Re: [w3c/manifest] Privacy Review: handle start_url tracking (#399)

It occurred to me that if an application is "installed", and so long as we consider an "installed" application MUST have separate storage than regular web pages, then the problem may be more manageable: once an application is "installed", clearing storage form the browser does not affect the storage of the installed application. 

Also, then navigating the installed web application doesn't affect the storage of the browser: i.e., no cookies are set in the browser.

Further, opening a site in the browser does not open the installed application (hence, the "supercookie" problem doesn't apply to the browser, only to the installed application).   

Like with native applications, the way to clear the storage of an "installed" web applications is to either: 

 1. uninstall it.
 1. use the OS-level storage management to clear its stored data.

2 above would recreate the super-cookie for the installed application via the `start_url` (or even `url` of a shortcut object), but at least it doesn't affect the browser's storage. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/399#issuecomment-633392609