As of April, there is a new Facebook privacy setting called “Instant Personalization” that shares your data with non-Facebook websites. It’s enabled by default. To disable it, go to account > privacy settings > apps. Click websites > instant personalization and de-select allow.
Additionally, here’s an independent and open tool for scanning your Facebook privacy settings.
