"...code collects the user’s longitude and latitude, as well as the user’s browser type, operating system, device type, device identifiers, and full URL clickstreams (including date and time) and aggregates this information into a database."

Aren't all mobile phones browsers collect this data any way? If your location privacy is enabled to be shared by the browser. I am not sure what this student found beyond this which is worth raising brows.

Also, 3 cameras system in each kiosk is indeed creepy.