The third is ok, it's various click meta data we can collect flash side, we're sending it back to the js client. [read: it's not user input]