read up on the http protocol. I'm not too familiar with it myself, but the file path would be unneeded information, seeing it's the file itself that needs to be transmitted. Included the file path would be unneeded in any application really, except for the attempt at violation of privacy you mentioned. You have their IP addresses though.