The Privacy SandkastenConcepto de Sandbox¿Qué es el Google Sandbox?El Sandbox es más que una definición usado dentro del sector de los videojuegos. Se trata del periodo de tiempo en el que Google pone a prueba todas aquellas páginas web que se han creado recientemente. Muchos lo definen como un periodo de cuarentena en el que el portal en cuestión pasa por un profundo análisis con el que el buscador determina su validez Plus is a series of proposals to satisfy third-party use cases without third-party cookies or other VerfolgungEn el marketing online, el tracking o seguimiento se refiere al registro y análisis del comportamiento del usuario en Internet. Los movimientos de un visitante a una web pueden ser rastreados por medio de de encabezados HTTP, JavaScript o cookies. Los operadores web pueden averiguar, por ejemplo, desde dónde acceden los usuarios a una web, qué páginas visitan a menudo, cuánto tiempo permanecen en cada página, por medio de de Plus Mechanismen.
Aktualisiert
Safe and secure
Zusammenfassung
- This PostConcepto de Post¿Qué es un Post?Un Post es todo aquel contenido, sea post, opinión, noticia u otro género, que un autor publica en un blog. Este puede ser de carácter corporativo o meramente ocioso; pero siempre tiene como meta arrojar información o reflejar una idea, al mismo tiempo de facilitar que los usuarios encuentren la web donde se recoge por medio de de buscadores y demás plataformas online.Generalmente, se han Plus outlines APIs and concepts from the Privacy Sandbox proposals.
- The proposals are looking for feedback from the community, particularly from those in the advertising space (publishers, advertisers, and ad tech companies), to suggest missing use cases and share information about how to support your business use cases.
- You can comment on the proposals by filing issues on the repositories linked to below.
- There’s a glossary for the proposals at the end of this post.
The current state of privacy on the web
Websites use services from other companies to provide analytics, serve video and do lots of other useful stuff. Composability is one of the web’s superpowers. Most notably, ads are included in web pages via third-party JavaScriptJavaScript es un lenguaje de programación que funciona en el lado del cliente y con el que las webs pueden ser más funcionales. Incorporación en código HTML El código JavaScript puede ser incrustado en las páginas HTML, para que adquieran funcionalidad. Existen varias opciones. Puede estar entre las etiquetas <SCRIPT> y </SCRIPT>, puede estar contenido en un archivo externo, puede ser un parámetro de las etiquetas HTML, y puede estar Plus and iframes. Ad views, clicks and conversions are tracked via third-party cookies and SkripteConcepto de Scripts¿Qué son los Scripts?Los Scripts son fragmentos de código que se usan para dar forma a herramientas tanto en Internet como en el sector de la informática en general. Son una parte crucial del software, puesto que se trata exactamente del código que conforma a una aplicación en su totalidad o a una de sus funciones, como además el que puedes hallar explorando cómo está hecha una web.Desde Plus.
However, when you visit a website you may not be aware of the third parties involved and what they’re doing with your data. Even publishers and web developers may not understand the entire third-party supply chain.
Ad selection, UmwandlungConcepto de Conversion¿Qué es la Conversion?La conversion es una definición que tiene multitud de significados; sin embargo, cuando reducimos el espectro al del marketing digital, consiste en un procedimiento a través el cual un usuario realiza una acción que una compañía quiere que se lleve a cabo y provoca por medio de de distintos iniciativas. Puede ser una visita a una página concreta, una compra, un mensaje o cientos de Plus measurement, and other use cases currently rely on establishing stable cross-site user identity. Historically this has been done with third-party cookies, but browsers have begun to restrict access to these cookies. There has also been an increase in the use of other mechanisms for cross-site user tracking, such as covert browser storage, device fingerprinting, and requests for personal information such as email addresses.
This is a dilemma for the web. How can legitimate third-party use cases be supported without enabling users to be tracked across sites?
