Skip to content

Privacy Issue with nodejs.org Tracking Statistics and Marketing Without User Consent #2302

Closed
@june07

Description

@june07
  • URL: https://nodejs.org/en
  • Browser version: Chrome Version 75.0.3770.100 (Official Build) (64-bit)
  • Operating system: Windows

@fhemberger
Interesting how this has not been addressed, as it seems to clearly fit:

This is indeed illegal under European GDPR laws.

image
Link to the full report

Given your quickness to point to GDPR in the recent past, I assume you already know this information but here is the link anyway: https://ec.europa.eu/info/law/law-topic/data-protection_en

@ea167

I doubt this is GDPR compliant, and the author does not provide a clear justification of why they require such a private information.

@oncletom

GDPR is about providing a choice of consent about data collection.

@WaleedAshraf

I think doing analytics shouldn't be that important? Why not just remove it?

@tniessen

Regarding GDPR: From my perspective as an EU citizen (IANAL), the GDPR is covered by federal laws and if an extension violates the GDPR, the author can be sued, no matter whether they are EU citizens themselves or not. And even if they don't violate the GDPR, they still have to adhere to laws with difficult and cumbersome consequences (e.g., Article 15 and Article 17 of the GDPR) which might not be worth the marginal gain from obtaining user data. In this particular case, if email addresses are stored even after a user uninstalls the extension, that might violate Article 89 of the GDPR. Anyway, that is ultimately not our problem, so I am fine with either not recommending any extensions or adding a disclaimer.

Maybe we could all do well by looking into the mirror.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions