CDR: Another privacy-compromising ecommerce bid