3 ms·
Ad networks can track you without cookies. Cookies are just an easy first step. Any time any user hits any page with your javascript[1] in it: record ip addres
by Sukotto 9y ago
Ad networks can track you without cookies. Cookies are just an easy first step.
Any time any user hits any page with your javascript[1] in it: record ip address, referer (sic), locale preferences, available fonts, what's in their cache, what extensions they have, and anything else you can get. You can even track if they have certain 3rd party sites blocked.
Then it is a matter of bayesian guessing about who they are. Given that a typical person spends most of their time in only a few specific places (home, commute, work, favorite coffee shop/pub, etc) you can make very good guesses about which person is visiting your page after only a few visits... even if they have cookies disabled.
[1]And if they have js disabled they can't really use your site because js is basically required now. And you can still track that information and advertise to that cohort. How many people hitting the site from these 5 ip addresses, who use chromium, and have no cookies, and have js turned off? One? Well, then they just identified that person
- om2 9y agoWe studied the behavior of many trackers in detail. We believe many track you solely with client-side state (including cookies, indexeddb, LocalStorage, The http cache, etc). It's true that some others use fingerprinting like you describe, and it's something we will think about in the future. But stateful tracking is still the most reliable mechanism, and for many trackers it's the sole mechanism.
- bigbugbag 9y agoDon't we have a few extensions mimicking the most common settings to defeat such fingerprinting ?