points
It's not the same as doing this systematically (like Meta here), but these are shades of gray. A serious privacy law would prohibit both.