Urgent -> Telemetry

[wildernessfamily]

URGENT: Undisclosed Telemetry Collection
I am writing to urgently address a compliance issue with the Cortex-Debug extension on the VSCode Marketplace. The marketplace listing does not disclose that this extension collects telemetry data, nor is there a provided privacy policy detailing what data is collected, when, or how it is used. This is a direct violation of the Microsoft Publisher Agreement, which requires explicit disclosure of data collection.
While reviewing the extension's preferences, I found the following setting:

"Cortex-debug: Enable Telemetry: Enable Telemetry for the Cortex-Debug Extension. Reporting will also respect the global telemetry.enableTelemetry setting."

This preference is enabled by default without prior user consent or documentation.

Please address this immediately by providing a clear privacy policy and detailing exactly what telemetry data this extension collects.

[haneefdm]

I don't have access to any telemetry and don't need or care for it. This telementry has been here forever before I became the sole maintainer (5 years ago) of this extension (not the repo). All I can do is to disable the telemetry completely (not even a preference) as I still have access to code. From looking at the code, it appears that info being collected is start/end time of sessions, which major features were enabled (SWO, RTT, Graphing, servertype, rtos, device). There there were a bunch of events that are sent - mainly from memory view which is no longer used and a few in error situations. Near as I can tell no other personal data was being sent

Instead of tackling every call site I can simply pretend like telemetry is disabled and having no way to enable it. This way, if the original author want to re-enable it, they can do it with proper disclosures, etc.

[Marus]

I'd suggest stripping it all. To be honest it is something I forgot was even enabled and probably should have stripped out a long time ago.

…

On Mon, Mar 9, 2026 at 8:26 AM Haneef Mohammed ***@***.***> wrote: *haneefdm* left a comment (Marus/cortex-debug#1201) <#1201 (comment)> I don't have access to any telemetry and don't need or care for it. This telementry has been here forever before I became the sole maintainer (5 years ago) of this extension (not the repo). All I can do is to disable the telemetry completely (not even a preference) as I still have access to code. From looking at the code, it appears that info being collected is start/end time of sessions, which major features were enabled (SWO, RTT, Graphing, servertype, rtos, device). There there were a bunch of events that are sent - mainly from memory view which is no longer used and a few in error situations. Near as I can tell no other personal data was being sent Instead of tackling every call site I can simply pretend like telemetry is disabled and having no way to enable it. This way, if the original author want to re-enable it, they can do it with proper disclosures, etc. — Reply to this email directly, view it on GitHub <#1201 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAD2FLN4SQTL4CLKMWSAUT34P2S5VAVCNFSM6AAAAACWLJQXZOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DAMRTGA3DSMJQGU> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Marcel Ball ***@***.***>

----------------------------------------------- The purpose of writing is to inflate weak ideas, obscure pure reasoning, and inhibit clarity. With a little practice, writing can be an intimidating and impenetrable fog! - Calvin