Hi,
Following this issue here is the second question - opening up a second one for the sake of clarity.
Some browsers' privacy policies, or the W3C Privacy Threat Model for instance, make references to user expectations.
In the scope of these privacy policies and from a user expectation perspective, under which conditions a first party would be authorized to share user data with a third party?