"All of that tracking and data collection is done without your knowledge, and — critically — without your consent."