Activities / What code does

Tracks devices

tracks_devices

Your app identifies or follows a specific phone, browser, or other device across visits, or across other sites and apps.

  • scope code
  • in the registry since 1.0
  • 153 laws in 100 jurisdictions name it

What triggers it

The lint's definition. It stores or reads information on a user's browser or device beyond what delivering the service needs: analytics or advertising cookies, pixels, SDK identifiers, fingerprinting.

This covers a device-fingerprinting technique, an advertising identifier your app reads, and a tracking cookie set for a returning visitor.

What does not

A session token that only keeps a single visit logged in, and is discarded when the visit ends, does not count in the same way.

Often confused with Records text chat.

The law it brings into scope

The kinds of law that name this activity in the LexLint law library, with the number of laws and jurisdictions in each, as of . The examples are chosen by rule, laws in force first and the widest jurisdiction first; each section's page lists every law.

Area of lawLawsJurisdictions
Cybersecurity law

Build software securely, handle reported flaws, and report incidents on a deadline.

90 66
Communications law

Get consent before marketing, calling, recording or storing data on a device, and honor an opt-out.

44 41
Product and AI liability law

Answer in damages when defective software or an AI system causes harm.

23 22
Privacy law

Have a legal basis for personal data, honor people's rights over it, and report a breach.

3 3

Counterparties that usually come with it

  • an analytics provider
  • an advertising network
  • a crash-reporting service

A component that cannot run as documented without one of these names it in its ACTIVITIES.md under talks_to, with required: true. That party's jurisdiction then joins the run of every product that uses the component, and the finding says why it is there. A default the deployer can change is asked about, never added. Talking to a party never makes a product that party.

In a declaration

A library or framework that makes this possible enables it; an application whose shipped code does it performs it.

For a library

activities: - id: tracks_devices mentioned: enables enabled: requires_configuration where: [<the module that carries it>] note: <one sentence>

For an application

activities: - id: tracks_devices mentioned: performs enabled: by_default where: [<the module that carries it>] note: <one sentence: what it does, and the kind of law it attracts>

History

In the registry since version 1.0, .

In the glossary: Tracks devices.

The activity registry is LexLint's open list; this page's text is licensed under Creative Commons Attribution 4.0.