User Tracking in the Post-cookie Era: How Websites Bypass GDPR Consent to Track Users
- Contributors: Emmanouil Papadogiannakis , Panagiotis Papadopoulos , Nicolas Kourtellis , Evangelos P. Markatos
- Year: 2021
- Venue: WWW '21: Proceedings of the Web Conference 2021
In this paper, we explore whether websites use more persistent and sophisticated forms of tracking in order to track users who said they do not want cookies. Such forms of tracking include first-party ID leaking, ID synchronization, and browser fingerprinting. Our results suggest that websites do use such modern forms of tracking even before users had the opportunity to register their choice with respect to cookies. To add insult to injury, when users choose to raise their voice and reject all cookies, user tracking only intensifies. As a result, users’ choices play very little role with respect to tracking: we measured that more than 75% of tracking activities happened before users had the opportunity to make a selection in the cookie consent banner, or when users chose to reject all cookies.
- Repository link: https://arxiv.org/pdf/2102.08779.pdf
- Download: PDF file