User data not anonymized is sent to analytics server
Medium
N
Nord Security
Submitted None
Team Summary
Official summary from Nord Security
A good report from @martinbydefault. Although we have never received the IDs and they could not be linked with any specific events, we have removed the connection events altogether. While, even prior to the fix, it was impossible to tie the ID with the username or activity, the reporter's concerns were valid and properly addressed.
Actions:
Reported by
martinbydefault
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Privacy Violation