Description
- URL: https://nodejs.org/en
- Browser version: Chrome Version 75.0.3770.100 (Official Build) (64-bit)
- Operating system: Windows
@fhemberger
Interesting how this has not been addressed, as it seems to clearly fit:
This is indeed illegal under European GDPR laws.
Given your quickness to point to GDPR in the recent past, I assume you already know this information but here is the link anyway: https://ec.europa.eu/info/law/law-topic/data-protection_en
I doubt this is GDPR compliant, and the author does not provide a clear justification of why they require such a private information.
GDPR is about providing a choice of consent about data collection.
I think doing analytics shouldn't be that important? Why not just remove it?
Regarding GDPR: From my perspective as an EU citizen (IANAL), the GDPR is covered by federal laws and if an extension violates the GDPR, the author can be sued, no matter whether they are EU citizens themselves or not. And even if they don't violate the GDPR, they still have to adhere to laws with difficult and cumbersome consequences (e.g., Article 15 and Article 17 of the GDPR) which might not be worth the marginal gain from obtaining user data. In this particular case, if email addresses are stored even after a user uninstalls the extension, that might violate Article 89 of the GDPR. Anyway, that is ultimately not our problem, so I am fine with either not recommending any extensions or adding a disclaimer.
Maybe we could all do well by looking into the mirror.