"My friend got a call from her friend at Facebook, asking why she kept looking at his profile," says a privacy-conscious source at a major tech company. Turns out Facebook employees can (and do) check out anyone's profile. Not only that, but they also see which profiles a user has viewed — a major privacy violation. If you've been obsessed with a workmate or classmate, Facebook employees know. If Barack Obama's intern has been using the campaign account to troll for hotties, Facebook employees know. Within the company, it's considered a job perk, and employees check this data for fun.

Facebook has a history of protecting profiles from outsiders. The site once sent cease-and-desist letters to two of Valleywag's sister blogs for publishing certain student profiles.

The site does not allow regular users to see which profiles other users have seen. While one third-party application lets users voluntarily make their profile-visiting known, no application allows one to "spy" on the activity of an unknowing user.

Checking who's viewed a profile may be how Facebook found the tipster who violated their terms of service by sending Valleywag Steve Ballmer's profile. But were they violating their own terms?

Well, Facebook's privacy policy doesn't explicitly reserve or waive employees' right to check out your profile for any reason. Of course, the practice still reeks of skunkery — it's one thing to check profiles in the course of business, but these people are looking up records for kicks. This is a company with $150 million in projected revenues this year and a gigantic ad deal with Microsoft, not a corner video store. The privacy of millions is at stake. Google clearly promises not to crawl through mail or search records with anything but a computer program, and even AOL apologized for releasing semi-anonymous search data and violating its privacy policy.

We have no idea what else employees can see. Do they look at your messages? Your private gifts? Who knows? (Really, who knows? Email me or the tipline. Unlike some, we'll protect your identity.)