disconnectme / disconnect-tracking-protection

Canonical repository for the Disconnect services file
Other
645 stars 218 forks source link

Please consider removing WeatherWidget.io #268

Closed TheoL closed 3 years ago

TheoL commented 3 years ago

Hello,

I am the developer of WeatherWidget.io and I have noticed that my service was classified as "Analytics" and "FingerprintingInvasive":

https://github.com/disconnectme/disconnect-tracking-protection/blob/master/descriptions.md#WeatherWidget

The reason given is a file which is added by the Cloudflare CDN to all the websites that use it, specifically "/cdn-cgi/bm/cv/2172558837/api.js".

That file is used by CloudFlare for their "Bot Fight Mode", a feature which is not used by WeatherWidget.io, and as result while that file exists in the path, it is always blank.

CloudFlare is used by a great number of websites, and that file exists in all of them (usually blank, like in our case). Here are a few popular websites as an example:

https://codepen.io/cdn-cgi/bm/cv/2172558837/api.js https://gitlab.com/cdn-cgi/bm/cv/2172558837/api.js https://medium.com/cdn-cgi/bm/cv/2172558837/api.js https://nodejs.org/cdn-cgi/bm/cv/2172558837/api.js https://www.nginx.com/cdn-cgi/bm/cv/2172558837/api.js https://jquery.com/cdn-cgi/bm/cv/2172558837/api.js https://digitalocean.com/cdn-cgi/bm/cv/2172558837/api.js https://www.shopify.com/cdn-cgi/bm/cv/2172558837/api.js https://www.udemy.com/cdn-cgi/bm/cv/2172558837/api.js

And many, many more.

I would therefore request to please remove WeatherWidget.io from your list, since this is just a path that exists under all websites which use Cloudflare, over which Cloudflare users have no control, and and in our case it is always just a blank file.

Thank you