In particular, how can websites fund content by enabling third parties to show ads and measure ad performance—but not allow individual users to be profiled? How can advertisers and site owners evaluate a user’s authenticity without resorting to dark patterns such as device fingerprinting?
The way things work at the moment can be problematic for the entire web ecosystem, not just users. For publishers and advertisers, tracking identity and using a variety of non-standard third-party solutions can add to technical debt, code complexity, and data risk. Users, developers, publishers, and advertisers should be confident that the web is protecting user privacy choices.
Advertising is a core web business model for the internet, but advertising has to work for everyone. Which brings us to the Privacy Sandbox’s mission: to create a thriving web ecosystem that is respectful of users and private by default.
Introducing the Privacy Sandbox
Das Privacy Sandbox introduces a set of privacy-preserving APIs to support business models that fund the open web in the absence of tracking mechanisms like third-party cookies.
The Privacy Sandbox APIs require web browsers to take on a new role. Rather than working with limited tools and protections, the APIs enable the user’s browser to act on the user’s behalf—locally, on their device—to protect the user’s identifying information as they navigate the web. The APIs enable use cases such as ad selection and conversion measurement, without revealing individual private and personal information. In engineering terms a sandbox is a protected environment; a key principle of the Privacy Sandbox is that a user’s personal information should be protected and not shared in a way that lets the user be identified across sites.
This is a shift in direction for browsers. The Privacy Sandbox’s vision of the future has browsers providing specific tools to satisfy specific use cases, while preserving user privacy. A Potential Privacy Model for the Web sets out core principles behind the APIs:
- To establish the range of web activity across which the user’s browser can let websites treat a person as having a single identity.
- To identify the ways in which information can move across identity boundaries without compromising that separation.
The Privacy Sandbox proposals
In order to successfully transition away from third-party cookies the Privacy Sandbox initiative needs your support. The proposal explainers need feedback from developers as well as publishers, advertisers, and ad technology companies, to suggest missing use cases and share information about how to accomplish their goals in a privacy-safe way.
You can comment on the proposal explainers by filing issues against each repository:
- Privacy Model for the Web
Establish the range of web activity across which the user’s browser can let websites treat a person as having a single identity. Identify the ways in which information can move across identity boundaries without compromising that separation. - Privacy Budget
Limit the total amount of potentially identifiable data that sites can access. Update APIs to reduce the amount of potentially identifiable data revealed. Make access to potentially identifiable data measurable. - Willful IP Blindness
Enable sites to ‘blind’ themselves to IP addresses so they can avoid consuming privacy budget. - Trust Token API
Enable an origin that trusts a user to issue them with cryptographic tokens which are stored by the user’s browser so they can be used in other contexts to evaluate the user’s authenticity. - First-Party Sets
Allow related domain names owned by the same entity to declare themselves as belonging to the same first party. - Aggregated Reporting
Provide privacy preserving mechanisms to support a variety of use cases such as view-through-conversion, brand, lift, and reach measurement. - Click Through Conversion Measurement Event-Level
Provide privacy preserving click-through-conversion measurement. - Federated Learning of Cohorts
The browser groups together many users with similar browsing histories into a group (or «flock»). Advertisers can select ads for this large group based on mass observations, but cannot recognize individual people in it. - TURTLEDOVE
Enable some form of on-device ‘auction’ to choose the most relevant ads which would include ads that remarket an advertiser based on a prior expression of interest by the user.
You can dive into the APIConcepto de API¿Qué es una API?Una API, siglas de Application Programming Interface o Interfaz de Programación de Apps, es un recopilatorio de código que se puede emplear para que varias apps se comuniquen entre ellas. Es algo que realiza una tarea equivalente a la interfaz de usuario al momento de promover la interacción entre persona y programa, solo que aplicado única y exclusivamente dentro del entorno del software.Aún cuando suene Plus proposal explainers right away, and over the coming months we’ll be publishing posts about each proposal individually.
