Hacker News new | ask | show | jobs
by 1vuio0pswjnm7 875 days ago
"It was always clear that websites [including Google] could track you in Incognito mode."

These users thought differently.

https://ia801705.us.archive.org/7/items/gov.uscourts.cand.36...

Google was being sued over this surreptitious data collection while in so-called "Incognito Mode". When it tried to have the case dismissed, it failed. (Judge Koh) Then it moved for summary judgment. That failed, too. (Judge Gonzalez-Rogers, who some may recognise form the Epic v Apple case). So just as we were getting ready to let a jury decide whether Google is at fault, Google pays off the plaintiffs' counsel. Why are these so-called "tech" companies willing pay anyone and everyone to prevent precedent from being created. Surely the precedent would work to protect them in the future, right? These meritless lawsuits over privacy would be nipped in the bud.

But Google will almost invariably stop these cases from going to trial by paying out settlements. Will we ever see Google go to trial for alleged wiretapping. No. But that's not because the cases get dismissed or because Google wins on summary judgment. Quite the opposite.

There were seven counts in this case. Google's request for summary judgment was denied on every single one. Even the usual defence of no injury-in-fact, e.g., no user lost money as a result of the surveillance, failed. "Tech" workers want to keep on pretending that every other person using a computer is an easily manipulated, ignorant fool. Good luck.

https://ia601705.us.archive.org/7/items/gov.uscourts.cand.36...

Here is what the court said about consent.

"The analysis starts with the Privacy Policy17 wherein Google advises at the outset and in bold, larger print:

When you use our services, youre trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control. (12/15/22 Google Privacy Policy.)

Immediately after, Google advises:

This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update manage, export, and delete your information.

...

We build a range of services that help millions of people daily to explore and interact with the world in new ways. Our services include:

Google apps, sites, and devices, like Search, YouTube, and Google Home Platforms like the Chrome browser and Android operating system Products that are integrated into third-party apps and sites, like ads and embedded Google Maps (Id.)

Notably, Incognito mode is not mentioned in this list of services. (Id.) Rather, Google shifts and in the next paragraph advises users: You can use our services in a variety of ways to manage your privacy. . . You can also choose to browse the web in a private mode, like Chrome Incognito mode. And across our services, you can adjust your privacy settings to control what we collect and how your information is used.18 (Id.) That is the only mention made of the privacy mode. The Privacy Policy is silent as to any data collection specific to private browsing mode. The Court rejects Googles argument that the Privacy Policy unambiguously discloses the at-issue data collection. The silence noted above combined with Googles surrounding statements regarding what it means to browse privately, means that a material dispute of fact remains regarding the scope of users consent. For instance, the way Google presents Incognito mode could be read to contradict its suggested interpretation of the Privacy Policy. When users first open Chrome, they are greeted by a bright, white screen and the colorful Google logo. When users navigate to Incognito mode, the screen goes from white to black, all text is rendered in gray, and users are met with a spy guy icon. (PAF 9.) They are told they have now gone Incognito, which, Google explains on the next line, means that they can browse privately, and other people who use this device wont see your activity. (PAF 30.) Plaintiffs have evidence to show that, internally, Google understood that the framing of the feature as Incognito (or, for other browsers, Private) made users overestimate privacy mode protections, including that Incognito hides browsing activity from Google. (Dkt. No. 924-36, Ex. 80; Dkt. No. 924-48, Ex. 44.)

Googles arguments otherwise do not change the result. Its reliance on this Courts finding in Calhoun is misplaced. That case did not involve Incognito mode. See Calhoun, 2022 WL 18107184, at *10. The reasoning therefore does not extend here. Next, Google argues that to obtain consent effectively, companies should not have to enumerate every mode, setting, or circumstance impactingor not impactingthat data collection. See Smith v. Facebook, Inc., 745 Fed. Appx 8, 9 (9th Cir. Dec. 6, 2018) (holding that Facebooks tracking of publicly available health data fell within the scope of users general consent to its data tracking and collection practices). It is true that such enumeration is not always necessary. The fundamental issue, however, returns to actual consent. Google chose both to use a general disclosure and yet promote the privacy afforded by Incognito over regular mode. Having made that distinction, Google itself created a situation where there is a dispute as to whether users consent of Googles data collection generally is substantially the same as their consent to the collection of their private browsing data in particular. See Restatement (Second) of Torts 892A (1979) 2(b), 4.

For those reasons, the Court DENIES Googles motion for summary judgment on the grounds of express consent."