The Trump administration has launched America.gov, a single AI-powered gateway designed to provide streamlined access to federal information and services. Under an executive order signed on Tuesday, the General Services Administration (GSA) is tasked with establishing the portal and integrating it with Login.gov to serve as the primary authentication layer.
Product LaunchesSecurityドナルド・トランプAmerica.gov
US Launches America.gov Portal as Unified Gateway, Raising Privacy Questions Over Login.gov Identifiers
The administration intends for America.gov to act as a secure, intelligent interface where users can sign in and complete transactions across multiple agencies without navigating individual departmental websites. While the order mandates that agencies retain control over their own records to prevent a centralized database, the platform aims to consolidate the user experience for "covered services" that serve more than 100,000 users annually.
However, technical examination of the Login.gov source code has raised privacy concerns. Recent updates merged by the National Design Studio (NDS) introduced a function that generates a nds_experiment_uuid. This identifier is stored as a "permanent" cookie, which according to framework documentation, is set to expire in 20 years.
The code allows this UUID to be generated even before a user authenticates, potentially creating a persistent, pseudonymous identifier that can distinguish browsers across repeated visits. While the NDS uses the identifier to manage interface design experiments and track opt-out statuses, the 20-year lifespan and its inclusion in analytics events have prompted questions within the Login.gov GitHub repository regarding privacy assessments and data retention.
The implementation occurs even when certain experiments, such as the NDS design rollout, are set to zero percent. Furthermore, developers noted that while users can opt out of the NDS interface, the long-lived nds_experiment_uuid remains in place to record the opt-out status, rather than being deleted.
Sources
- A 20-year-long permanent cookie: America.gov and tracking （Hacker News Frontpage, 2026-10-02）
- White House