I think that you exfiltrating any and all data that you can access from my computer before you and I have negotiated what is authorized access is not me giving you data "willingly". The mere fact that I connect to your site or service does not give you the right to slurp my data. If you don't collect anything before I get the chance to see and agree to your terms and conditions, or privacy policy, then we can probably work something out. If you start fingerprinting my browser as soon as I connect, then it is not willingly on my part.
>The mere fact that I connect to your site or service does not give you the right to slurp my data.
But it's your computer that gives out all of this data. Your computer is presumably under your control, no? The website cannot demand anything from your computer that your computer doesn't want to send. You're using a piece of software that does the negotiation 'automatically' and permit it to send all of that data. It is possible to do without it. Disabling JavaScript goes a long way towards it.
