USCIS.gov allegedly sends visitor data to Meta and Google, scanner finds

What was discovered

It has been reported that the U.S. Citizenship and Immigration Services website (USCIS.gov) loads third‑party scripts that send visitor information to Meta and Google, according to scans from the varlog.in “Inspect” tool and a discussion on Hacker News. The Inspect page promises to show “every third‑party service, tracker, and script a site loads — and what each one does,” and the outputs allegedly include connections to well‑known tracking services and tag managers.

Why it matters

People expect government websites to handle sensitive queries — visas, citizenship, asylum — with care. When those sites ping commercial tracking networks, alarm bells ring. What data is shared? The reports say page URLs, browser metadata, and other identifiers could be captured or relayed. That matters because even innocuous metadata can become very revealing when stitched together. Privacy advocates will likely see this as a breach of public trust. Rightly so.

Context and reaction

This is not the first time a public sector site has been found loading analytics and ad tech libraries; agencies have faced scrutiny before. It has been reported that there was no immediate public statement from USCIS addressing the findings. In the meantime, users who care can block trackers with privacy extensions or network filters. But should visitors have to rely on add‑ons to keep a government site from whispering to the ad giants? Tough question.

What comes next

Allegedly problematic behavior like this tends to prompt two things: public pressure and policy reviews. Will USCIS tighten its vendor list or change how analytics are implemented? Watch for statements from the agency and for privacy advocates to push for audit and remediation. One thing’s certain: people expect transparency from institutions that handle their most consequential paperwork. And when that trust frays, the conversation heats up fast.

Sources: varlog.in, Hacker News