> It would be nice to see this post describe whether and how they audited what information is collected and why. We try to push reasonable defaults where possi

> It would be nice to see this post describe whether and how they audited what information is collected and why. We try to push reasonable defaults where possible, and our optional telemetry only consists of encountered hostnames which should generally prevent PII leaks. Outside of our optional hostname telemetry, we do not collect any tracker data from customer sites for ourselves. > What's to stop airgap.js leaking my data, either deliberately or accidentally? Deliberately: Contracts / legal agreements Accidentally: Airgap.js regulates itself and do not special-case any connections originating from our own library, so our own data emissions are regulated by airgap.js like any other emission. > How do I disable it before it starts collecting? As a site owner, you can easily disable the quarantine and replay features for your visitors. We may expose a way in the future for site visitors to signal to our consent manager that they don't want quarantine + replay. For now, you can send an opt-out consent signal automatically with GPC (Global Privacy Control, implemented by Brave)