# Pkg.jl telemetry should be opt-in **URL:** https://discourse.julialang.org/t/pkg-jl-telemetry-should-be-opt-in/42209 **Category:** Internals & Design **Created:** [June 28, 2020, 9:11pm UTC](https://discourse.julialang.org/t/pkg-jl-telemetry-should-be-opt-in/42209 "2020-06-28T21:11:37Z") **Posts on this page:** 1 **Showing post:** 149

### Author: ![dlakelan](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/dlakelan/32/8491_2.png) [@dlakelan](https://discourse.julialang.org/u/dlakelan) #### Post date: [July 3, 2020, 2:32pm UTC](https://discourse.julialang.org/t/pkg-jl-telemetry-should-be-opt-in/42209/149 "2020-07-03T14:32:13Z")

> [@Tamas\_Papp](#): > > So, if I understand correctly, the worst case scenario is that people who have access to the disaggregated data can learn which packages from the general registry I have installed. No, the worst case is that people who have access to the disaggregated data can figure out that UUID x belongs to you (based on your git commits or whatever), and that you spent an inordinate amount of time doing julia programming with a particular high profile politician from an IP address that happens to be assigned to a particular potentially scandalous location (a strip club, a nonprofit foundation devoted to electing vehemently racist politicians, a meeting room where KKK members congregate, private religious services for satan worshipers, whatever. just insert whatever would be the most damaging thing you could imagine for yourself) The point is that _if the UUID is kept only on a machine that has no access to your IP address_ then it’s impossible to link your _persistent identity_ to your location and the location of others. It’s the persistent identity which tracks _your install_ across all locations where your laptop happens to go that’s the issue. The IP should not be collected on the same machine where the UUID is collected. --- _[View the full topic](https://discourse.julialang.org/t/pkg-jl-telemetry-should-be-opt-in/42209)._