Google has agilely been accouterment select advertisers a “stockpile” of offline credit card transaction data.

After a four year negotiation, Google and Mastercard accomplished a deal that would pay the latter millions in barter for coughing up data on its card holders, according to a report. Google then packaged the data into a new tool, called Store Sales Measurement, that accustomed its barter to track whether online ads turned into real world retail sales.

Neither aggregation abreast its users of the arrangement. For Mastercard, that means the bulk of its two billion barter have no adeptness of the behind-the-scenes tracking.

“People don’t expect what they buy physically in a store to be linked to what they are buying online,” Christine Bannan, admonition with the advancement group Electronic Aloofness Advice Center, told . “There’s just far too much burden that companies place on consumers and not enough albatross being taken by companies to inform users what they’re doing and what rights they have.”

Last year, when Google first appear the Store Sales Measurement service, the aggregation claimed to have access to “approximately 70 percent” of US credit and debit cards. Purchases made on Mastercard-branded cards annual for some 25 percent of all credit card affairs in the US, according to banking analysis firm .

Though Google didn’t name its partners, the 70 percent figure would advance Mastercard isn’t the only credit card aggregation it is currently partnered with.

Visa and American Express did not acknowledge to our inquiries about whether they also had agnate arrange with Google.

A Google agent told :

Before we launched this beta artefact last year, we built a new, double-blind encryption technology that prevents both Google and our ally from examination our corresponding users’ alone identifiable information. We do not have access to any claimed advice from our partners’ credit and debit cards, nor do we share any claimed advice with our partners. Google users can opt-out with their Web and App Activity controls, at any time.

While users have the adeptness to opt out of offline tracking, it charcoal cryptic whether most users even know it exists. The opt out tool Google mentions makes no acknowledgment of tracking offline purchases.

For Google, this is just addition step in bridging the gap amid online ads and offline sales. Since at least 2014, the aggregation has used Google Maps to notify advertisers about users who viewed their ads and then visited brick-and-mortar establishments. This tool, however, didn’t track sales made within the stores.

Mastercard couldn’t be accomplished for comment. A spokesperson, however, told :

Regarding the [Bloomberg] commodity you cited, I’d bound note that the apriorism of what was appear is false. The way our arrangement operates, we do not know the alone items that a customer purchases in any arcade card — concrete or digital. No alone affairs or claimed data is provided. That delivers on the apprehension of aloofness from both consumers and merchants around he world. In processing a transaction, we see the retailers name and the total amount of the consumer’s purchase, but not specific items.

Read next: YouTube's new tools help creators give back