Drizzle
Drizzle
May 8

Privacy Extensions Trigger False Bot Detection

I have found that onedollarstats's internal bot detection prevents events being sent when a browser has common privacy extensions installed like Duck Duck Go privacy essentials. This is true even when my same site sends analytics properly to PostHog. I dug into it and narrowed down the cause to ODS' bot detection. Details: **Proposed Solution** Add an SDK option to disable or relax bot/lies detection, or change detection so privacy-extension API patches alone do not suppress events from otherwise normal browsers. **Expected Behavior** The NPM SDK should still track normal human users when common privacy/adblock extensions patch browser APIs, or provide a config option to relax/disable bot detection. **Actual Behavior** In normal Chrome with privacy/adblock extensions, patched canvas APIs trigger `detectLies()`: ```txt toDataURL: custom toString fillText: custom toString liesDetected: 2 hasProxy: true botKind: "unknown_bot" ``` The SDK then suppresses all events, including in my own real browser. The same site’s PostHog analytics still work in this browser, and OneDollarStats works in incognito.
ReviewingReviewing

Reviewing
changed status toUnder Review·3 weeks ago