ReviewOS

stacks/ts-analytics

Live tracking scripts never honor Do Not Track (and no GPC)

#142
Closed glennmichael123 opened this 9 days ago ·
9 days ago

Severity: High · Where: views.ts:336-337,375-383; guard Analytics.ts:3246, tracking-script.ts:887 handleScript calls the generators without honorDnt, so the DNT guard never emits. config.privacy.honorDnt defaults true and docs promise it (regression vs stacks-integration.ts which threads it). No GPC (navigator.globalPrivacyControl/Sec-GPC) anywhere. Fix: Thread honorDnt into handleScript; add GPC checks.

Sign in to comment on this issue.