This is horrible and I believe the user should be informed. Personal data in 3rd party referral is only one of the many side effects. If personal data is avail

This is horrible and I believe the user should be informed. Personal data in 3rd party referral is only one of the many side effects. If personal data is available in the URL as query string, chances (very high chances) are that the same data is perfectly visible in clear in the web server logs, and from there only God knows where it's spread, including all the 3rd party services used on the backend side.