What happens to your personal data when you drive to Mall A and buy Product B with Credit Card C? Security experts Andrew Burt and Dan Geer can tell you. Since May 2017, Google has been collating "billions of credit card transactions" alongside its own Gmail and Google Maps data—presumably for sale to its corporate clients. The scheme is being challenged at the U.S. Federal Trade Commission, but it matters little, since competition to "create comprehensive offline profiles of online users" is well advanced. Burt and Geer believe that government regulation of corporate data collection is already a lost cause but that regulating data use is still achievable. Believe this if it gives you comfort.