Skip to content

JS tracker should not track anything when the protocol is file:// to avoid tracking personal data by accident #17017

@tsteur

Description

@tsteur

Use case:

Someone downloads a page from your website and stores it locally. Then the user opens it and the user will be tracked and the URL might look like

file:///C:/Users/myname/AppData/Local/...

This way we actually track personal data potentially by accident without knowing.

  • We would always exclude page urls with this protocol by default
  • There should be a method to opt out of this feature so you can track these requests if needed.
  • We create an FAQ to document this behaviour / feature.

As this could be seen as a BC break we need to maybe wait for Matomo 5 for this and/or clearly announce this and warn users of this change.

Metadata

Metadata

Assignees

Labels

c: PrivacyFor issues that impact or improve the privacy.

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions