Author: M8R-udfkkf
Description:
The "clicktracking-session" cookie on the en-wiki remains the same before (anonymous), during (logged in), and after logout. This allows the tracking of a user after logout until they have cleared their cookies. It also allows the correlation of logins from "different" users in the same browser session.
The clicktracking-cookie should also be listed in privacy policy:
https://wikimediafoundation.org/wiki/Privacy_policy
For how long is clicktracking data kept and what is its purpose (wikipedia doesn't have advertising...so for whom are the analytics)?
Version: unspecified
Severity: normal