I'd argue that this feature is not worth the privacy invasion, but for it to work, you do need a secret in the URL that is always personal.