Question regarding Cloudflare Insights and Cloudflare Analytics/RUM and GlobalPrivacyControl/DNT.
When a user has a GlobalPrivacyControl or DNT(DoNotTrack) header set, what happens and how does the tracking backend react?
Does it respect the headers regardless of where the connection is from?
How does it handle it?
Is there a way I could set my site to always respect GlobalPrivacyControl and DNT(DoNotTrack) headers regardless of jurisdiction? (even when it doesn't technically have to, assuming it doesn't already)
9 Replies
Normal websites do not track the user's camera and microphone, but suspicious and dangerous websites do. You'll not go to these suspicious and hazardous websites for your security.
...........
expect recent windows releases
windows 10, 11 and 12
Cloudflare Docs
Types of analytics | Cloudflare Analytics docs
Cloudflare Analytics is a comprehensive product that encompasses all metadata generated by the Cloudflare network. You can access these insights through the Cloudflare dashboard. Depending on where in the dashboard you are, it will show you different aspects from the collected metadata.
configuration rules allow you to disable rum, but im not sure if they support Headers in their request rules
but as far as I can tell, do not track is deprecated in favor of global privacy control
im aware, thats why i included it in the original message
But how accurate is that really?
Claims != Truth
I mean, Duckduckgo said they dont track user data, then this happened...
https://techcrunch.com/2022/05/24/ddg-microsoft-tracking-blocking-limit/
https://x.com/thezedwards/status/1528808759027331072
(full transparency they did remove the hole 3 months after it was announced)
https://techcrunch.com/2022/08/05/duckduckgo-microsoft-tracking-scripts/
Natasha Lomas
TechCrunch
DDG confirms tracker blocking limit linked to Msft contract
DuckDuckGo, the self-styled "internet privacy company" -- which, for years, has built a brand around a claim of non-tracking web search and, more
Zach Edwards (@thezedwards) on X
Sometimes you find something so disturbing during an audit, you've gotta check/recheck because you assume that *something* must be broken in the test.
But I'm confident now.
The new @DuckDuckGo browsers for iOS/Android don't block Microsoft data flows, for LinkedIn or Bing.🧵
Twitter
Natasha Lomas
TechCrunch
DuckDuckGo removes carve-out for Microsoft tracking scripts
DDG claims this third-party tracker loading protection is not offered by most other popular browsers by default.