I used to work for an airfare marketing company. We would get our 3rd party scripts onto an airlines booking engine to be able to run our own analytics and gath

I used to work for an airfare marketing company. We would get our 3rd party scripts onto an airlines booking engine to be able to run our own analytics and gather data for ads. We'd mainly collect things like prices, number of available seats, etc, because it turns out airlines can't really give you those answers through an API without it costing too much, so we piggybacked on real customer searches. Almost no one in the office ran adblockers, which was weird to me. When our analytics traffic dropped by like 50% one day, I was the only one to notice that our domain made it onto EasyList. I created a GH issue about it, had a productive chat with a maintainer about what data we collected, and which data they thought was PII. If we wanted our domain unblocked we could remove the PII data from the requests, or create a secondary domain that only received the non-PII data. We were gathering data that was not legally considered PII by something like GDPR, but I understand why an adblocker would be even more strict than the legal minimums. I brought this up with the executives and instead they tried to threaten the maintainers of the block list and tried to educate them on how "technically this isn't personally identifiable data according to this legal spec". The maintainers stopped responding (rightfully so) and our data collection was forever halved.