Shadow profiles refer to a collection of user data, often gathered without explicit permission, by online platforms such as Facebook[2] et Google[3]. First publicly recognized in 2012 following a data breach on Facebook, shadow profiles were found to contain personal information of over six million users. These profiles, not created by the users themselves, were linked to public profiles by Facebook, combining data sets for a fuller picture of a user’s online behavior. This combined information was shared using Facebook’s DYI tool. However, the practice has raised significant concerns related to user vie privée[4] et security[5] on the Internet[6]. Critics argue that it represents an intrusion into personal space, with potential for misuse of information. The subject of shadow profiles is closely related to broader topics of internet privacy[1], communication privacy management theory, and participatory surveillance.
A shadow profile is a collection of information pertaining to an application's users, or even some of its non-users, collected without their consent. The term is most commonly used to describe the manner in which technological companies such as Facebook collect information related to people who did not willingly provide it to them.