Use cases and goals
Measure conversion
Goal: Enable advertisers to measure ad performanceEn el caso de las webs, el término Performance o rendimiento, se refiere a la velocidad de carga o a la potencia de cálculo de un servidor, es decir, a la velocidad a la que se transmiten los datos del servidor al cliente. Razones para una buena performance Una web que se carga lentamente, puede animar a los clientes potenciales a abandonar la página. Para asegurar una interacción fluida, se tiene Plus.
There are two proposals for APIs where information about ad impressions and conversions stays inside the browser, and which only offer carefully controlled, privacy-safe ways for that information to get back to advertisers. This controlled, privacy-safe reporting is done in a way that does not enable linking of identities across sites or collection of user browsing history:
- Click Through Conversion Measurement Event-Level allows advertisers to determine which ad clicks later turned into conversions. (API name suggestions welcome!)
- Aggregated Reporting aggregates browsing data for multiple sites and multiple users in a single report, while preserving privacy by only allowing aggregate reporting on things that a lot of different people did.
Other companies have been investigating similar ideas, such as Facebook’s Cross-Browser Anonymous Conversion Reporting, Apple’s Ad Click Attribution API and Brave’s ad conversion attribution.
Select ads
Goal: Enable advertisers to display ads relevant to users.
Relevant ads are more favorable to users and more profitable for publishers (the people running ad-supported websites). Third party ad selection tools make ad space more valuable to advertisers (the people who purchase ad space on websites) which in turn increases revenue for ad-supported websites and enables content to get created and published.
There are many ways to make ads relevant to the user, including the following:
- First-party-data: Show ads relevant to topics a person has told a website they have an interest in, or content a person has looked at previously on the current website.
- Contextual: Choose where to display ads based on site content. For example, ‘Put this ad next to articles about knitting.’
- Remarketing¿Qué es remarketing?Estrategia para redes publicitarias destinada a recuperar aquellos usuarios que en un momento dado hayan interactuado con un anuncio o hayan visitado una web comercial demostrando interés por ella. Consiste en un público a quien se presupone una cierta receptividad y conocimientos acerca del producto o servicio, y para explotarlo se le muestran anuncios relevantes, ofertas especiales y descuentos adecuados a sus posibles intereses, que se pueden inferir de Plus: Advertise to people who’ve already visited your site, while they are not on your site. For example, ‘Show this ad for discount wool to people who visited your store and left knitting items in their shopping cart—while they’re visiting craft sites.’
- Interest-based: Select ads based on a user’s browsing history. For example, ‘Show this ad to users whose browsing behaviour indicates they might be interested in knitting’.
First-party-data and contextual ad selection can be achieved without knowing anything about the user other than their activity within a site. These techniques don’t require cross-site tracking.
Remarketing is usually done by using cookies or some other way to recognize people across websites: adding users to lists and then selecting specific ads to show them.
Interest-based ad selection currently uses cookies to track user behaviour across as many sites as possible. Many people are concerned about the privacy implications of ad selection. The Privacy Sandbox proposes two alternatives, for remarketing and for interest-based selection:
-
TURTLEDOVE: for remarketing.
The API enables the final ad «auction» to choose the most relevant ads to be moved to the browser. The API leverages information which is only stored in the user’s browser itself, about advertisers the user had previously expressed an interest in, along with information about the current page. Two requests are sent for ads: one to retrieve an ad based on contextual data, and one to retrieve an ad based on an advertiser-defined interest. The browser has the responsibility of ensuring these requests are independent and uncorrelated so they can’t be linked together to let an ad networkUna Ad Network es una red de promoción comercial online que conecta al anunciante con el editor y actúa, de esta manera, como una red intermediaria entre la oferta y la demanda. El objetivo principal es ofrecer a los editores un espacio publicitario donde puedan entrar a la demanda de los anunciantes. La venta del espacio publicitario Por lo que una Ad Network tiene como objetivo comercializar el material publicitario Plus know that the requests are from the same person. An «auction» is then conducted by the browser to choose the most relevant ad, using JavaScript code provided by the advertiser. This code can only be used to choose between ads: it cannot make network requests, or access the DOM or external state. -
FLoC: for interest-based audiences.
