Understanding the Privacy Risks of Popular Search Engine Advertising Systems

by   Salim Chouaki, et al.

We present the first extensive measurement of the privacy properties of the advertising systems used by privacy-focused search engines. We propose an automated methodology to study the impact of clicking on search ads on three popular private search engines which have advertising-based business models: StartPage, Qwant, and DuckDuckGo, and we compare them to two dominant data-harvesting ones: Google and Bing. We investigate the possibility of third parties tracking users when clicking on ads by analyzing first-party storage, redirection domain paths, and requests sent before, when, and after the clicks. Our results show that privacy-focused search engines fail to protect users' privacy when clicking ads. Users' requests are sent through redirectors on 4 of ad clicks on Bing, 86 Google, DuckDuckGo, and StartPage. Even worse, advertising systems collude with advertisers across all search engines by passing unique IDs to advertisers in most ad clicks. These IDs allow redirectors to aggregate users' activity on ads' destination websites in addition to the activity they record when users are redirected through them. Overall, we observe that both privacy-focused and traditional search engines engage in privacy-harming behaviors allowing cross-site tracking, even in privacy-enhanced browsers.


page 1

page 2

page 3

page 4


Privacy Limitations Of Interest-based Advertising On The Web: A Post-mortem Empirical Analysis Of Google's FLoC

In 2020, Google announced they would disable third-party cookies in the ...

Online information of vaccines: information quality is an ethical responsibility of search engines

The fact that internet companies may record our personal data and track ...

Masked LARk: Masked Learning, Aggregation and Reporting worKflow

Today, many web advertising data flows involve passive cross-site tracki...

Aggregate effects of advertising decisions: a complex systems look at search engine advertising via an experimental study

Purpose: We model group advertising decisions, which are the collective ...

Monitoring Data Requests in Decentralized Data Storage Systems: A Case Study of IPFS

Decentralized data storage systems like the Interplanetary Filesystem (I...

The use of personal data in French public services: applications, e-mails, websites, apps

The study we carried out enabled us to extract some conclusions, which a...

Comparing Apples and Oranges: Two Examples of the Limits of Statistical Inference, With an Application to Google Advertising Markets

We show how the classic Cramer-Rao bound limits how accurately one can s...

Please sign up or login with your details

Forgot password? Click here to reset