[w3c/browser-payment-api] Expand Privacy Considerations Section (#228)

This is a recommendation from the Security and Privacy Checklist review. See https://docs.google.com/document/d/1w7ginyzNg-xZUmITK4vzcGUKB4gbMOAvlkWWaRtX14k/edit?usp=sharing for additional detail

The “Privacy Considerations” section of the Payment Request API spec includes a one-sentence treatment of this issue. This should be expanded to address the types of consent (contemporaneous consent versus stored consent), and make it clear that nearly all data exposed through the API is personally identifying.


---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/issues/228