Hacker News Reader

What it does or what it does not is of no consequence to me. What it could do is what matters because I don't have the time to check whether or not someone at Google or some US agency decided that they want to know. The easy solution is to make sure that it can't happen, which is to stop using GA tags on logged in parts of the website.

They would need to remove GA from all pages on the same origin. JavaScript in any page can perform an AJAX request to read HTML, and those requests will send cookies.

So I am supposed to check the script Google sends me every time I access the page that this script does not now (only in an A/B test! Only in beta! It was a human error!) send all the page content to Google as well? Ridiculous.

Nothing to see here folks, it's just 'meta-data' .. move along.

[edit: /s]