3 ms·

It being common practice doesn't make it okay.

• cordite 7y ago
  To defend against credit card fraud in an automated world, it’s kinda the only thing we got: an automated risk assessment.
  • frei 7y ago
    That's true, but the data collection doesn't have to be this automated. It's a tradeoff for ease-of-use. Everyone used to use Paypal, right? That doesn't track anything on your site in the default flow, but it requires sending the user to paypal.com, where they will have to enter even more information. But at least it doesn't collect mouse movements on all users on non-payment pages.