Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Privacy 2024 - Implement CCPA link metric #119

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

bstandaert-wustl
Copy link

@max-ostapenko
Copy link
Contributor

@bstandaert-wustl please move it into privacy chapter custom metric under dist/privacy.js file

@max-ostapenko
Copy link
Contributor

max-ostapenko commented May 19, 2024

Number of the websites that make sense to test for CCPA compliance is quite small compared to the dataset, particularly considering the crawlers run from Virginia, not California.

Could we define the eligible set of sites to optimize it, e.g. using locale, TLD, ..?

@pmeenan
Copy link
Member

pmeenan commented May 19, 2024

FWIW, The crawl runs from most of the US regions of Google Cloud so there's SOME California testing (~1/7 of the crawl) but it's not deterministic and hard to say how IP geolocation works for any of the regions.

@bstandaert-wustl
Copy link
Author

@max-ostapenko From https://petsymposium.org/popets/2022/popets-2022-0030.pdf:

the CCPA applies to all websites doing business in California, regardless of the domicile of their business or the language of their website.

I don't think we have a reasonable way to filter on "doing business in California". Perhaps we could rank sites by monthly traffic and take only the top fraction (since the CCPA has a minimum user threshold).

Copy link

Custom metrics for https://almanac.httparchive.org/en/2022/

WPT test run results: http://webpagetest.httparchive.org/results.php?test=240524_7X_B

Custom metrics for https://ebay.com

WPT test run results: http://webpagetest.httparchive.org/results.php?test=240524_5W_C
Changed custom metrics values:

{
    "_privacy": {
        "privacy_wording_links": [
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "Privacy"
            },
            {
                "keywords": [
                    "Cookies"
                ],
                "text": "Cookies"
            },
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "CA Privacy Notice"
            },
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "Your Privacy Choices"
            }
        ],
        "iab_tcf_v1": {
            "present": false,
            "data": null,
            "compliant_setup": null
        },
        "iab_tcf_v2": {
            "present": false,
            "data": null,
            "compliant_setup": null
        },
        "iab_usp": {
            "present": false,
            "privacy_string": null
        },
        "ads_transparency_spotlight": {
            "present": false,
            "ads_metadata": null
        },
        "document_interestCohort": false,
        "navigator_doNotTrack": true,
        "navigator_globalPrivacyControl": true,
        "document_permissionsPolicy": false,
        "document_featurePolicy": true,
        "referrerPolicy": {
            "entire_document_policy": "unsafe-url",
            "individual_requests": null,
            "link_relations": null
        },
        "media_devices": {
            "navigator_mediaDevices_enumerateDevices": true,
            "navigator_mediaDevices_getUserMedia": false,
            "navigator_mediaDevices_getDisplayMedia": false
        },
        "geolocation": {
            "navigator_geolocation_getCurrentPosition": false,
            "navigator_geolocation_watchPosition": false
        },
        "ccpa_link": {
            "hasCCPALink": true,
            "CCPALinkPhrases": [
                "your privacy choices"
            ]
        }
    }
}
Custom metrics for https://walmart.com

WPT test run results: http://webpagetest.httparchive.org/results.php?test=240524_12_D
Changed custom metrics values:

{
    "_privacy": {
        "privacy_wording_links": [
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "Privacy & Security"
            },
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "Your Privacy Choices"
            },
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "NV Privacy Notice"
            },
            {
                "keywords": [
                    "Privacy"
                ],
                "text": "WA Privacy Notice"
            }
        ],
        "iab_tcf_v1": {
            "present": false,
            "data": null,
            "compliant_setup": null
        },
        "iab_tcf_v2": {
            "present": false,
            "data": null,
            "compliant_setup": null
        },
        "iab_usp": {
            "present": false,
            "privacy_string": null
        },
        "ads_transparency_spotlight": {
            "present": false,
            "ads_metadata": null
        },
        "document_interestCohort": false,
        "navigator_doNotTrack": true,
        "navigator_globalPrivacyControl": false,
        "document_permissionsPolicy": false,
        "document_featurePolicy": true,
        "referrerPolicy": {
            "entire_document_policy": null,
            "individual_requests": [
                {
                    "tagName": "IFRAME",
                    "referrerpolicy": "no-referrer-when-downgrade",
                    "count": 1
                }
            ],
            "link_relations": {
                "A": 12
            }
        },
        "media_devices": {
            "navigator_mediaDevices_enumerateDevices": true,
            "navigator_mediaDevices_getUserMedia": true,
            "navigator_mediaDevices_getDisplayMedia": false
        },
        "geolocation": {
            "navigator_geolocation_getCurrentPosition": false,
            "navigator_geolocation_watchPosition": false
        },
        "ccpa_link": {
            "hasCCPALink": true,
            "CCPALinkPhrases": [
                "your privacy choices"
            ]
        }
    }
}

@bstandaert-wustl
Copy link
Author

Per the discussion in Slack, @UmarIqbal recommends testing this on all sites and framing it as “prevalence of enforcement mechanisms” rather than compliance: https://httparchive.slack.com/archives/C023K97SR8U/p1716560204137519

Are there any other changes you recommend making to this before the deadline?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants