Wladimir Palant wrote:In particular, somebody might want to disable statistics temporarily.
I'm annoyed with myself that I didn't think of that use case
I think, given the privacy issues, that the "Don't collect statistics" pref should really be surfaced visibly in the UI.
Perhaps when this is checked (but not when unchecked) a "yes/no" popup could be shown asking the user if they wish to also clear any existing hit statistics - that would solve this the issue of clearing existing stats from both sides I think, and also make it easier for the users you mentioned to temporarily disable it too.
I think this is a reasonably significant privacy issue and needs the appropriate visibility.
Thanks again for your thoughtful response.