Everything You Always Wanted to Know About Web Tracking

Think Web trackers aren't following you? Think again. Just by visiting this Web site, roughly half a dozen ad networks and Web analytics companies have deposited tracking cookies on your machine. Don't freak out, it's not as bad as it seems. In fact, there's an awful lot of hype, fear, and misinformation surrounding Web tracking -- and both sides are guilty of overstating the dangers of tracking, as well as the benefits.

How much do you know about Web tracking? Take the following True/False quiz to find out. What follows is semi-informed opinion mixed with facts -- which is the way we like to roll here at TY4NS.

True or False: Only a handful of companies track users across the Web.

FALSE

Actually, more than 800 companies drop tracking cookies on people's computers, according to Evidon, which helps advertisers comply with self regulatory programs. Ever hear of Adfonic, Clicksor, or VigLink? Probably not. But they may have heard of you.

True or False: Trackers know everything about you and your Web surfing history.

FALSE

First, tracking cookies don't actually track people, they track browsers. So while it's possible a Web tracker will know everything your browser did -- or pretty close to it -- it won't necessarily know whose fingers were on the keyboard at any time, or what you did using another browser or a different machine.

Second, most trackers only know that you're you -- or that your browser is your browser -- via a unique identification number placed inside a cookie, not by your name. (Though not always; see the next question.)

Third, tracking cookies only record your Web surfing habits on sites that use the same ad networks. For example, Doubleclick knows the sites you've visited that also display Doubleclick ads, but it won't know what sites you visited that use only 24/7 Real Media ads, and vice versa. Of course, these days nearly every ad-supported site uses tracking cookies from multiple networks, so the odds are good both Doubleclick and 24/7 Real Media know where you've been.

Finally, the information they do collect is extremely crude. While Web advertising networks collect the URLs of the sites you've visited, the ads you've seen, and what you've clicked on, they parse this information into generic "audience segments" -- like your age, gender, and interests -- which they use to deliver more relevant ads to you. (And which are often laughably inaccurate.) Evidon's Web site offers a simple tutorial explaining how this works.

True or False: Web trackers know nothing about you personally because you're totally anonymous to them.

TRUE and FALSE

Some of the information sent back by tracking cookies includes information that could be used to identify you. As Stanford researcher Jonathan Mayer has pointed out, many sites deliver personally identifiable information (like email addresses) as part of the referring URL sent back to Web trackers. (See "Sex, Drugs, and Internet advertising.") The Web trackers claim that they don't want this information, do not use it, and would not know how to use it even if they wanted to. But if they really wanted to, they could figure out how to use and even monetize that information. It's only a matter of time.

True or False: Federal privacy laws protect our personal surfing data from being used without our permission.

FALSE

There are no laws regarding private collection of your surfing data, though Do Not Track legislation has certainly been a hot topic of conversation lately. Depending on the day of the week and the person asked, the Federal Trade Commission both supports Do Not Track laws and would prefer the online ad industry come up with ways to regulate itself.

Naturally, the online advertising industry prefers the latter option. Companies like Evidon are rolling out an ad labeling program that consumers can use to find out who's tracking them and what kinds of information they collect. Evidon CEO Scott Meyer says only 10 to 15 percent of tracking ads currently carry the labels, but he expects that number to climb significantly by year's end.

Subscribe to the Security Watch Newsletter

Comments