If you want to nail a company to the cross for being in bed with Facebook... Backblaze probably shouldn't be at the top of your naughty list.

IMHO, over-ado about a small something.

"A new campaign was launched beginning on March 8, 2021 on the marketing web pages using Google Tag Manager which included the Facebook pixel. That new campaign resulted in the Facebook advertising pixel being accidentally configured in Google Tag Manager to run on all platform pages instead of just the marketing web pages."

"We’ve confirmed that there was only a single page (b2_browse_files2.htm) where the Facebook advertising pixel had the ability to access certain metadata. We tested this on Chrome, Safari, Firefox, and Edge. Our investigation determined that 9,245 users visited that page during the window when the Facebook campaign was active (March 8 at 12:39 p.m. Pacific time, through March 21st at 11:19 p.m. Pacific time when we removed the offending code)."

"If users were browsing their B2 Cloud Storage files on b2_browse_files2.htm during that period, AND clicked to preview file information, then the Facebook pixel pulled the following metadata: folder/file name, folder/file size, and the date the folder/file was uploaded. The folder/file metadata was limited to file information that was currently loaded in the browser.

No actual files or file contents were shared at any time. The data that was pulled did not include any user account information."

I can see how that can happen. The moment that GTM was pushed for at my last company it made me really uncomfortable but ultimately got pushed through. I wish it had a built in process for review and approval.

It looks like it does but the permissions are so frustrating to use that it just becomes overly permissive as a side effect.