Starting Today 2-15-25 Google Starts Digital Fingerprinting

Fingerprints

Today is the rollout day for Google’s new tracking method that you cannot opt out of called Digital Fingerprinting.

Cookies don’t matter anymore. Now, Google is collecting the following information for use with advertising on its Google Ads platform and across all its properties and partner properties on the web.

Unique Signals Make Your Fingerprint

Google now records the following on you in order to create a unique digital ID of your online use and behavior that can be targeted with Google Ads advertising.

  1. IP address
  2. Device’s unique signature.
  3. Operating system and version
  4. Browser type used
  5. Battery level
  6. Language
  7. Screen resolution and screen size
  8. Keyboard plugins
  9. Network information
  10. User behavior online
  11. Device model and make
  12. Supported fonts
  13. User agent string
  14. Time zone
  15. Http headers
  16. Behavior data including mouse movements
  17. Typing patterns
  18. WebGL (Web Graphic Library) a JavaScript API that renders interactive visuals in a browser
  19. Device hardware information and configuration
  20. Graphics card details
  21. Other numerous signals

What Are the Experts Saying?

Other websites have stated that Google is collecting hundreds of data points including those mentioned above that are used to create a cross network digital ID that identifies your activity for targeting. I have not seen that this digital ID is matched to you as a known person, but that cannot be ruled out at this time.

What I do see is that all this collected information is used to create a unique profile that Google can then leverage in their advertising to make granular decision on who to target for remarketing, content advertising, and smart connected TV advertising.

Many privacy professionals and countries have expressed growing concern over this new tracking tactic and are posting complaints about this change. Of important note is that a user simply cannot opt out or control what data is being collected. This new tracking method is not like a cookie tracking. The end use does not have the ability to control or opt out of the information collection.

Below are a few comments from important agencies.

“The UK’s Information Commissioner’s Office (ICO) has called Google’s policy change to use digital fingerprinting “irresponsible”. The ICO says that fingerprinting is an unfair way to track users and reduces their control over their information.” Read more.

Regulators and privacy advocates have long warned the marketplace of the privacy dangers of fingerprinting techniques. For example, in 2015 the World Wide Web Consortium (W3C) came out strongly against fingerprinting, calling it a “blatant violation of the human right to privacy.” Read more.

“By allowing fingerprinting, Google has given itself – and the advertising industry it dominates – permission to use a form of tracking that people can’t do much to stop,” said Martin Thomson, distinguished engineer at Mozilla, a rival to Google.” Read more in this BBC article.

Our Take on Digital Fingerprinting

Of specific concern to our team at McCord Web Services is a  user’s inability to review the tracked data, to opt out, or to have data removed. These new tracking signals are not like browser cookies.

For advertisers on Google Ads, a digital fingerprint is maybe great news. A digital fingerprint allows for more robust tracking and therefore better ad targeting which may drive more targeted conversions.

We do expect more states, countries, and agencies to weigh in on this important topic that impacts a consumer’s privacy in the weeks to months to come.

What Can You Do Now?

You can add the WebGL Defender extension to your browser for now to capture a degree of privacy. This extension works for me in Edge and Firefox. The extension thwarts tracking by generating a fake response for the tracking in the WebGL category which may to a degree thwart the fingerprinting.

However, as the WebGL is a JavaScript library, some websites have not worked for me (GoDaddy is one of them), as it perceives that JavaScript is off.

Be aware that Google has already stated that JavaScript must be turned on to use the Google.com search engine as of February 15th. Read this article on that topic.

As more information becomes clear, we will keep you updated on this important change.

To find out more about McCord Web Services and what we do, please visit our website at McCordWeb.com.

Leveraging Consent Mode: A Must for Your Website and Google Ads Strategy

Solutions Ahead Privacy Forward Marketing

In an era where data privacy is paramount, businesses must adapt to ever-changing regulations to ensure compliance and maintain customer trust. One essential tool in achieving this is Google’s Consent Mode.

As Google Partner’s and Google Ads specialists, we want to assure that you and our customers stay up to date on things we feel are important to embrace in order to be compliant with privacy protection for website visitors.

This blog post will explore what Consent Mode is, its significant benefits, and the steps to implement it on your website and Google Ads.

What is Consent Mode?

Consent Mode is a framework developed by Google to help websites and advertisers manage user consent for data processing. This feature allows you to adjust how Google products, such as Google Ads and Google Analytics, behave based on the consent status of your visitors.

When a user does not give consent to data collection, Consent Mode modifies the behavior of tracking scripts to respect these preferences, ensuring compliance with privacy regulations. This means that while essential functionalities remain, the data collected for advertising and analytics is limited, keeping your operations within legal boundaries.

Key Benefits of Using Consent Mode

  1. Compliance with Privacy Regulations

One of the most significant benefits of implementing Consent Mode is that it helps your business stay compliant with privacy laws, such as the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). These regulations require explicit user consent for collecting and processing personal data. Consent Mode ensures that user preferences are respected, mitigating the risk of non-compliance and potential fines.

  1. Enhanced Trust and Transparency

By visibly respecting user consent, your business fosters a sense of trust and transparency. Users are more likely to engage with your brand when they know their privacy preferences are honored. This can lead to increased customer loyalty and a better overall user experience.

  1. Improved Google Ads Functionality

Google has indicated that using Consent Mode is crucial for the continued effectiveness of Google Ads features. Without activating Consent Mode, remarketing or customer match lists may not be served as audiences in the future. Additionally, conversion tracking might be disabled in Google Ads accounts, severely limiting your ability to measure and optimize campaign performance.

