They definitely made it sound like they didn’t post data back. They just redirected if the criteria matched in the javascript thus not ever sending any data anywhere to be collected. After this grabbing device information is pretty damn easy. If you hit the server at all they got that information and it’s not private…