Software engineer finds that Wacom drawing tablets track the name of every application opened on a user's computer and send the data to Google Analytics
Chapter 1: The discovery — I have a Wacom drawing tablet. I use it to draw cover illustrations for my blog posts, such as this one:
Context & Ripple Effects
Robert Heaton's finding lands in a decade-long arc of coverage showing that data collection has quietly spread from the obvious places into software nobody thinks of as a tracker: a survey of popular apps found personal data flowing to Apple, Google, and other third parties back in 2015, and the Ugly Mail extension exposed pixel tracking hiding inside Gmail messages the same year.
What makes the Wacom case distinctive is the vector: a hardware driver — privileged, always-running desktop software — repurposing Google Analytics, the web's most ubiquitous tracking library, to report which applications a user opens. It echoes the Android apps building permanent activity records for ad targeting and extends the tracking surface from browsers and phones to the local machine itself.
First-order effects
- Wacom users learn their tablet driver is transmitting a log of every application they open to Google Analytics, turning a creative peripheral into an activity monitor.
Second-order effects
- Google's position gets awkward: the company that operates the analytics pipeline now receives application-usage data from desktop hardware, inviting scrutiny of what its analytics SDK is doing outside the browser — the same tension visible when Meta and Yandex were found gleaning browsing histories via web identifiers.
Third-order effects
- If drivers and other privileged desktop software adopt web analytics tooling by default, the practical boundary of user monitoring shifts from the browser to the whole machine — pushing toward the fingerprinting-style identification the Princeton study of 1M sites documented, but at the operating-system level, and likely drawing privacy regulators' attention to driver telemetry.
The trend: Tracking infrastructure built for the web — analytics SDKs, identifiers, pixel beacons — is being repurposed by desktop and hardware software, expanding surveillance beyond the browser into the operating system.