- From: Jonathan Mayer <jmayer@stanford.edu>
- Date: Wed, 26 Jun 2013 06:07:42 -0700
- To: "public-tracking@w3.org Group WG" <public-tracking@w3.org>
- Message-ID: <E0907193C2D94B3D8A530DB5435B5B9C@gmail.com>
I would propose adding the following definition of protocol information: > Protocol information includes: > any information that a user agent necessarily shares with a web server when it communicates with the web server (e.g. IP address and User-Agent), and > the URL of the top-level page, communicated via a Referer header or other means, unless the URL contains information that is not unlinkable (e.g. a username or user ID). > > > Protocol information does not include: > any information that a web server could cause to not be sent but still communicate with the user agent (e.g. a cookie or a Request-URI parameter generated by the user agent), except the URL of the top-level page, and > any data added by a network intermediary that the operator of a web server has actual knowledge of (e.g. a unique device identifier HTTP header). > > > And allowing short-term retention and use for any purpose: > A third party may receive and use protocol information for any purpose, subject to a two-week retention period. Including contextual advertising: > Under the general rule on protocol information a third party may temporarily use a top-level page URL for the purpose of contextually personalizing content.
Received on Wednesday, 26 June 2013 13:08:17 UTC