search

Code4SA / medicine-price-registry

An API on the South African Single Exit Price mechanism for medicines
http://mpr.code4sa.org
Apache License 2.0
39 stars 16 forks source link

Privacy issues with linking to 3rd party scripts #25

Open tobykurien opened 9 years ago

tobykurien commented 9 years ago

By linking to google-analytics, for example, you allow Google to track exactly which medicine a specific user (Google can easily tie the request back to a logged in Google user) searched for. It would be best if you didn't link to any 3rd party scripts (CDN's, analytics, etc.).

tobykurien commented 9 years ago

On a related note, the site doesn't work if 3rd party scripts are disabled (e.g. using NoScript plugin). Surely for such a simple site, you don't need a CDN to host your Javascript onClick handler?

adieyal commented 9 years ago

Re:privacy, good point. Need to think about this more carefully. It would be nice to track anonymous usage but this should probably not compromise privacy.

I'll consider creating a noscript version of the site. It's currently JavaScript heavy. Improving usability by allowing noscript node is also a good point though more work than I'm willing to do right now.

Not at all a satisfying solution but you can access the api directly if you want to get the data.

Thanks for the comments. Just saw the issue now which is why I am responding so late.