What does the Google Analytics Opt-out Browser Add-on do?
I recently tried to opt-out of Google Analytics tracking on a website using my secondary browser (no other tracking blocking active) and, expecting to be given a cookie setting, was surprised to be presented with the Google Analytics Opt-out Browser Add-on.
This seems an incredibly strange and heavyweight solution to stop tracking (which should be opt-in, but that's another story). What exactly does this add-on do? Does it introduce further privacy issues?
What exactly does this add-on do?
The browser add-on works by running a function on every web page to set a variable turning Google Analytics scripts into no-ops. The code injected by the extension can vary slightly depending on which browser the extension is written for and is similar to the one below:
/* Copyright 2017 Google Inc. All Rights Reserved. http://tools.google.com/dlpage/gaoptout/intl/en/eula_text.html */
(function() {
var a = document.createElement("script");
a.type = "text/javascript";
a.id = "__gaOptOutExtension";
a.innerText = 'window["_gaUserPrefs"] = { ioo : function() { return true; } }';
document.documentElement.insertBefore(a, document.documentElement.firstChild);
})()
Does it introduce further privacy issues?
According to Giorgio Maone, yes. He states a website could reset the _gaUserPrefs
variable to bypass the opt-out and that the presence of the variable can increase the uniqueness of the user agent's fingerprint.
Note that there is nothing inherently "heavy" about a browser add-on. The one distributed by Google is rather lightweight.