4 ms·

offer something that is privacy-first analytics ought to be a pixel embed. Why would I trust an external js source that could change introduce security risk?

• prophesi 6y ago
  I'm not too familiar with the technique; doesn't pixel tracking still require JS to derive more info from the visitor beyond just their IP address?
  • shakna 6y ago
    The GET request will generally also include the User Agent, and any forwarded headers. This can include cookies.
    • tomschlick 6y ago
      Yes but that doesn't include things like screen size/ratio or some other key metrics that usability people rely on. I can see the need for JS but it would be nice if they offered a pixel only version with less granularity for those of us who want the data but without JS.
      • shakna 6y ago
        Those things violate the privacy-first principles, do they not? Things like screen size/ratio are very strong fingerprints that can be used to de-anonymise users with ease.
        • deepstack 6y ago
          Exactly! I think most people don't realize the problem of browsing web with JS turned on.
• yencabulator 6y ago
  Their concept of "visit" hinges on seeing the Referer for the original request.