chrismuha / chrismuha

website for Muha Computer Repair
https://www.chrismuha.com/
2 stars 0 forks source link

Tracking Issue-Privacy Concern #23

Open muhachris297 opened 8 months ago

muhachris297 commented 8 months ago

@alnabid @hasethakuru

I have a concern for the privacy of those viewing and using the website. The privacy browser I use, DuckDuckGo, is detecting these trackers on the website. I think they are because of the social media links. Is there a way that you can force these trackers to not be used without affecting functionalities of the website? If functionalities will be affected, please specify which ones will be affected.

muhachris297 commented 8 months ago

image

alnabid commented 8 months ago

cdn.jsdelivr.net is a plugin we used for the website, it has to be in there.

Idk about twitter.

Idk why cloudfare is in there too, it would be pretty reasonable if we protected it or hosted it via cloudfare. We'll try blocking these two and see if anything goes wrong, i dont think anything will go wrong.

alnabid commented 8 months ago

Oh, cloudfare is in there so it can track the statistics and performance. Still not sure about the necessity of twitter. Im also a bit suspicious about it having the "advertising" tag.

muhachris297 commented 8 months ago

@alnabid so what can we do about this? You mentioned disabling trackers to see if it affects anything, so please quote me for that here. I will tell you here when I would like to proceed and/or remove the on hold label.

alnabid commented 8 months ago

@alnabid so what can we do about this? You mentioned disabling trackers to see if it affects anything, so please quote me for that here. I will tell you here when I would like to proceed and/or remove the on hold label.

This is a free task. Ill just try doing it.

muhachris297 commented 8 months ago

@alnabid so what can we do about this? You mentioned disabling trackers to see if it affects anything, so please quote me for that here. I will tell you here when I would like to proceed and/or remove the on hold label.

This is a free task. Ill just try doing it.

@alnabid ok, please close this issue if it works and nothing breaks when doing so. Thanks.

hasethakuru commented 8 months ago

The twitter tracker is due to the twitter urls you have linked. Search twitter in the main file

muhachris297 commented 8 months ago

The twitter tracker is due to the twitter urls you have linked. Search twitter in the main file

Ok but will stopping those trackers cause any issues?

hasethakuru commented 8 months ago

No. I think it is caused due to the referral code in the url https://twitter.com/muhachris?ref_src=twsrc%5Etfw

Not sure, just a hunch

muhachris297 commented 8 months ago

No. I think it is caused due to the referral code in the url https://twitter.com/muhachris?ref_src=twsrc%5Etfw

Not sure, just a hunch

so just removing the REF underscore part of the URL will possibly remove these trackers?

hasethakuru commented 8 months ago

Possibly, if thats not the case then its due to https://platform.twitter.com/widgets.js

muhachris297 commented 8 months ago

@hasethakuru please quote me to test those things and I will order it at some point, for now, I am putting the issue on hold.

hasethakuru commented 8 months ago

As Nabid mentioned, this is a free task. We're not charging for it. It's unfair to charge for something as simple as just experimenting and testing.

muhachris297 commented 8 months ago

As Nabid mentioned, this is a free task. We're not charging for it. It's unfair to charge for something as simple as just experimenting and testing.

I appreciate that... I am removing the on hold label. Please begin on this when you are able.

alnabid commented 8 months ago

I have experimented.

The ref in https://twitter.com/muhachris?ref_src=twsrc%5Etfw isnt the problem.

The problem is this line in script section of each document

<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

removing this line removes the trackers.

alnabid commented 8 months ago

Additional information:

Twitter widget is used for embedding twitter posts inside your website. Since you are not using it, it's safe to remove.

muhachris297 commented 8 months ago

I have experimented.

The ref in https://twitter.com/muhachris?ref_src=twsrc%5Etfw isnt the problem.

The problem is this line in script section of each document


<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

removing this line removes the trackers.

Ok for the widgets. Thank you for deleting those.

The link has nothing different for the ref one compared to twitter.com/muhachris so just keep that part of the twitter link in all files. So the link will be https://twitter.com/muhachris

Thanks.

muhachris297 commented 8 months ago

@alnabid What trackers are left after removing the Twitter tracker?

muhachris297 commented 8 months ago

@alnabid I see you have not pushed yet. Please close this issue when you do. image image

alnabid commented 8 months ago

Pushed.

