I needed a favicon for a client project last week. Uploaded their logo to a popular free favicon generator. Got the .ico file back.

Then I checked the network tab. The logo had been sent to an analytics endpoint on a different domain. Not disclosed anywhere in the UI.

The Privacy Problem

Most favicon generators work like this:

You upload an image