dnt-guide

Can you give a few more details of what you mean? It's true that Do Not Track (DNT) is not a true standard in terms of implementation and intent and different folks mean different things when setting the DNT flag. However, when building DNT for EthicalAds and for Read the Docs, we followed the EFF's implementation guide for DNT[1]. This means a number things including: * We do not store personally identifying information when users are merely browsing a site with our ads. * We rotate our logs in less than 10 days * We do not set cookies on ad requests. We also don't use some non-cookie alternative. Obviously for publishers or advertisers, logging into our backend requires a login cookie. [1]: https://github.com/EFForg/dnt-guide

Props to Medium, because not only does it respect DNT, it pretty rigorously follows the advice about blocking third-party embeds if they don't respect it.[0] Medium is not always on my good side, and I think the site has some problems, but at least somebody working there does really care about privacy, and I regularly notice and appreciate their work. DuckDuckGo as well, but I would have a problem if they didn't respect DNT. Medium is the site where they really didn't have to care, but they did anyway. [0]: https://github.com/EFForg/dnt-guide#a-embedly

- Medium (https://medium.com/.well-known/dnt-policy.txt) - EFF (https://www.eff.org/.well-known/dnt-policy.txt) - Read the Docs (https://readthedocs.org/.well-known/dnt-policy.txt) Sites that implement DNT should respond to either /.well-known/dnt-policy.txt or /.well-known/dnt/ or both. Responding to /.well-known/dnt/ means a site has implemented the W3's Tracking Preference Expression (https://www.w3.org/TR/tracking-dnt/). This doesn't necessarily mean much as there's no agreed standard of what complying with DNT means. However, it typically implies that the site does something different for users with DNT enabled vs. disabled. Responding to /.well-known/dnt-policy.txt is typically stricter and means a site adhere's to the EFF's guidelines (https://github.com/EFForg/dnt-guide) for DNT. This has rules for how long data is retained, which

> I'm sorry, but this is crap. I agree with your sentiment that on by default should be the standard. However, it isn't. The standard is specific and it says it should be off by default. The standard was designed to be completely toothless and the advertising industry still tried to water it down. There's no enforcement mechanism and nothing that says what it means to comply. If you want something with teeth, try the EFF's pseudo-standard for DNT: https://github.com/EFForg/dnt-guide