this post was submitted on 10 Dec 2024
39 points (91.5% liked)

Privacy

4330 readers
409 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 1 day ago* (last edited 1 day ago)

After reading the article and the spec, it looks like GPC is another header (like DNT) and a JavaScript variable the client would set. I don't see why this couldn't be used for tracking too.

For HTTP:

A user agent MUST generate a Sec-GPC header... if... gpcAtNavigation is true.

For JavaScript:

The globalPrivacyControl property is available on the navigator object

GPC also looks like a watered down version of DNT. DNT was "do not track," and GPC is "do not sell:

GPC is also not intended to limit a first party’s use of personal information within the first-party context (such as a publisher targeting ads to a user on its website based on that user’s previous activity on that same site).

Emphasis mine