Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ppa-experiment] what happens on opt-out? #11

Open
bernardpaulus opened this issue Jul 13, 2024 · 4 comments
Open

[ppa-experiment] what happens on opt-out? #11

bernardpaulus opened this issue Jul 13, 2024 · 4 comments
Assignees

Comments

@bernardpaulus
Copy link

bernardpaulus commented Jul 13, 2024

Hello,

Could you describe in more details what happens if we opt-out, and what methods could the site use to know that we opted out?

More precisely, what are the return values of

navigator.privateAttribution.saveImpression(...)

and

navigator.privateAttribution.measureConversion(...)

when opted out versus the default (enabled)? Is there any exception thrown?

Also, how are opted-out users protected against being detected?

@martinthomson
Copy link
Member

The API appears to function fully when someone is opted out, but no private information is released. That is, saveImpression appears to save something (but saves nothing), and measureConversion generates a measurement message that contains all zero values. From the perspective of the sites involved, things appear to be exactly the same as someone who has the feature enabled.

Our explainer should really cover this, but it doesn't, so I'll use this issue to track the addition of the above explanation to the explainer.

@OdinVex
Copy link

OdinVex commented Jul 15, 2024

The API appears to function fully when someone is opted out

Where is an option to disable this API plagueware to begin with?

@rugk
Copy link

rugk commented Jul 16, 2024

Where is an option to disable this API plagueware to begin with?

This obviously would make you trackable as you are 1 of 1mio or so users where the API, say, returns an exception or does not exist (while e.g. in the browser version it should exist) etc. So not a good idea…

The "noop" approach is indeed a good one when disabled.

@OdinVex
This comment was marked as a violation of GitHub Acceptable Use Policies
@tantek tantek changed the title what happens on opt-out? [ppa-experiment] what happens on opt-out? Jul 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants