Docker contacts 3rd party tracking service Wootric without approval or notice

[driverdan]

Expected behavior

Docker's EULA and privacy policy make no mention of 3rd party tracking in their client side software. The expected behavior is no 3rd party tracking services embedded in Docker's software.

Actual behavior

The Docker CE for Mac installer for 17.09.0-ce-mac33 (19543) makes a call to api.wootric.com without asking for permission from the user. This appears to be a violation of Docker's privacy policy.

I did not MiTM the call so I'm unsure what data is being communicated.

Information

• Wootric is a user tracking and surveying service not associated with Docker Inc.

Steps to reproduce the behavior

1. Upgrade existing installation of Docker CE for Mac to 17.09.0-ce-mac33 (19543)
2. At the end of the upgrade the installer will make a call to api.wootric.com

[rask]

I wonder if this is the case on other platforms as well.

[d2s]

Same issue here. Fortunately, people can block the outbound requests with an outbound firewalls, like Little Snitch etc.

Would be a good thing to get the ability to disable the analytics directly, instead of having to block the communication manually with a firewall.

[Manouchehri]

It's also now making a request to segment.io.

[Manouchehri]

Did a quick static check, wootric.com seems to track version numbers.

URLs: https://api.wootric.com/v1/end_users/, https://api.wootric.com/oauth/token, https://api.wootric.com/v1/end_users?access_token=

segment.io looks like usage analytics.

URLs: https://api.segment.io/v1/identify, https://api.segment.io/v1/track

[shaiguitar]

FWIW, when denying the request to wootric, the docker daemon crashes.

[docker-robott]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale comment.
Stale issues will be closed after an additional 30d of inactivity.

Prevent issues from auto-closing with an /lifecycle frozen comment.

If this issue is safe to close now please do so.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle stale

[YRM64]

Tagged #2122 (Github), and opened up by driverdan approximately 7 months ago.

[docker-robott]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale comment.
Stale issues will be closed after an additional 30d of inactivity.

Prevent issues from auto-closing with an /lifecycle frozen comment.

If this issue is safe to close now please do so.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle stale

[driverdan]

I believe it now asks for permission thanks to GDPR. Can anyone confirm?

[Manouchehri]

[joelanders]

Just did an install; LittleSnitch told me about this tracking call; no GDPR consent dialog first.
(segment.io and wootric.com)