Is that my legitimate interest or your legitimate interest?

Websites are allowed to collect user data without explicit consent, if they follow all the rules – but they often don’t.