These trackers are showing up for me after doing that: image

Cloudfare is there because we use Jquery. Prospect One is there because we use SwiperJS. Google fonts because we use their fonts. Google ads because of fonts API

and facebook for this line

<script async defer crossorigin="anonymous" src="https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v11.0"
        nonce="y6OzJpbr"></script>
alnabid commented 8 months ago

Just searched up why facebook is there It's because of implementing a "Login with facebook" feature. Is that used?

muhachris297 commented 8 months ago

Just searched up why facebook is there It's because of implementing a "Login with facebook" feature. Is that used?

I think it is used because people have to login to be able to interact with the page. They should not have to login to view it though.

muhachris297 commented 8 months ago

Pushed.

These trackers are showing up for me after doing that: image

Cloudfare is there because we use Jquery. Prospect One is there because we use SwiperJS. Google fonts because we use their fonts. Google ads because of fonts API

and facebook for this line

<script async defer crossorigin="anonymous" src="https://connect.facebook.net/en_US/sdk.js#xfbml=1&version=v11.0"
        nonce="y6OzJpbr"></script>

Ok, the other trackers are necessary then and should not be blocked because they will cause issues in the website, right?

alnabid commented 8 months ago

yes

muhachris297 commented 7 months ago

Commit https://github.com/chrismuha/chrismuha/commit/a315c32fa8e2646771d53934385a56ea4cf9009f adds an image to be used to remove the freed estate winery tracker.

muhachris297 commented 7 months ago

@alnabid please add commit link here for when you update the image for the google reviews to remove the freed estate winery tracker.

muhachris297 commented 7 months ago

@alnabid I think the Prospect One is the freed estate winery tracker. Please correct me if I am wrong but I think that is the only content delivery we are using is the google reviews image from freed estate winery.

alnabid commented 7 months ago

Freedestatewinery was the website we pulled the google review image from, they had it in their server/files so they showed up in the tracker list.

Are they still showing up? if yes, lmk.

alnabid commented 7 months ago

Freedestatewinery was the website we pulled the google review image from, they had it in their server/files so they showed up in the tracker list.

Are they still showing up? if yes, lmk.

muhachris297 commented 7 months ago

@alnabid

Freedestatewinery was the website we pulled the google review image from, they had it in their server/files so they showed up in the tracker list.

Are they still showing up? if yes, lmk.

That one is not, the remaining trackers are third party trackers and Facebook. We discussed all of these previously and there is nothing we can do. Is there a way we can hand code JavaScript to remove that tracker? The remaining tracker after that, is there a way we can hand code anything to remove that tracker too? Screenshot 2024-03-11 at 4 26 20 PM Screenshot 2024-03-11 at 4 26 25 PM

alnabid commented 7 months ago

I and Saif might be able to hand code them, but I also want to clarify the idea of these "trackers"

cloudfare and prospect one are NOT harmful. They are CDN providers. CDNs are what developers use as tools in a everyday basis. They have thousands and thousands of lines in their server that are already coded so it makes life way easier for websites.

cloudfare provides JQuery. JQuery is very popular and used in a very wide community. But I think we can remove JQuery and convert it to vanilla javascript.

For Prospect One, that's the slider/swiper tool. I think we will able to replicate that with help from Saif, but it is a huge tool to build from scratch. Saif will be able to provide you with a quote. I will let him know if you want to proceed.

muhachris297 commented 7 months ago

I and Saif might be able to hand code them, but I also want to clarify the idea of these "trackers"

cloudfare and prospect one are NOT harmful. They are CDN providers. CDNs are what developers use as tools in a everyday basis. They have thousands and thousands of lines in their server that are already coded so it makes life way easier for websites.

cloudfare provides JQuery. JQuery is very popular and used in a very wide community. But I think we can remove JQuery and convert it to vanilla javascript.

For Prospect One, that's the slider/swiper tool. I think we will able to replicate that with help from Saif, but it is a huge tool to build from scratch. Saif will be able to provide you with a quote. I will let him know if you want to proceed.

@alnabid I understand that but having a tracker is concerning to users of a website and may deter them away from the website. Therefore, I want to remove all trackers if possible. @hasethakuru Saif, please provide me a quote privately on our server.

hasethakuru commented 7 months ago

I do not think it's required to build this from scratch, there may be a workaround and i have told nabid to try it. If it does not work, i will give you a quote

muhachris297 commented 7 months ago

I do not think it's required to build this from scratch, there may be a workaround and i have told nabid to try it. If it does not work, i will give you a quote

@hasethakuru ok, thank you. Please keep this updated. Please quote privately on our server.

@alnabid