fastify-floc-off

fastify-floc-off

Fastify plugin to opt-out of Google's Topics advertising-surveillance API

Overview

The fastify-floc-off plugin adds the "interest-cohort=()" directive to the Permissions-Policy response header to opt-out of Google's Topics advertising-surveillance API. It will create a new header if one does not already exist.

This was originally created to opt-out of Google's FLoC (Federated Learning of Cohorts), which has since been replaced with their Topics API, though it has the same privacy issues.

You can read more about the issues that surround Google's FLoC on EFF and Plausible Analytics.

Helmet and fastify-helmet do not support the Permissions-Policy response header setting yet, so this plugin was created out of a need for an easy way to disable/opt-out of Google's Topics API. This ensures users accessing web applications are not subject to Google's unsolicited tracking.

Installation

Install using npm:

npm i fastify-floc-off

For Fastify v4.x support, use fastify-floc-off@2.1.11.

Example usage

const Fastify = require("fastify");
const flocOff = require("fastify-floc-off");

const server = Fastify();
server.register(flocOff);

server.get("/", (_req, res) => {
	res.send("ok");
});

server.listen(3000, (err) => {
	if (err) throw err;
	console.log("Server listening on 3000");
});

Contributing

Contributions are welcome, and any help is greatly appreciated!

See the contributing guide for details on how to get started. Please adhere to this project's Code of Conduct when contributing.

Acknowledgements

• Aras Abbasi - TypeScript support

License

fastify-floc-off is licensed under the MIT license.

Changelog

3.0.0 (2024-10-02)

⚠ BREAKING CHANGES

• dropped support for fastify v4.x
• dropped support for node 14, 16 and 18

Continuous integration

• cd: sort release note sections alphabetically (5a4a974)
• cd: standardise @fdawgs cd workflows (d6ed4ea)
• ci: audit package signatures and provenance attestations (6365f2b)
• ci: standardise @fdawgs ci workflows (d2c24f6)
• dependabot: add [@eslint-community](https://github.com/eslint-community) scoped deps to eslint group (bc3f03f)
• deps: bump actions/dependency-review-action from 3 to 4 (#222) (a782893)
• deps: bump coverallsapp/github-action from 2.2.3 to 2.3.0 (#235) (be36112)
• deps: bump wagoid/commitlint-github-action from 5 to 6 (#228) (704a92b)
• use latest node lts version (bdc0666)

Dependencies

• deps-dev: bump dev dependencies (dd41126)
• deps-dev: bump husky from 8.0.3 to 9.0.6 (#223) (caf4eb3)
• deps-dev: bump the commitlint group with 2 updates (#227) (253e0cf)

Features

• support fastify v5.x (2c51678)

Improvements

• index: swap negated condition (327480e)

Miscellaneous

• .husky/commit-msg: remove npx usage (a5528e4)
• .husky: migrate hooks to v9 style (06a1816)
• .npmrc: enforce strict engine checks (17451c3)
• .npmrc: remove excess whitespace (b46f290)
• .vscode: fix prettier.prettierPath setting (89ed836)
• drop support for node 14, 16, and 18 (d6c007e)
• index: inline comment re export types (0768f72)
• jsconfig: enable strict type checking (e981513)
• package: change author email (22ea6c7)