A customer reports privacy and data handling concerns with online retailer Quince after an order confirmation was sent to an unentered school Outlook address rather than the Gmail address provided...

{
  "signal_id": "11974216-6860-5fa7-a984-3fcb09f0ad59",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-08-30T18:22:30+00:00",
  "company": {
    "name": "Quince",
    "domain": "quince.com"
  },
  "data": {
    "nsfw": false,
    "stage": "none",
    "awards": 0,
    "timing": "completed",
    "topics": [
      "privacy",
      "security",
      "ecommerce"
    ],
    "post_id": "1w2p44f",
    "summary": "A customer reports privacy and data handling concerns with online retailer Quince after an order confirmation was sent to an unentered school Outlook address rather than the Gmail address provided during checkout.",
    "category": "security",
    "comments": [
      {
        "url": "https://www.reddit.com/r/DigitalPrivacy/comments/1w2p44f/comment/p6u8vhw/",
        "depth": 0,
        "score": 2,
        "author": "Redshittt",
        "excerpt": "Forwarding?",
        "posted_at": "2026-08-30T18:30:55.000Z",
        "author_url": "https://www.reddit.com/user/Redshittt/"
      },
      {
        "url": "https://www.reddit.com/r/DigitalPrivacy/comments/1w2p44f/comment/p6u70fs/",
        "depth": 0,
        "score": 1,
        "author": "post-explainer",
        "excerpt": "This post has been removed due to not meeting comment score requirements. OP sent the following text as an explanation why their post fits here:\n\n I believe that this post belongs here because I think my privacy had been breached in some way, as this e-commerce site has possession of an email I did not provide them. I am posting to learn more from more knowledgeable person, and to notify this comm",
        "posted_at": "2026-08-30T18:22:34.000Z",
        "author_url": "https://www.reddit.com/user/post-explainer/"
      },
      {
        "url": "https://www.reddit.com/r/DigitalPrivacy/comments/1w2p44f/comment/p6u7je3/",
        "depth": 0,
        "score": 1,
        "author": "Gynnia",
        "excerpt": "Is the outlook email tied to your payment method? (I assume not but worth asking for clarity.)",
        "posted_at": "2026-08-30T18:24:57.000Z",
        "author_url": "https://www.reddit.com/user/Gynnia/"
      },
      {
        "url": "https://www.reddit.com/r/DigitalPrivacy/comments/1w2p44f/comment/p6ubmok/",
        "depth": 0,
        "score": 1,
        "author": "TheZanyDynamics",
        "excerpt": "that's sketchy as hell, sounds like they grabbed it from some browser session token or cached login from proctorU rather than what you typed in the form",
        "posted_at": "2026-08-30T18:43:22.000Z",
        "author_url": "https://www.reddit.com/user/TheZanyDynamics/"
      }
    ],
    "evidence": [
      "[post] Today, I bought a backpack online from a store called Quince using my Firefox browser. I typed in a gmail address as the contact.",
      "[post] After I checked out and the payment went through, I received the confirmation email not to the Gmail address I gave, but to an outlook email address I ONLY use for school and that was assigned by my institution."
    ],
    "virality": "low",
    "post_date": "2026-08-30T18:22:30.000Z",
    "post_kind": "text",
    "post_text": "I'm pretty spooked after this, and I'm looking to everyone here for some explanation on what happened and maybe some advice for what to do moving forward. In case it's important, I live in Canada and this happened in Canada.\n\nToday, I bought a backpack online from a store called Quince using my Firefox browser. I typed in a gmail address as the contact. Note, there were no autocomplete options for any of my other email addresses in the drop down menu I had to type this in manually. \n\nAfter I checked out and the payment went through, I received the confirmation email not to the Gmail address I gave, but to an outlook email address I ONLY use for school and that was assigned by my institution. This email is for incoming school communications, and to sign up for online exams through a site called \"ProctorU\" \n\nHow did this happen? Now that I remember, I don't think I got the cookies consent banner when I visited the site. Has the company curcumvented privacy requirements or did I give them this address unknowingly? Also, what do I do? How serious is this ? When I contact the company about using the wrong email do I have grounds for making a bigger complaint? \n\nI'm still pretty new to learning about digital privacy, so any perspectives and advice would be appreciated. Thanks everyone.",
    "sentiment": "negative",
    "subreddit": "DigitalPrivacy",
    "event_date": "2026-08",
    "post_title": "Strange incident: confirmation email sent to an address not entered",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/DigitalPrivacy/comments/1w2p44f/strange_incident_confirmation_email_sent_to_an/",
    "entity_role": "vendor",
    "post_author": "the_walls_have_noses",
    "upvote_ratio": 1,
    "mention_count": 1,
    "mention_surge": false,
    "subreddit_url": "https://www.reddit.com/r/DigitalPrivacy/",
    "total_upvotes": 2,
    "comments_total": 0,
    "total_comments": 11,
    "event_date_text": "Today",
    "post_author_url": "https://www.reddit.com/user/the_walls_have_noses/",
    "signal_category": "feedback",
    "comments_included": 4
  }
}

curl https://signals.autobound.ai/v1/signals/11974216-6860-5fa7-a984-3fcb09f0ad59 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"quince.com","limit":20}'