3 ms·

Even more concerning is Hotjar.

• Raed667 5y ago
  at least hotjar respects do-not-track settings
  • LeonM 5y ago
    DNT is not the solution though. DNT status is not readable by JS (by design), so DNT cannot be implemented in the client. So all tracking calls are still made over the network. It is then up to the server processing those calls to drop them if the DNT header is present. Thus, there is no way for a user to verify that DNT is actually honored. Hotjar is probably the only one (claiming to be) honoring DNT consistently. Luckily Hotjar is a SaaS where the customer cannot influence this decision. But for all other tracking solutions, whenever marketeers are given the option, they will always choose to ignore DNT.
    • Nextgrid 5y ago
      If DNT is sent when loading the initial page it is totally possible to serve HTML that doesn't include the tracking scripts. If you load your tracking scripts you've already gone against your objective since even the initial HTTP request that loads the tracking library leaks the user's IP address and browser fingerprint back to the tracker. This is not a defense of DNT by the way - it has other problems such as the increased fingerprinting surface, etc.
      • LeonM 5y ago
        You are right, didn't think of that
    • jstanley 5y ago
      > DNT status is not readable by JS (by design), so DNT cannot be implemented in the client. But the JS is served by a server, which can read the DNT header, so why can't it just write different JS based on the content of the header? It can be as simple as writing "let do_not_track = true;" if the header is present.
    • tentacleuno 5y ago
      That's not true. There's Navigator.doNotTrack[0]. It works, but it's deprecated and I'm not sure what the replacement is. [0]: https://developer.mozilla.org/en-US/docs/Web/API/Navigator/doNotTrack https://developer.mozilla.org/en-US/docs/Web/API/Navigator/d...
      • lexicality 5y ago
        It's deprecated because DNT is deprecated since barely anyone respects it