Live data from Hacker News

Google tracks individual users per Chrome installation ID

github.com

1–10 of 642 posts

Re: Google tracks individual users per Chrome installation ID

#4
Not endorsing this, but according to https://www.google.com/chrome/privacy/whitepaper.html#variat...

> We want to build features that users want, so a subset of users may get a sneak peek at new functionality being tested before it’s launched to the world at large. A list of field trials that are currently active on your installation of Chrome will be included in all requests sent to Google. This Chrome-Variations header (X-Client-Data) will not contain any personally identifiable information, and will only describe the state of the installation of Chrome itself, including active variations, as well as server-side experiments that may affect the installation.

> The variations active for a given installation are determined by a seed number which is randomly selected on first run. If usage statistics and crash reports are disabled, this number is chosen between 0 and 7999 (13 bits of entropy). If you would like to reset your variations seed, run Chrome with the command line flag “--reset-variation-state”. Experiments may be further limited by country (determined by your IP address), operating system, Chrome version and other parameters.

Re: Google tracks individual users per Chrome installation ID

#5
According to https://www.google.com/chrome/privacy/whitepaper.html

"We want to build features that users want, so a subset of users may get a sneak peek at new functionality being tested before it’s launched to the world at large. A list of field trials that are currently active on your installation of Chrome will be included in all requests sent to Google. This Chrome-Variations header (X-Client-Data) will not contain any personally identifiable information, and will only describe the state of the installation of Chrome itself, including active variations, as well as server-side experiments that may affect the installation."

While this header may not contain personally identifiable information, its presence will make every request by this user far more unique and thus easier to track. I do not see Google saying they won't use it to improve their tracking of people.

Re: Google tracks individual users per Chrome installation ID

#6
Doubtlessly, this will be rationalized and justified as being necessary for, and in the best interest of, consumers...

...but inevitably, it will be used for tracking -- regardless of intent.

It might also get Google in trouble. Copying and pasting from the a comment in the OP's URL:

> Example: https://www.youtube.com - in network headers, look for x-client-data

> Now, go to https://ad.doubleclick.net/abc - and your browser also sends this magic x-client-data.

> It's a unique ID to track a specific Chrome instance across all Google properties.

> Really curious about your opinion, especially after the GDPR explicitly forbidding such tracking. Moreover, it doesn't make sense to anonymise user-agent if you have such backdoor.

Re: Google tracks individual users per Chrome installation ID

#7
>It's a unique ID to track a specific Chrome instance across all Google properties.

>Really curious about your opinion, especially after the GDPR explicitly forbidding such tracking.

>Moreover, it doesn't make sense to anonymise user-agent if you have such backdoor

Oh, but it does make sense because with this everyone _but_ google will have a harder time tracking people :\

Re: Google tracks individual users per Chrome installation ID

#9
So, an extremely unique identifier for tracking purposes, that effectively no one knows exists, and no one knows can be changed at all?

With an obscure white paper that allows Google to claim they comply with the law because "they totally offer a way to change that and they even published that information to the web for anyone to find"?

Gotcha.

Re: Google tracks individual users per Chrome installation ID

#10
This is another instance that google doesn’t care about users privacy and track without their consent by using chrome installation Id. This probably might be against GDPR, so Chrome installed base in Europe multiplied by per day fine, hopefully runs into a years revenue of google.

Another lesson don’t trust for profit companies with privacy protection especially advertising technology company like google with motto like don’t be evil or organize world’s information designed to mislead.

Post reply on HN