The API generates clusters of similar people, known as cohorts or «flocks». Data is generated locally on the user’s browser, not by a third party. The browser AnteileConcepto de Shares¿Qué son los Shares?Los Shares son un mecanismo que lleva en activo dentro de Facebook desde el año 2011 aproximadamente, consiste en una interacción sencilla con la que se difunde un contenido hecho público por otro usuario con la finalidad de que lo vean los amigos de aquel que lo comparte. Su finalidad no es otra más que permitir que una publicación tenga un mayor alcance, aún cuando Plus the generated flock data, but this cannot be used to identify or track individual users. This enables companies to select ads based on the behavior of people with similar browsing behaviour, while preserving privacy.
Combat fingerprinting
Goal: Reduce the amount of potentially identifiable data revealed by APIs and make access to potentially identifiable data controllable by users, and measurable.
Browsers have taken steps to deprecate third-party cookies, but techniques to identify and track the behaviour of individual users, known as fingerprinting, have continued to evolve. Fingerprinting uses mechanisms that users aren’t aware of and can’t control.
-
Das Privacy Budget proposal aims to limit the potential for fingerprinting by identifying how much fingerprint data is exposed by JavaScript APIs or other ‘surfaces’ (such as HTTPEl HTTP (Hyper Text Transfer Protocol) es un protocolo que se usa para transmitir datos en redes. HTTP es un estándar técnico generalmente aceptado que establece cómo un cliente web se comunica con un servidor para que los datos solicitados por el cliente puedan ser cargados y mostrados. Información general Junto con el URL y el HTML, HTTP es uno de los conceptos más importantes de Internet (www). Fue desarrollado Plus request headers) and setting a limit on how much of this data can be accessed.
-
Fingerprinting surfaces such as the User-Agent HeaderConcepto de Header¿Qué es el Header?El Header, encabezado en español, es una definición que se usa en el terreno del diseño y la programación web para referirse a la parte de arriba de una página. Se trata del primer punto a ver por cualquier usuario que entra en un portal web, por lo que cuenta con una responsabilidad enorme y ha de contener la carga informativa esencial para mostrar la Plus will be reduced in scope, and the data made available by alternative mechanisms such as Client Hints will be subject to Privacy Budget limits. Other surfaces, such as the device orientation und battery-level APIs, will be updated to keep the information exposed to a minimum.
IP address security
Goal: Control access to IP addresses to reduce covert fingerprinting, and allow sites to opt out of seeing IP addresses in order to not consume privacy budget.
A user’s IP address is the public ‘address’ of their computer on the internet, which in most cases is dynamically assigned by the network through which they connect to the internet. However, even dynamic IP addresses may remain stable over a significant period of time. Not surprisingly, this means that IP addresses are a significant source of fingerprint data.
- Das Willful IP Blindness proposal is an attempt to provide a privacy-preserving approach that avoids consuming privacy budget.
Combat SpamEl spam puede ser definido como mensajes no deseados que se envían principalmente por vía electrónica. Se entregan sin haber sido solicitados por el destinatario, y suele ser promoción comercial. Existen varios tipos de spam, como el spam de email o el spam en las redes sociales. Los afectados pueden acudir a los puntos de contacto designados y buscar ayuda. Detección de spam El spam tiene muchas características por las Plus, fraud and denial-of-service attacks
Goal: Verify user authenticity without fingerprinting.
Anti-fraud protection is crucial for keeping users safe, and to ensure that advertisers and site owners can get accurate ad performance measurements. Advertisers and site owners must be able to distinguish between malicious bots and authentic users. If advertisers can’t reliably tell which ad clicks are from real humans, they spend less, so site publishers get less revenue. Many third party services currently use techniques such as device fingerprinting to combat fraud.
