I wasn't aware that Android doesn't use OHTTP even when that flag is set. This seems quite misleading and just mentioning it in the docs is risky. The sensitive data review approval for Bounce Tracking Protection was granted under the conditions that we both strip client ID (and use a separate ping) and use OHTTP. Without OHTTP we can't collect this data as-is. We would need to go through another sensitive data review which may or may not deem this additional privacy risk acceptable. For now, how can we stop the data collection on Android without OHTTP and purge all the data?
Bug 1920732 Comment 4 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
I wasn't aware that Android doesn't use OHTTP even when that flag is set. This seems quite misleading and only mentioning it in the docs is risky. The sensitive data review approval for Bounce Tracking Protection was granted under the conditions that we both strip client ID (and use a separate ping) and use OHTTP. Without OHTTP we can't collect this data as-is. We would need to go through another sensitive data review which may or may not deem this additional privacy risk acceptable. For now, how can we stop the data collection on Android without OHTTP and purge all the data?