if Y Combinator chooses to never do business in the EU (considering one of their companies is Afrostream who does business in the EU, this may be up for debate), they may be able to get away with it. My company only targets US citizens and EU citizens would never get any value of any kind in any way at all from my business, so GDPR is not on my radar. But YC might have a harder time making that claim.
james_s_tayler
Only if they get hit with a notice to comply and then they have a grace period in which to comply, so that's how.
zenexer
And if they don't comply, what then? None of the penalties can actually be enforced if they have no presence in Europe, unless the US decides to cooperate, which seems unlikely.
james_s_tayler
Well this is why I always say "there are no rules, only realities".
M2Ys4U
There's a process by which US courts can enforce foreign judgments. I wouldn't be surprised if supervisory authorities apply to do this for intransigent US companies.
merb
you can be noncompliant if you have no jurisdication inside the eu, i.e. if hn has nothing inside the eu where the eu can actually send a fine. also I doubt that the eu would penal hn, because you can delete your username which will impersonate yourself and also hn does not really save that much personal data.
kingnothing
GDPR requests provide 30 days to respond. It's quite possible they have a manual script they can run to grab your data / delete your account, but it isn't exposed via the web.
jaredsohn
As others say, you can get the comments and submissions via the API.

To start with you can try this for the public information: http://hnuser.herokuapp.com/user/conroy/json

I wrote hnuser (http://hnuser.herokuapp.com) a long time ago to show karma over time and haven't looked at in awhile but at first glance it seems to still work. It also exists as an npm package if you want to run it from the commandline.

[dead] StephenMarley
People find it hard to stay committed again. It’s becoming a thing. Getting information & data you need is quite not a big deal. Sometimes the truth needs to be unveiled by whatsoever means necessary.The latter of the case should always be reckoned with, of which it would be known eventually what would be the data at hand afterwards. definitely(BOBHACKER911•(<@>)• GMA;|) would do justice on this intercepting with wares. All will be well.