  1. Data-Driven Decision Making

Even without full user consent, Consent Mode can still provide valuable insights. By leveraging aggregated and anonymized data, businesses can continue to make informed decisions without compromising user privacy. This ensures that marketing strategies remain data-driven and effective.

Steps to Implement Consent Mode

Implementing Consent Mode on your website involves several key steps:

Step 1: Partner with a Cookie Service Provider

To manage user consent effectively, you’ll need a cookie consent service provider, such as Cookiebot or OneTrust. We personally like Cookie Script for our own provider and for our clients. These tools help you collect, manage, and store user consent preferences in compliance with privacy regulations.

Step 2: Configure Google Tag Manager

Next, set up Google Tag Manager (GTM) to handle the consent signals from your cookie service provider. GTM allows you to deploy and manage various tracking scripts on your website, ensuring they respect user consent preferences.

Step 3: Integrate Google Analytics and Google Ads

In GTM, configure Google Analytics and Google Ads tags to work with Consent Mode. This ensures that data collection and ad functionalities adjust based on the user’s consent status. Google’s documentation provides detailed instructions on how to set this up.

Step 4: Test and Validate

Once everything is configured, thoroughly test your implementation to ensure it works correctly. Monitor the behavior of your tags and make sure they adjust according to user consent preferences. Validate that data collection and ad functionalities comply with privacy regulations.

Conclusion

In today’s digital landscape, prioritizing data privacy is non-negotiable. By implementing Consent Mode, your business can stay compliant with evolving privacy regulations, build trust with users, and maintain the effectiveness of your Google Ads campaigns. Don’t wait until it’s too late—start integrating Consent Mode today to safeguard your operations and continue thriving in a privacy-conscious world.

For more detailed guidance and resources, visit Google’s official Consent Mode documentation and take the first step towards a more compliant and transparent digital strategy.

Your Privacy – What Are You Doing About It?

Your Privacy - It is a Commodity

Read any newspaper like the Wall Street Journal and you’ll see conversations about privacy and the changes that are happening soon with Apple, Facebook, and now with Google Chrome. You have a right to be concerned about how big business is working to continue to make money off of serving you ads with persistent tracking cookies.

Apple and Facebook are in a finger pointing game with Apple rolling our new privacy updates in a new iOS roll out and Facebook putting up a wall to garner your tracking approval for ads. Add to this Google’s change to the Chrome browser which will block third party tracking cookies and now group your data in audiences for proprietary ad targeting and you will see that big business considers your online activity a goldmine for their own purposes – to make money by serving you ads.

These internet behemoths do not have your best interest at heart – protecting your privacy. Their interest is in making money off of the information you share or share unwittingly. Case in point, have you looked at something online and then in minutes seen the product appear in your Facebook feed? Of concern to me is voice conversations had near an Alexa, and then ads appearing for that item in Facebook shortly there after. Could it possibly be that Alexa is now involved in ad targeting or was this just  a fluke?

Google knows everything that I do and I am starting to get uneasy with that knowledge. As my firm work for a cancer treatment firm, for criminal lawyers, and for bed bug exterminators, and we do a wealth of research for them, Google now thinks that I have cancer, am embroiled in criminal enterprises, and have bed bugs at my home.

I personally have started to take action to minimize my online data footprint out of exhaustion with targeted advertising and the inherent loss of control and incessant “watching”.

Here’s what I am doing right now to try to get back in control of my data.

• I have minimized all activity on Facebook. I am testing out MeWe.com as they voice that they do not collect data or (at this time) use my data from the platform for advertising. But, no friends or family members are using this platform except my husband. I may simply abandon Facebook.

• I use only the Microsoft Edge browser and do not use Google Chrome except for a narrow work purpose. Edge has better privacy control and on top of that is super fast. A win-win in my eyes. Google knows too much about me and I am not willing to supply more information at this point. I may even start using secure private browsing just to stop tracking.

• DuckDuckGo – is the search engine that powers my own website searches and I have recently downloaded their mobile browsing app and am considering using the desktop version as my search engine of choice. They now show ads, but still claim to protect a user’s privacy.

I have previously felt that the more Google knew about me the better it was for me, as search results and ads were always tailored to things I thought I wanted. But now, I am more wary.

My privacy is starting to be a commodity that I am unwilling to share freely. I am now wanting more control over who knows what about me and who uses my information for ad targeting and how.

 

An Update on the EU’s GDPR for Privacy

Nancy McCord is a Google and Bing Partner
Nancy McCord is a Google and Bing Partner

Since I last wrote about the privacy updates that are mandated by the EU to cover website traffic on American websites by EU nationals, much has happened.

First, clients who thought that they did not want to update their privacy policy or implement cookie approval for website statistic tracking have changed there minds.

Our team has been very busy updating websites to beef up the transparency of the privacy policy, reveal clearly what is being tracked on websites, offering ways to opt out of tracking, and installing cookie approval scripts on websites.

Several clients have shared their thoughts with us on why the sudden change. Some are listed below.

“I do feel lucky about not getting caught, but also want to be safe.”

“I’ve just had a lawyer call me and I feel like I need immediate action on the privacy updates as I don’t want to end up in court on a new matter.”

“I think it is stupid to do, but I am getting inundated with privacy policy updates from everyone that I do business with, that maybe I do need to do something to my website.”

As for me, my perspective is that it is not expensive or hard to do the implementation to be in compliance with the GDPR. I am risk adverse and feel that eventually the US will institute some controls so we will be ahead of the game by changing our own websites now.