It&#x27;s not just &quot;a company&quot;, it&#x27;s many companies. They&#x27;re injecting this header into every request you make which is visible to the servers you connect to.<p>It makes any positive steps you&#x27;ve taken to protect your privacy utterly meaningless.