data privacy issue / tracking - personal user name inside generated html reports

I just opened a generated karate-report html-source file and was pretty astonished to find my system login username in there.

(Karate Version 1.3.1, Windows 11)

https://github.com/karatelabs/karate/blob/master/karate-core/src/main/java/com/intuit/karate/report/karate-posthog.html

  loaded: function(posthog) { 
    posthog.identify(/*[[${userUuid}]]*/'',{name:/*[[${userName}]]*/''});

Inside karate-core/src/main/java/com/intuit/karate/FileUtils.java, this user name is determined by a java system property: USER_NAME = System.getProperty("user.name", USER_HOME);

For many people (especially in enterprise it environments) this property will contain their full personal name!

The documentation states that this name will not be sent to posthog, correct? (https://github.com/karatelabs/karate/blob/master/karate-core/src/test/resources/analytics.md) So why is it inside the generated html files?

Furthermore this might cause data privacy issues when uploading the reports to a public location (e.g. for an open source project)

There is another github issue related to this topic: https://github.com/karatelabs/karate/issues/2100 but no answer to this question:

Is there any mechanism to request a copy of the data you've collected or to remove the data you've collected from us?

My suggestions:

please remove the username from the html reports / tracking (or remove the tracking all together)
be transparent about what and how you track (right now it is just briefly mentioned in the section about parallel execution ("Please note that some user analytics is tracked only when you view the built-in Karate HTML report." ) https://github.com/karatelabs/karate#parallel-execution . This should be a top level paragraph

Also note that in some jurisdictions tracking without user consent might be illegal (this includes calling a tracking service with an ip address), so this could cause problems for people publishing the generated html reports.

karatelabs / karate

data privacy issue / tracking - personal user name inside generated html reports #2268