search

docusealco / docuseal

Open source DocuSign alternative. Create, fill, and sign digital documents ✍️
https://www.docuseal.co
GNU Affero General Public License v3.0
5.61k stars 371 forks source link

Variable "submitter.link" contains a tracker #231

Closed juergenbarth closed 3 months ago

juergenbarth commented 3 months ago

Hi,

I found this interesting behaviour while testing:

Once the variable

{{submitter.link}}

is expanded in the e-mail, it contains a tracker in the form of

https://https://4twxcshy.r.eu-west-1.awstrack.me/L0/https:%2F%2Fexample.com%2Fs%2FyZtvDiJYejGz4y%3Ft=eVp0dk/1/0102018e332bd17c-355710ef-fa6b-4916-8a3d-1a8ee157a20e-000000/PErJE3YyCDoKFnKcYTlr4bfq9vo=365

Could you please explain which data is collected, where it is used and for which purpose? How can the be turned off?

Thanks!

omohokcoj commented 3 months ago

@juergenbarth docuseal does not track self-hosted app links and does not collect/send any data outside of your self-hosted app - the link you shared is from AWS SES (the email service you're using when selfhosting). You can disable it on AWS SES: https://stackoverflow.com/questions/59044099/stop-ses-from-adding-awstrack-me-to-all-my-email-links