3 ms·
> 3. They could still use data gathered from sites affiliated with NYT using NYT trackers, if that's something NYT does. No idea if NYT does it. NYT seems to d
by troydavis 6y ago
> 3. They could still use data gathered from sites affiliated with NYT using NYT trackers, if that's something NYT does. No idea if NYT does it.
NYT seems to do this with sites they own like The Wirecutter. Even privacy preferences are controlled by shared infrastructure. For example, thewirecutter.com uses https://purr.nytimes.com/v1/directives https://purr.nytimes.com/v1/directives, which serves this JSON. Presumably the values depend on which regulations you're covered by:
{
"PURR_AcceptableTrackers":
{"value":"controllers"},
"PURR_AcceptableTrackers_v2":
{"value":"processors"},
"PURR_AdConfiguration":
{"value":"full"},
"PURR_AdConfiguration_v2":
{"value":"rdp"},
"PURR_CaliforniaNoticesUI":
{"value":"hide"},
"PURR_DataProcessingConsentUI":
{"value":"hide"},
"PURR_DataProcessingPreferenceUI":
{"value":"hide"},
"PURR_DataSaleOptOutUI":
{"value":"hide"},
"PURR_DataSaleOptOutUI_v2":
{"value":"hide"},
"PURR_EmailMarketingOptInUI":
{"value":"checked"}
}
- munchbunny 6y agoThanks for sharing. It’s interesting to see how they’re implementing it. From the perspective of GDPR at least, I’m pretty sure NYT and its owned sites count as one controller/processor, and I think passes the sniff test for case #2 rather than case #3.