deliveroo.com

[davidjb]

List the website(s) you're having issues:

https://deliveroo.ae/
https://deliveroo.com.au/
https://deliveroo.be/
https://deliveroo.fr/
https://deliveroo.es/
https://deliveroo.hk/
https://deliveroo.ie/
https://deliveroo.it/
https://deliveroo.com.kw/
https://deliveroo.nl/
https://deliveroo.com.sg/
https://deliveroo.co.uk/

(there may be more TLDs that exist, but they all use the base URLs for trackers on deliveroo.com and deliveroo.net)

What happens?

Deliveroo performs event tracking in-browser (scrollling, navigating, clicking UI elements, search etc), triggered by JavaScript to send tracker data (action, user agent, user UUID/GUIDs etc) to their dedicated API endpoints. To reproduce:

1. Visit a top-level Deliveroo website such as https://deliveroo.co.uk

2. Search for an address such as London

3. Click the address and then Search

4. Observe telemetry HTTP requests made to URLs/APIs like:

   https://api.uk.deliveroo.com/orderapp/v1/events
   https://events-tracker.deliveroo.net/track/CUSTOMER_VIEWED_RESTAURANT_LIST
   

   (the .uk country code is replaced for other countries, .au, .it, .hk, etc).
   Requests are currently allowed to proceed under EasyPrivacy.

5. Optionally, choose a restaurant and start scrolling up and down the page to see additional tracking on viewing different restaurant menu sections.

List Subscriptions you're using:

EasyPrivacy

Your settings

• OS/version: Windows 10
• Browser/version: Firefox 98
• Adblock Extension/version: uBlock Origin 1.42.2

Other details:

Propose blocking via:

||deliveroo.com^*/events
||events-tracker.deliveroo.net^