[mattkevan]

It’s one thing to track how users are using forms and seeing where they drop out, for example on a checkout. It’s another thing entirely to save the data from those fields.

Collecting personally identifying information without explicit consent seems like a great way to get into trouble. Implied consent is no consent at all.