Hacker News new | ask | show | jobs
by asuffield 4092 days ago
(Tedious disclaimer: my opinion, not my employers. Not representing anybody else. I work at Google, not on chrome)

Google does not "track the full browsing experience of chrome users". Please read the privacy policy which is very clear on this subject: https://www.google.com/chrome/browser/privacy/

I particularly draw your attention to this paragraph: "If you use Chrome to access other Google services, such as using the search engine on the Google homepage or checking Gmail, the fact that you are using Chrome does not cause Google to receive any special or additional personally identifying information about you."

3 comments

Maybe i'm reading this wrong, but this sounds like Google gets your browsing history:

"If you sign in to Chrome browser, Chrome OS or an Android device that includes Chrome as a preinstalled application with your Google Account, this will enable the synchronization feature. Google will store certain information, such as HISTORY, bookmarked URLs as well as an image and a sample of text from the bookmarked page, passwords and other settings, on Google's servers "

And this isn't that far from full browsing behavior.And that's from a few minutes reading this page - we don't know if they track deeper details - like how long the page was open.

Also - Google doesn't have to collect this data. The claimed purpose of this is that you could share history on multiple devices. But this can also be achieved by sending encrypted history to Google and decrypting the history on each device you use(i think browser extensions with similar functions implement this in that way). So it's clear the purpose here is collecting data.

How is this feature any different from the Firefox, IE, and Safari browser sync services?

The fact that Google synchronizes data between browsers does not necessarily mean their search application has access to it as a ranking signal.

Notice that this is a feature you have to turn on (try it!). Obviously in order to perform cross-device synchronisation, it's necessary to send this information.

I'm not free to discuss the details of how these systems work, but consider this: if both the statements "Google will store this information" and "the fact that you are using Chrome does not cause Google to receive any special or additional personally identifying information about you" are hard requirements, how would you implement this feature?

Of course "the fact that you are using Chrome does not cause Google to receive any special or additional personally identifying information about you." could be true.

But Agreeing to sign to the history sync feature is something different , not covered by "using Google Chrome".So now Google is free to use your history.

And let's be realistic here. Most people don't think about the implications of login into Google(even if it says sync of bookmarks , history etc) and probably don't read the instructions. Many even don't understand what it means. And realistically most people see a Google login box which they filled a million times, and fill it once more, as a sort of a pavlovian response.

>> Notice that this is a feature you have to turn on (try it!)

This isn't true , according to this post in google product forums(and others like it who complain about unwanted sharing and how stop it) :

https://productforums.google.com/forum/#!topic/chrome/hOk8r9...

And personally i've tried it , and that's false - the default is history sharing.

I don't want to be rude, but are you some kind of a troll, or just enjoying spreading lies ?

The answer given there is simply not correct. Click: settings, advanced sync settings, uncheck "history".

I am quite confident that the default behaviour when you install chrome is that you are not signed in. It definitely doesn't share any history when you're not signed in. It wouldn't make a lot of sense to have a login box otherwise ;)

I also feel that the message you get when you decide whether or not to sign in to chrome makes the purpose of this feature quite clear: "Sign in to get your bookmarks, history and settings on all your devices." Here's the detailed page it links to: https://www.google.com/intl/en_uk/chrome/browser/signin.html

I'm not sure what behaviour you were expecting, can you clarify?

Fresh install of Chrome. https://i.imgur.com/4ZyuSNN.png Notice how little "No thanks" and "Choose what to sync are". Nice anti-pattern.

And if you simply sign in and don't choose anything, this is what you get https://i.imgur.com/XQSxwu5.png

That all seems clear and reasonable to me. I double checked the size of 'No thanks' and 'Choose what to sync' in the chrome dev tools: they are 13px, which is exactly the same size as 'Sign in' and 'Need help'. Signing in without making a specific selection gives you what the third line on the screen said it would do.

What, if anything, is wrong with this?

Notice that this is a feature you have to turn on (try it!).

Can you use an Android phone without this? AFAIK that's essentially impossible without very deep technical knowledge.

Yes, you can. If you use a clean Nexus build then last time I tried it, the behaviour was that the first time I opened Chrome it asked me if I wanted to sign in to chrome to share my history and bookmarks between devices, and I had a simple yes/no choice. I don't think this needed any deep technical knowledge.

I'm not intimately familiar with the android chrome settings UI, so I apologise if I've missed an easier way, but in about 30 seconds of tapping I found the button to turn it off: main settings page, accounts, my google account, sync, uncheck chrome.

The Google chrome omnibox is a keylogger that transmits all requests to Google. And the "prediction/auto suggest" and "phishing and malware" features allow Google to track all URLs visited by Chrome users. The "usage statistics" feature collects even more data. Normally, for a company that ships internet software, many of these features would be considered harmless, even beneficial. But for advertising companies like Google, who make their money by vacuuming up users data and allowing other companies to bid on their profiles, I think its almost impossible to trust you guys.

Also, FYI, the privacy policy is irrelevant. It only stats what a company might or might not do. The Terms of Service is the real deal - legally speaking - which of course Google can and does modify at their will, anytime they want to collect more data.

----------

"When you upload, submit, store, send or receive content to or through our Servicesǂ, you give Google (and those we work with) a worldwide license to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations or other changes we make so that your content works better with our Services), communicate, publish, publicly perform, publicly display and distribute such content. "

"This license continues even if you stop using our Services (for example, for a business listing you have added to Google Maps). "

http://www.google.com/intl/en/policies/terms/

https://www.google.com/chrome/browser/privacy/eula_text.html

ǂYour use of Google’s products, software, services and web sites (referred to collectively as the “Services”

That's specifically limited to Google services. It says nothing whatsoever about the rest of the internet!

Also note that for Google services there's no point in collecting that data because Google already has it.