A study by Princeton researchers came to light earlier this month, revealing that over 400 of the world's most popular websites use the equivalent of hacking tools to spy on you without your knowledge or consent.
Using session replay scripts from
third-party companies, websites are recording your every act, from mouse moves to clicks, to keylogging what you type, and extracting your personal info off the page. If you accidentally paste something into a text field from your clipboard, like an
address or password you didn't want to type out, the scripts can record, transmit, and store that, too.
What these sites are doing with this information, and how much they anonymize or secure it, is a crapshoot.
Among top retail offenders
recording your every move and mistake are Costco, Gap.com, Crate and Barrel, Old Navy, Toys R Us, Fandango, Adidas, Boots, Neiman Marcus, Nintendo, Nest, the Disney Store, and Petco.
Tech and security websites spying on users include HP.com,
Norton, Lenovo, Intel Autodesk, Windows, Kaspersky, Redhat.com, ESET.com, WP Engine, Logitech, Crunchbase, HPE.com (Hewlett Packard Enterprise), Akamai, Symantec, Comodo.com, and MongoDB.
Other sites you might recognize that are also using active
session recording are RT.com, Xfinity, T-Mobile, Comcast, Sputnik News, iStockphoto, IHG (InterContinental Hotels), British Airways, NatWest, Western Union, FlyFrontier.com, Spreadshirt, Deseret News, Bose, and Chevrolet.com