In the theoretical situation you drop anonymization is where this gets troublesome. Here's something even more troubling. Take an 'anonymous' crime reporting s

In the theoretical situation you drop anonymization is where this gets troublesome. Here's something even more troubling. Take an 'anonymous' crime reporting site[1] and put Google Analytics on it. Put it on every single page, even on the page with the forms to submit anonymously. Not bad enough? How about a similar site, only this one aimed at reporting corruption[2] and try the same thing. What could possibly go wrong? Both sites are well aware of the issue and have written me back when I pointed this out. This level of trust in an American ad company is curious. All I can do now is hope that whistle-blowers wanting to report corruption are savvy enough to avoid the web forms. Imagine you are a government worker somewhere and you see evidence of corruption and report it. From the same machine you signed in to GMail with. Now consider that your local government can order Google to secretly hand over tracking data and forbid them from notifying the crime reporting site(s). [1]: https://crimestoppers-uk.org/give-information/give-information-online/ https://crimestoppers-uk.org/give-information/give-informati... [2]: https://forms.theiline.co.uk/integrityline https://forms.theiline.co.uk/integrityline