Uncovering the Disqus data machine pt.2: This figure shows the difference between the regular European experience of using a site with @disqus and the American one. (LONG THREAD) 
My reporting on @disqus started with a tip - the consulting company @conzentio thought it was weird that the comment section widget from Disqus could share so much data. They had a fair point, and it turned out that it breached the #GDPR
The chart is actually lying - @LiveRamp refuses to receive data from Norwegians (451 status code) - so far fewer companies receive private information.
One might say that LiveRamp boosts the data sharing between companies. (They have not responded to my request for comment)
One might say that LiveRamp boosts the data sharing between companies. (They have not responded to my request for comment)
Why doesn’t this excessive sharing happen in Europe? We have to opt in – not only the websites decide which third-parties could collect our data:
(If you want to better protect yourself you can use a browser like Safari / Firefox - and plugins like @PrivacyBadger and @HTTPSEverywhere to block third-party tracking.)
We also have far stronger rights for:
1) Information abt processing
1) Access of data
2) Erasure of data
As a journalist that is extremely helpful - I can ask a company: How is the data collection lawful?
1) Information abt processing
1) Access of data
2) Erasure of data
As a journalist that is extremely helpful - I can ask a company: How is the data collection lawful?
Back to the chart: I have pored over HTTP requests and been explained multiple times about third-party cookies, cookie syncing, which company owns which ones, etc. It is hard figuring out who has my data, on what grounds, and why. Visualizations help:
Several companies have not responded to my request. Others that they are data processors - they just have a client that participate in this sharing. @AppNexus (now Xandr)
"Xandr takes privacy seriously and, in jurisdictions that have implemented consent requirements for device storage and access, requires websites to obtain user consent for using cookies, including obtaining consent [...] prior to using any of our cookie-based services."
I see that some Americans say, "doesn't everybody do this?" The answer is: Only in America.
Does it really matter? I don't know. But is it not weird that a lot of companies know who's visiting far-right websites?
h/t @EJGibney (@BreitbartNews, @DailyCaller, @gatewaypundit ++)
Does it really matter? I don't know. But is it not weird that a lot of companies know who's visiting far-right websites?
h/t @EJGibney (@BreitbartNews, @DailyCaller, @gatewaypundit ++)
If you liked this thread - read pt.1 - it goes deep in how millions are tracked without them, or the websites participating, knowing
More responses:
"We cannot discuss individual contracts with our partners due to the terms of some of those relationships. Nevertheless we are committed to complying with all applicable laws and ensuring that our partners in this space do the same," said Captify
"We cannot discuss individual contracts with our partners due to the terms of some of those relationships. Nevertheless we are committed to complying with all applicable laws and ensuring that our partners in this space do the same," said Captify
"LinkedIn always looks to provide our members clarity, consistency and control over how we collect and use their personal data," says @LinkedIn that owns Drawbridge
Clarification: Pre mid-December Disqus did not know Norway had GDPR. They were therefore treated like Americans by Disqus with data sharing as default. Liveramp did not accept data, but others did.
