The server checks if the viewing account is on the target's approved friends list before sending data to the browser.