---
title: "updateUserPrivacySetting"
method: POST
path: "/api/privacy"
tags: ["Privacy"]
---

# updateUserPrivacySetting

`POST /api/privacy`

## Request

- Base URL: `/` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/privacy`
- Auth: HTTP bearer

## Request body

- CorePrivacyPojoDtoPrivacyUpdateDTO
  - `ageOpen` boolean
  - `cacheAllow` boolean
  - `enrollmentOpen` boolean
  - `facultyOpen` boolean
  - `hometownOpen` boolean
  - `introductionOpen` boolean
  - `locationOpen` boolean
  - `majorOpen` boolean
  - `robotsIndexAllow` boolean

## Response `200`

Successful HTTP response; legacy business endpoints may return success=false in this envelope, while social endpoints use matching 4xx/5xx statuses

- CommonPojoResultJsonResult
  - `code` integer
  - `errorCode` string
  - `message` string
  - `success` boolean

## Other responses

- `400`: Request validation failure; legacy endpoints may still return HTTP 200 with success=false
- `401`: Missing, expired or invalid bearer token
- `403`: Forbidden or privacy restriction
- `429`: Rate limited
- `500`: Server failure; legacy endpoints may still return HTTP 200 with success=false

## Changes

- **2026-10-06** `880521a9d345`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/gdeiassistant/apis/gdeiassistant-api/changes/api/privacy/post.md)

---

[API](https://skmtc.dev/gdeiassistant/apis/gdeiassistant-api.md) - [All operations](https://skmtc.dev/gdeiassistant/apis/gdeiassistant-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gdeiassistant/apis/gdeiassistant-api/revisions/b3983583c335?raw)