[gaius]

If you ever see an auto-complete feature on a website, it's probable that that website is logging every keystroke. If you type "thermal detonators" into Google, but never actually click the button, it's still flagged up aboard the Imperial Command Ship.

[Kenji]

I once read an article about facebook even reporting back to the mothership messages that you typed out but did not actually send because you changed your mind. Never forget: The website owns the window you're operating in (if there's JavaScript), not just requests you send by clicking <a> links.