Unfortunately, the techniques used to identify legitimate users and block spammers, fraudsters, and bots work in ways similar to fingerprinting techniques that damage privacy.
- Das Trust Tokens API proposes an alternative approach, allowing authenticity established for a user in one context, such as a social media¿Qué es Social Media?Término en inglés que puede traducirse como medios sociales y que designa al conjunto de plataformas, herramientas, apps y medios de comunicación donde la información es creada y visualizada por los usuarios, que pueden compartir y transferir textos, fotografías, audio, vídeo… Dos ejemplos de social media son Facebook y Wikipedia.Otras denominaciones: Medios sociales Plus site, to be conveyed to another context, such as an ad running on a news site—without identifying the user or linking the two identities.
Enable domains to belong to the same first party
Goal: Enable entities to declare that related domain names are owned by the same first party.
Many organizations own sites across multiple domains. This can become a problem if restrictions are imposed on tracking user identity across sites that are seen as ‘third-party’ but actually belong to the same organization.
- First Party Sets aims to make the web’s concept of first and third parties more closely aligned with the real world’s by enabling multiple domains to declare themselves as belonging to the same first party.
Find out more
Privacy Sandbox proposal explainers
The Privacy Sandbox initiative needs your support. The API proposal explainers need feedback, in particular to suggest missing use cases and more-private ways to accomplish their goals.
A Potential Privacy Model for the Web sets out the core principles underlying the APIs.
The Privacy Sandbox
Use cases, policies, and requirements
Appendix: Glossary of terms used in the proposal explainers
Click-through rate (CTR)
The ratio of users who klicken¿Qué es un click?Es la acción de pulsar un botón del ratón una vez colocado el puntero del mismo sobre un elemento determinado de la pantalla. El click determina la interacción del usuario con el sistema.Otras denominaciones: Clic Plus on an ad, having seen it. (See also impression.)
Click-through-conversion (CTC)
A conversion attributed to an ad that was ‘clicked’.
Umwandlung
The completion of an action on an advertiser’s website by a user who has previously interacted with an ad from that advertiser. For example, purchase of a product or sign-up for a Newsletter¿Qué es una newsletter?Publicación digital periódica, transmitida generalmente por medio de del email, con la que una marca de comunica con sus usuarios, que previamente se han suscrito a ella, autorizando el envío de información. Es una herramienta con la que se busca fidelizar a clientes y mantenerles actualizados con noticias de ofertas, promociones y nuevos productos.Otras denominaciones: Boletín informativo, NW Plus after clicking an ad that links to the advertiser’s site.
Differential privacy
Share information about a dataset to reveal patterns of behaviour without revealing private information about individuals or whether they belong to the dataset.
Domain
See Top-Level Domain and eTLD.
eTLD, eTLD+1
‘Effective’ top level domains are defined by the Public Suffix List. For example:
co.uk
appspot.com
glitch.meEffective TLDs are what enable foo.appspot.com to be a different site from bar.appspot.com. The effective top-level domain (eTLD) in this case is appspot.com, and the whole wenn du name (foo.appspot.com, bar.appspot.com) is known as the eTLD+1.
See also Top-Level Domain.
Entropy
A measure of how much an item of data reveals individual identity.
Data entropy is measured in bits. The more that data reveals identity, the higher its entropy value.
Data can be combined to identify an individual, but it can be difficult to work out whether new data adds to entropy. For example, knowing a person is from Australia doesn’t reduce entropy if you already know the person is from Kangaroo Island.
Fingerprinting
Techniques to identify and track the behaviour of individual users. Fingerprinting uses mechanisms that users aren’t aware of and can’t control. Sites such as Panopticlick und amiunique.org show how fingerprint data can be combined to identify you as an individual.
Fingerprinting surface
Something that can be used (probably in combination with other surfaces) to identify a particular user or device. For example, the navigator.userAgent() JavaScript method and the User-Agent HTTP request header provide access to a fingerprinting surface (the user agent string).
