I dont track users, Zajac said.

Not everyone in the military is wanting to be known for being trans.

They might not be out yet.

The high privacy cost of a ‘free’ website

So any time we can protect privacy in that way, we venture to do it.

40% off TNW Conference!

Oracle did not respond to questions about whether data gathered from spartapride.orgs users was included in the exposure.

Disqusdisclosesthose trackers on its own website, but the company wouldnt comment about tracking SPART*As users.

[Read:Are EVs too expensive?

She said she learned a hard lesson: If its free, that doesnt mean its free.

It just means it doesnt cost money.

Instead, it costs your website visitors privacy.

Some load without the website operators explicit knowledgeor disclosure to users.

Website operators may agree to set cookiessmall strings of text that identify youfrom one outside company.

Its called session recording and we found a higher prevalence of it than researchers had documented before.

Its called key logging and its sometimes done as part of session recording.

After we contacted the company, its website stopped sending data to Jornaya.

Some sites privacy policies did not disclose the tracking.

For instance, the Mayo Clinic did not disclose it was using invasive key logging.

After we asked about it, the agency added a new link to aprivacy statementdisclosing the cookies.

He said when his firm scans websites, it often finds trackers the website operators did not know existed.

Theyre just setting up stuff so that people can access information.

It turns it on and youre like, cool, that worked she said.

But you dont realize the implicationsof now there being 30 trackers on your website.

She said whatever data the trackers on Sparta Pride were collecting, the nonprofit was never privy to it.

But nowhere on Disquss website does it explain how to get it, and neither did Saleh.

We do ensure that our publishers have the option to choose to have their data collected, Saleh said.

Some small website operators say they dont have much of a choice in the matter.

Even giving users the ability to search inside a website comes with strings attached.

She said her team ended up building a far worse search function for the site to protect user privacy.

Google Analytics trackers loaded on 69 percent of 80,000 popular websites scanned with Blacklight.

Google Analytics gives website operators insight into how many people visit a website and which pages.

The catch: Google, theworlds largest digital ad seller, also gets the data.

The second most common tracker we found on popular sites: Facebook.

Blacklight found its pixel on a third of popular sites we scanned.

Website operators include the pixel to measure clicks from their ads on Facebooks platforms.

But AddThis isnt a social media company.

Its a marketing company.

AddThissprivacy policydiscloses that the trackers facilitate online behavioral advertising across the online advertising ecosystem.

The company agreed to pay a monetary settlement but did not acknowledge wrongdoing.

None of the states disclosed it in their privacy policies.

Arkansas and Louisiana officials said they used AddThis social share buttons for user convenience.

Both removed the code after The Markup contacted them for comment.

We found it was still sending data to advertising companies until we contacted him.

They all had social share buttons on their sites.

As a result, his site was loading trackers from 10 online advertising companies without his knowledge.

At some point, you just feel uncomfortable looking for information about your own religion or own sexual preferences.

It doesnt really matter if they know your name or not, Borgesius said.

Academic research hasrepeatedly shownthat connecting supposedly anonymous marketing data to a name can be done with relative ease.

Its not good enough to have a website, he said.

When we scanned Domesticshelters.org with Blacklight, we found trackers from 10 companies.

The profiles are filled with data about each visitor, including presumed interests and geographic location.

The ad-targeting categories offered by marketing companies can be surprising.

After this wasreported publicly, the group removed the first category, but the others remain.

Regardless of who wins the auction to show the ad, all bidders are told who visited the site.

They asked the agency to open an inquiry.

FTC officials declined to say whether they have.

The Markup found even some government websites dont disclose tracking, including theU.S.

The SBA did not respond to our requests for comment.

The Mints website has stopped using canvas fingerprinting since we reached out to the agency in late July.

He said it does so for non-ads purposes like measurement, security, integrity, etc.

Its not impossible to build a tracker-free website.

Also, it came with a lot of effort on our part.

Privacy, he added, should be something people can care about without selling a privacy product.

So you like TNW?

Then join our upcomingonline event, TNW2020, you dont want to miss it.

This article wasoriginally published on The Markupand was republished under theCreative Commons Attribution-NonCommercial-NoDerivativeslicense.

Also tagged with