Question 1

Security Exploit Leaderboard

Accepted Answer

||| Our security exploits bug bounty program is currently paused. We do not reward bug reports for now.

Bug Bounty Superheroes

Q: What's Noticeable EU GDPR compliance status?

<p>The <em>European Union General Data Protection Regulation</em> (GDPR) is a regulation that aims at unifying EU member state data privacy regulations into a single regulation, enforced on the EU single market. This article describes the GDPR compliance status of Noticeable.</p> <p>| To ensure your company is GDPR-compliant, it needs to ensure its providers (i.e. Noticeable) are also GDPR compliant. Noticeable is GDPR-compliant, and strictly enforces the regulation as to protect the user data we store. The list of our providers (ie. Data Processors) is available, and kept up to date, in our <a href="/en-us/article/data-processing-agreement-ymr7je/">Data Processing Agreement</a> (DPA).</p> <p>Noticeable data processor providers have been checked to be GDPR-compliant (Cloudflare, Stripe) or certified to the EU-US Privacy Shield Framework (Firebase Authentication, Firebase Hosting, Cloud Firestore for Firebase). </p> <h1 id="noticeableandgdpr">Noticeable and GDPR</h1> <p>The GDPR regulation can be reduced to 12 important points. For each point, we explain how Noticeable handles its compliance. If we did not answer your questions in this article, you can still contact us and drop us a chat or email.</p> <h2 id="1awareness">1. Awareness</h2> <p>All employees responsible for software development &amp; infrastructure maintenance of Noticeable are fully aware of the GDPR requirements.</p> <p>Also, code reviews are performed by the Data Protection Officers (as listed in this article), before any code deployment to the platform. This ensures security breaches and bad practices are not i</p>

Question 2

Security Exploit Bounty Program

Accepted Answer

||| Our security exploits bug bounty program is currently paused. We do not reward bug reports for now.

Responsible Disclosure

Security is of utmost importance to Noticeable. In pursuit of the best possible security for our service, we welcome responsible disclosure of any vulnerability you find in Noticeable. Principles of responsible disclosure include, but are not limited to:

Access or expose only customer data that is your own.
Do not exfiltrate data from our infrastructure (including source code, data backups, configuration files).
If you obtain remote access to our system, report your finding immediately. Do not attempt to pivot to other servers or elevate access.
Avoid scanning techniques that are likely to cause degradation of service to other customers (e.g. by overloading the site). This includes the spamming of contact forms, support emails, etc.
Keep within the guidelines of our Terms of Service.
Keep details of vulnerabilities secret until Noticeable has been notified and had a reasonable amount of time to fix the vulnerability.
In order to be eligible for a bounty, your submission must be accepted as valid by Noticeable. We use the following guidelines to determine the validity of requests and the reward compensation offered.

Reproducibility

Our engineers must be able to reproduce the security flaw from your report. Reports that include clearly written explanations and working code are more

Question 3

Embedded Noticeable Timelines

Accepted Answer

Embeddable Noticeable Timelines

Noticeable Timeline pages can be embedded into a full page of your website, rather than hosting it on a subdomain. For this purpose, we allow serving Timeline content from an iframe.

Here is an example:

BigCommerce Integration Example

|| A Github repository that provides a full integration example, including support for hash-routing, is available at noticeable-app/noticeable-timeline-iframe.

Options

Timelines support options via query string parameters:

cache=false: The content is loaded from Noticeable servers, bypassing caching layers. This ensures data freshness at the cost of higher response times.
footer=false: Hide the Timeline footer.
header=false: Hide the Timeline header.

To apply options, append them to your timeline URL:

https://updates.noticeable.io?footer=false&header=false

Question 4

How to use Noticeable on mobile devices?

Accepted Answer

An easy manner to integrate Noticeable with an Android or iOS app is to use a WebView to open your Noticeable project Timeline. Another solution is to fetch data you need using the GraphQL API we provide. It allows fetching posts with any programming languages.

|| We do not provide an SDK for mobile devices yet.

Noticeable API

Managing Access Tokens

Project owners can manage access tokens from their dashboard:

Consuming the API

The API works with any HTTP clients but for a smooth experience, we recommend Apollo iOS and Apollo Android clients.

| For development purposes, we recommend our Playground instance.

See https://noticeable.io/api/overview for more information (login required).

Query Examples

Noticeable GraphQL query examples are available on Github:

https://github.com/noticeableapp/noticeable-api-samples

Question 5

Posts Segmentation

Accepted Answer

Posts Segmentation

Noticeable allows keeping your users in the loop about your product. Thanks to the Plug & Play Widget, users are notified about new changes in the right context and at the right time. However, what if you schedule a maintenance for your product in France and you want to publish an update to users who are located in this country only? That's where user segmentation comes to the rescue :)

| Segmentation is a seemingly simple but extremely powerful mechanism to filter posts based on your own conditions.

Defining Segments

When you publish a post, you may define segmentation filters (enter a value and press enter):

Then, on the page that includes the Noticeable Widget you simply need to configure the Widget with the desired segments based on information you have.

You can do it statically (multiple segments must be separated with a comma) :

<noticeable-widget 
    access-token="YOUR_ACCESS_TOKEN" 
    project-id="YOUR_PROJECT_ID"
    segments="Country:France"></noticeable-widget>

or dynamically:

document.addEventListener('noticeable-widget-created', function(e) {
    e.target.setSegments(['Country:France']);
});

It's just that easy!

Let's say you publish a post with segment "Country:France" and the Widget on your pages is configured to include segment "Country:France" for user A but not for user

Question 6

What's Noticeable EU GDPR compliance status?

Accepted Answer

The European Union General Data Protection Regulation (GDPR) is a regulation that aims at unifying EU member state data privacy regulations into a single regulation, enforced on the EU single market. This article describes the GDPR compliance status of Noticeable.

| To ensure your company is GDPR-compliant, it needs to ensure its providers (i.e. Noticeable) are also GDPR compliant. Noticeable is GDPR-compliant, and strictly enforces the regulation as to protect the user data we store. The list of our providers (ie. Data Processors) is available, and kept up to date, in our Data Processing Agreement (DPA).

Noticeable data processor providers have been checked to be GDPR-compliant (Cloudflare, Stripe) or certified to the EU-US Privacy Shield Framework (Firebase Authentication, Firebase Hosting, Cloud Firestore for Firebase).

Noticeable and GDPR

The GDPR regulation can be reduced to 12 important points. For each point, we explain how Noticeable handles its compliance. If we did not answer your questions in this article, you can still contact us and drop us a chat or email.

1. Awareness

All employees responsible for software development & infrastructure maintenance of Noticeable are fully aware of the GDPR requirements.

Also, code reviews are performed by the Data Protection Officers (as listed in this article), before any code deployment to the platform. This ensures security breaches and bad practices are not i

Frequently Read Articles

Browse All Categories