First-party
Resources from the site you’re visiting. For example, the page you’re reading is on the site web.dev and includes resources from that site. See also Third-party.
Impression
View of an ad. (See also click-through rate.)
k-anonymity
A measure of anonymity within a data set. If you have k anonymity, you can’t be distinguished from k-1 other individuals in the data set. In other words, k individuals have the same information (including you).
Nonce
Arbitrary number used once only in cryptographic communication.
Origin
The origin of a request, including the server name but no path information. For example: httpsHTTPS (protocolo de Transferencia de Hiper-Texto) es un protocolo que permite determinar una conexión segura entre el servidor y el cliente, que no puede ser interceptada por personas no autorizadas. En resumidas cuentas, es la versión segura de el http (Hyper Text Transfer Protocol) Cómo funciona Una conexión HTTP estándar en Internet puede ser fácilmente secuestrada por partes no autorizadas. El propósito de una conexión HTTPS es evitar esto: encriptar Plus://web.dev.
Passive surface
Some fingerprinting surfaces, such as user agent strings, IP addresses and accept-language headers, are available to every website whether the site asks for them or not. That means passive surfaces can easily consume a site’s privacy budget.
The Privacy Sandbox initiative proposes replacing passive surfaces with active ways to get specific information, for example using Client Hints a single time to get the user’s language rather than having an accept-language header for every response to every server.
Publisher
The Privacy Sandbox proposal explainers are mostly about ads, so the kinds of publishers referred to are ones that put ads on their websites.
Erreichen
The total number of people who see an ad.
Advertising to people who’ve already visited your site. For example, an online store could show ads for a toy sale to people who previously viewed toys on their site.
Site
See Top-Level Domain and eTLD.
Surface
See Fingerprinting surface and Passive surface.
Third-party
Resources served from a domain that’s different from the website you’re visiting. For example, a website foo.com might use analytics code from google-analytics.com (via JavaScript), fonts from use.typekit.net (via a link element) and a video from vimeo.com (in an iframeConcepto de Iframe¿Qué es un Iframe?Un Iframe es un documento de una web que se inserta en otra página web. Consiste en un elemento que puede albergar cualquier tipo de contenido en su interior y que ayuda, entre otras cosas, a ampliar el mensaje que se ofrece con fuentes externas o con material complementario que pueda resultar de interés para el usuario que entra.Este elemento web se usa especialmente al Plus). See also First-party.
Top-level domain (TLD)
Top-level domains such as .com and .org are listed in the Root Zone Database.
Note that some ‘sites’ are actually just subdomains. For example, translate.google.com and maps.google.com are just subdomains of google.com (which is the eTLD + 1).
.well-known
It can be useful to access policy or other information about a host Vor making a request. For example, robots.txtEl archivo robots.txt es un documento que establece qué partes de un dominio pueden ser analizadas por los rastreadores de los motores de búsqueda y proporciona un link al XML-sitemap. Estructura El llamado “Robots Exclusion Standard Protocol“, Protocolo Estándar de Exclusiones Robots, se publicó por primera vez en 1994. Este protocolo define que los rastreadores de los motores de búsqueda deben buscar y leer el archivo llamado “robots.txt“ antes de Plus tells web CrawlerConcepto de Crawlers¿Qué son los Crawlers?Los Crawlers, además conocidos como arañas web, son los rastreadores enviados por los motores de búsqueda para ver qué existen de nuevo en todo Internet. Se les conoce además como indexadores o indizadores debido a su función. Estos programas son los responsables de analizar todo el conjunto de Internet para detectar las nuevas webs o actualizaciones que haya en las ya existentes y hacer que Plus which pages to visit and which pages to ignore. IETF RFC8615 outlines a standardized way to make site-wide metadata accessible in standard locations in a /.well-known/ subdirectory. You can see a list of these at iana.org/assignments/well-known-uris/well-known-uris.xhtml.
Thanks to all those who helped with writing and reviewing this post.
Foto von Pierre Bamin auf Unsplash.
