Telemetry enabled by default with no option to disable

[davidhammaker]

Developer tools show POST requests to https://api.s.httpie.io/v1/t with data that looks like telemetry data.

I switched from Postman and use Incognito Mode to make things a little more private, so I would prefer to have telemetry off, but there's no "Off" switch.

Of course, I thought, "Maybe I agreed to this..." Skimming through the ToS and Privacy Policy on httpie.io, I don't see the word "telemetry" anywhere. I can see some information about data collected from "Site Visitors and Account Holders", but as an incognito user on the desktop application, I don't think I'm either of those. I see information about data collected automatically "when visiting or interacting with our Site". Again, I'm not on the site when I'm using the app. In the app itself, I can't find any ToS or Privacy Policy. So it seems kind of secret.

[jkbrzt]

@davidhammaker, thanks for the feedback. We’ll update the privacy to clarify that it also covers the desktop app. The app was only available online when it was written, and the desktop version became available later. We use the same usage metrics on both platforms, and they help us deliver a better product to our users. No sensitive information is included, and in Incognito Mode, usage metrics are also incognito.

[svenemtell]

Is any of the following included in the telemetry sent from Httpie CLI or Httpie Desktop?

• urls used in my requests
• params used in my requests
• bodies used in my requests

What is included in the telemetry sent?

[jkbrzt]

@svenemtell none of that is included. We treat all user data (URLs, bodies, headers, params, auth, variables, names, etc.) as extremely sensitive and encrypt everything server-side. What is included is the type of request, features used, size and time stats, and status codes.

{
    "exchange.status": "success",
    "exchange.time": 575,
    "request.contentLength": 0,
    "request.isHttps": false,
    "request.isLocalhost": false,
    "request.method": "GET",
    "spec.auth": "basic",
    "spec.authInherited": false,
    "spec.bodyType": "none",
    "spec.headers": 0,
    "spec.isDraft": true,
    "spec.method.isCustom": false,
    "spec.params": 0,
    "spec.url.blank": false,
    "spec.url.localhostShortcut": false,
    "response.contentLength": 766,
    "response.contentType": "application/json",
    "response.headers": 13,
    "response.status": 200,
  }