
"The bad guys could likely create a script for stealing usernames and passwords in login forms using this tool," Smith said. User scripts also could facilitate password-stealing schemes, said security consultant Richard Smith, who runs the ComputerBytesMan Web site. In what could signal a trend toward user scripts, Norwegian browser maker Opera Software has picked up the idea, adding similar functionality to beta 3 of Opera 8, acknowledging Greasemonkey on its Web site. (CNET 's tests of various scripts showed that some were more successful than others at delivering promised results.) One, called "Butler," is meant to remove ads on Google results pages, add links to competing search sites, and remove image copy restrictions from Google Print. Others are designed to execute more substantial changes, such as making connections to Yahoo Mail and Gmail more secure. They can also change Slashdot's colors and make the site "less ugly," the page says. They can, for example, transform story links on The New York Times site and take readers to ad-free, printable versions. I understand that the privacy practices look very far reaching, but I'd rather report too much usage than get kicked off the webstore.By manipulating the Dynamic HTML, or DHTML, of a Web page, Greasemonkey scripts can perform a host of tasks, according to the GreaseMonkey UserScripts page. The joke is that someone who really collects keystrokes triggers the exact same warning. Therefore I'm collecting "user activity". also the error reports sent back to me might be triggered by a user interaction. Simeon from Google stated: "As I understand the intent of the "user data" classification, it basically means any information collected as a result of a user's interaction with your extension." That can be interpreted so broadly that e.g. But I can only check the "Location" checkbox or not. In the end I know where the Tampermonkey users are from, which helps me to prioritize on the right translations and so on.

That's why I'm collecting "location" data.

Matomo derives a location from the user's IP address, but only on country or a broader regional level. Also in the meanwhile I'm using a self-hosted Matomo instead of Google Analytics. I explained why I need some anonymous analytics data here.
