diff --git a/.github/workflows/checkdocs.yml b/.github/workflows/checkdocs.yml
index 23bf1897f8..52f002fa71 100644
--- a/.github/workflows/checkdocs.yml
+++ b/.github/workflows/checkdocs.yml
@@ -34,6 +34,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   # config file help: https://github.com/amperser/proselint/
   proselint:
diff --git a/.github/workflows/checksrc.yml b/.github/workflows/checksrc.yml
index aa6db2a192..44ee26f669 100644
--- a/.github/workflows/checksrc.yml
+++ b/.github/workflows/checksrc.yml
@@ -29,6 +29,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   checksrc:
     name: 'checksrc'
diff --git a/.github/workflows/checkurls.yml b/.github/workflows/checkurls.yml
index ec9b511205..da5a99b861 100644
--- a/.github/workflows/checkurls.yml
+++ b/.github/workflows/checkurls.yml
@@ -21,6 +21,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   linkcheck:
     if: ${{ github.repository_owner == 'curl' || github.event_name != 'schedule' }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b68eabe1b3..8d4f6f9dbf 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,6 +33,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   gha_python:
     if: ${{ github.repository_owner == 'curl' || github.event_name != 'schedule' }}
diff --git a/.github/workflows/configure-vs-cmake.yml b/.github/workflows/configure-vs-cmake.yml
index bccef68bbf..e6a417944a 100644
--- a/.github/workflows/configure-vs-cmake.yml
+++ b/.github/workflows/configure-vs-cmake.yml
@@ -36,6 +36,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   check-linux:
     name: 'Linux'
diff --git a/.github/workflows/curl-for-win.yml b/.github/workflows/curl-for-win.yml
index 74a81f7e55..6469448b50 100644
--- a/.github/workflows/curl-for-win.yml
+++ b/.github/workflows/curl-for-win.yml
@@ -36,6 +36,7 @@ env:
   CW_MAP: '0'
   CW_JOBS: '5'
   CW_NOPKG: '1'
+  DO_NOT_TRACK: '1'
 
 jobs:
   linux-glibc-gcc:
@@ -63,7 +64,7 @@ jobs:
           podman images --digests
           time podman run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \
             --env-file <(env | grep -a -E \
-              '^(CW_|GITHUB_)') \
+              '^(CW_|DO_NOT_TRACK|GITHUB_)') \
             "${OCI_IMAGE_DEBIAN_STABLE}" \
             sh -c ./_ci-linux-debian.sh
 
@@ -90,7 +91,7 @@ jobs:
           podman images --digests
           time podman run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \
             --env-file <(env | grep -a -E \
-              '^(CW_|GITHUB_)') \
+              '^(CW_|DO_NOT_TRACK|GITHUB_)') \
             "${OCI_IMAGE_DEBIAN}" \
             sh -c ./_ci-linux-debian.sh
 
@@ -117,7 +118,7 @@ jobs:
           podman images --digests
           time podman run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \
             --env-file <(env | grep -a -E \
-              '^(CW_|GITHUB_)') \
+              '^(CW_|DO_NOT_TRACK|GITHUB_)') \
             "${OCI_IMAGE_DEBIAN}" \
             sh -c ./_ci-linux-debian.sh
 
@@ -164,7 +165,7 @@ jobs:
           podman images --digests
           time podman run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \
             --env-file <(env | grep -a -E \
-              '^(CW_|GITHUB_)') \
+              '^(CW_|DO_NOT_TRACK|GITHUB_)') \
             "${OCI_IMAGE_DEBIAN}" \
             sh -c ./_ci-linux-debian.sh
 
@@ -191,6 +192,6 @@ jobs:
           podman images --digests
           time podman run --volume "$(pwd):$(pwd)" --workdir "$(pwd)" \
             --env-file <(env | grep -a -E \
-              '^(CW_|GITHUB_)') \
+              '^(CW_|DO_NOT_TRACK|GITHUB_)') \
             "${OCI_IMAGE_DEBIAN}" \
             sh -c ./_ci-linux-debian.sh
diff --git a/.github/workflows/distcheck.yml b/.github/workflows/distcheck.yml
index 36f53aa6ae..bbe1e38644 100644
--- a/.github/workflows/distcheck.yml
+++ b/.github/workflows/distcheck.yml
@@ -21,6 +21,7 @@ permissions: {}
 
 env:
   CURL_TEST_MIN: 1500
+  DO_NOT_TRACK: '1'
   MAKEFLAGS: -j 5
 
 jobs:
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 45884515e8..dc15b9c9db 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -38,6 +38,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   Fuzzing:
     uses: curl/curl-fuzzer/.github/workflows/ci.yml@master  # zizmor: ignore[unpinned-uses]
diff --git a/.github/workflows/http3-linux.yml b/.github/workflows/http3-linux.yml
index 26bce00f7d..1b7e1046a3 100644
--- a/.github/workflows/http3-linux.yml
+++ b/.github/workflows/http3-linux.yml
@@ -35,6 +35,7 @@ env:
   MAKEFLAGS: -j 5
   CURL_CI: github
   CURL_TEST_MIN: 1850
+  DO_NOT_TRACK: '1'
   # renovate: datasource=github-releases depName=openssl/openssl versioning=semver extractVersion=^openssl-(?<version>.+)$ registryUrl=https://github.com
   OPENSSL_VERSION: 4.0.0
   # manually bumped
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index 7e0ae094ee..e35f093045 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -19,6 +19,9 @@ concurrency:
 
