Is there still anyone competent that "doubt" so? As long as data transit through their infrastructure, in security, we must always assume that it's recorded (and later-on, eventually used), it has nothing to do with "settings".

Luckily almost all modern corporate tracking is done through Javascript execution + cookies. The days of parsing actual webserver logs are over for the most part. After all, it's only the browsers that execute javascript code and provide profitable personal information about the human behind the browser that matter. People with JS off are not providing sellable information.

[dead]