Login.gov adds persistent browser ID as government pushes universal federal sign-on

The federal login platform Login.gov began issuing browsers a persistent identifier, nds_experiment_uuid, a cookie with a 20-year lifespan tied to analytics with IP addresses and device data. It was introduced for a redesign experiment but is not deleted when users opt out of the new design, conflicting with claims of anonymous analytics.

• nds_experiment_uuid cookie lasts 20 years and is not deleted on opt-out
• Identifier tied to analytics with IP, OS, browser and device
• GitHub privacy question from September 12 unanswered by GSA
• Login.gov now described as government-wide identity platform