diff --git a/index.html b/index.html index cbb298f2..5fe389b0 100644 --- a/index.html +++ b/index.html @@ -163,7 +163,7 @@ .mdn .samsunginternet_android::before{background-image:url(https://www.w3.org/assets/logos/browser-logos/samsung-internet/samsung-internet.svg)} .mdn .webview_android::before{background-image:url(https://www.w3.org/assets/logos/browser-logos/android-webview/android-webview.png)} - + @@ -1528,14 +1528,13 @@

Web Application Manifest

This can be useful for analytics and possibly other customizations. However, it is also conceivable that developers could encode strings into the start_url that uniquely identify the user (e.g., a - server-assigned identifier, such as "?user=123", - "/user/123/", or "https://user123.foo.bar"). This is - fingerprinting/privacy sensitive information that the user might - not be aware of. + server-assigned identifier, such as "?user=123", "/user/123/", + or "https://user123.foo.bar"). This is fingerprinting/privacy + sensitive information that the user might not be aware of.

Note: Don't add identifiers to start URLs

- It is bad practice for a developer to use the start URL - to include information that uniquely identifies a user, as it would + It is bad practice for a developer to use the start URL to + include information that uniquely identifies a user, as it would represent a fingerprint that is not cleared when the user clears site data. However, nothing in this specification can practically prevent developers from doing this.