 permissions: {}
 
+env:
+  DO_NOT_TRACK: '1'
+
 jobs:
   label:
     name: 'Labeler'
diff --git a/.github/workflows/linux-old.yml b/.github/workflows/linux-old.yml
index ffda730105..1164417462 100644
--- a/.github/workflows/linux-old.yml
+++ b/.github/workflows/linux-old.yml
@@ -50,6 +50,7 @@ env:
   CURL_CI: github
   CURL_TEST_MIN: 1560
   DEBIAN_FRONTEND: noninteractive
+  DO_NOT_TRACK: '1'
 
 jobs:
   cmake-autotools:
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 6541296803..d3a873c9cb 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -33,6 +33,7 @@ env:
   MAKEFLAGS: -j 5
   CURL_CI: github
   CURL_TEST_MIN: 1660
+  DO_NOT_TRACK: '1'
   # renovate: datasource=github-tags depName=libressl/portable versioning=semver registryUrl=https://github.com
   LIBRESSL_VERSION: 4.3.1
   # renovate: datasource=github-tags depName=wolfSSL/wolfssl versioning=semver extractVersion=^v?(?<version>.+)-stable$ registryUrl=https://github.com
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index e06995cafc..4ce54f39d2 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -44,6 +44,7 @@ permissions: {}
 env:
   CURL_CI: github
   CURL_TEST_MIN: 1750
+  DO_NOT_TRACK: '1'
   MAKEFLAGS: -j 4
   LDFLAGS: -w  # suppress 'object file was built for newer macOS version than being linked' warnings
 
diff --git a/.github/workflows/non-native.yml b/.github/workflows/non-native.yml
index 3eb46facfe..c8a0f2156b 100644
--- a/.github/workflows/non-native.yml
+++ b/.github/workflows/non-native.yml
@@ -34,6 +34,7 @@ permissions: {}
 env:
   CURL_CI: github
   CURL_TEST_MIN: 1820
+  DO_NOT_TRACK: '1'
 
 jobs:
   netbsd:
@@ -52,7 +53,7 @@ jobs:
         env:
           MATRIX_ARCH: '${{ matrix.arch }}'
         with:
-          environment_variables: CURL_CI CURL_TEST_MIN MATRIX_ARCH
+          environment_variables: CURL_CI CURL_TEST_MIN DO_NOT_TRACK MATRIX_ARCH
           operating_system: 'netbsd'
           version: '10.1'
           architecture: ${{ matrix.arch }}
@@ -98,7 +99,7 @@ jobs:
         env:
           MATRIX_ARCH: '${{ matrix.arch }}'
         with:
-          environment_variables: CURL_CI CURL_TEST_MIN MATRIX_ARCH
+          environment_variables: CURL_CI CURL_TEST_MIN DO_NOT_TRACK MATRIX_ARCH
           operating_system: 'openbsd'
           version: '7.7'
           architecture: ${{ matrix.arch }}
@@ -153,7 +154,7 @@ jobs:
           MATRIX_DESC: '${{ matrix.desc }}'
           MATRIX_OPTIONS: '${{ matrix.options }}'
         with:
-          environment_variables: CC CURL_CI CURL_TEST_MIN MATRIX_ARCH MATRIX_BUILD MATRIX_DESC MATRIX_OPTIONS
+          environment_variables: CC CURL_CI CURL_TEST_MIN DO_NOT_TRACK MATRIX_ARCH MATRIX_BUILD MATRIX_DESC MATRIX_OPTIONS
           operating_system: 'freebsd'
           version: '14.3'
           architecture: ${{ matrix.arch }}
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index 85e785fc48..7d23b11b05 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -35,6 +35,7 @@ env:
   CURL_CI: github
   CURL_TEST_MIN: 1800
   CURL_TEST_SSH_KEYALGO: ed25519
+  DO_NOT_TRACK: '1'
   OPENSSH_WINDOWS_VERSION: 10.0.0.0p2-Preview
   OPENSSH_WINDOWS_SHA256_ARM64: 698c6aec31c1dd0fb996206e8741f4531a97355686b5431ef347d531b07fcd42
   OPENSSH_WINDOWS_SHA256_WIN64: 23f50f3458c4c5d0b12217c6a5ddfde0137210a30fa870e98b29827f7b43aba5
diff --git a/appveyor.yml b/appveyor.yml
index 817d54737f..899bb497c4 100644
--- a/appveyor.yml
+++ b/appveyor.yml
@@ -31,6 +31,8 @@
 version: 7.50.0.{build}
 
 environment:
+  DO_NOT_TRACK: '1'
+
   matrix:
     # CMake Visual Studio builds