Showing posts with label third party cookies. Show all posts
Showing posts with label third party cookies. Show all posts

Tuesday, February 18, 2014

Cookies, the Pros and Cons.

The good and bad of cookies.

Cookies are “a piece of text that a Web server can store on a user's hard disk.”[1]The term is being used a lot in the media today. With a push for greater privacy the cookie has come under attack. Online advertisers are using cookies to assist them in tracking you online habits in order for them to more efficiently advertise to you. But before you say that you want to get rid of all cookies for good, there is some value in a cookie.

The good.

Cookies can be used by websites for a variety of good reasons. The main reason that cookies came into existence is to make the online experience better by allowing websites to know that you are using a specific computer and what your preferences are. Examples of the benefits are:

· Shopping carts

· Remaining logged in

· Store user preferences related to specific site

· Security - Verify that you are who you say you are (when you have to answer a security question the first time you log in to a website, but don’t have to after that)


The bad

Cookies have received a bad name for some of the following reasons. Some users may not view these as problem, but with internet security becoming a bigger concern more users are becoming cautious on the web.

· Creates a profile (perhaps temporary) with a company that you may not want t profile with.

· Third party cookies allow marketers to track you across multiple websites.

· There are some concerns involving cookie theft or hijacking.


Overall, cookies allow for a better online experience. The threat of the marketer viewing your activity does not outweigh the benefits of cookies. If you are one who is concerned with cookies you can disable cookies on your browser by following this Wiki [2]. I recommend disabling third party cookies if you want to reduce the "creepy" factor of advertisers. You can also see what cookies have been stored on your computer and delete them by searching online for your browser to find out where they are stored.

Monday, February 17, 2014

Browser Cookies 2.0 - Google AdID - The Holy Grail of user information

Browser Cookies?!?!

Tania recently posted a blog entry explaining what web cookies are, how they work, and how to manage them.  At a basic level cookies allow information to be aggregated about you and your browsing habits.  This helps content providers (but mostly marketers) tailer a more relevant experience for users but also raises privacy and security concerns as these shadow profiles are enriched over time.

Google browser cookies - Google AdIDBrowser cookies come in two varieties, first party and third party. [1]  The first party variety are generally the more benign of the two and only aggregating data in the current site where you are visiting.  Third party cookies however, go where you go.  They can collect product preferences from Pinterest, employment information from LinkedIn, and just about anything else from social media.  This cocktail of information can be powerful for marketers and potentially dangerous in the wrong hands.

As users, we tend to leverage multiple browsers, tabs, and even platforms (phone, tablet, desktop, e-reader, gaming systems, etc) to facilitate our data and connectivity addictions.  This makes it more difficult for the third party cookies to get the "full" story.  Users can also block and delete cookies (see "Do Not Track").  These weaknesses have lead to companies like Google to create solutions to stitch some of these data holes together (like linking all your Crome profiles together, platform agnostic).

Holy Grail?!?!

intelligent third party cookie
It would be naive to think that companies would stop short of the 'Holy Grail' of user information. Google is already working on an alternative to cookies called AdID.  Essentially, the search giant is building an "anonymous identifier for advertising, or AdID, that would replace third-party cookies as the way advertisers track people's internet browsing activity for marketing purposes." [2]

Browser Cookies vs Google AdID - Source: http://online.wsj.com/news/articles/SB10001424052702304682504579157780178992984


There are interesting implications of this development [3] but its important to note that the devil is in the details, all of which are speculative at this stage of development.

The Good:

  • The AdID is intended to be an anonymous
  • Ownership of the AdID is consolidated which can allow for better governance. This is a slight improvement over the smorgasbord of third parties tracking user traffic with almost no governance.
  • Users will theoretically be given tdiscretion over how much data (or which data) is aggregated
  • There might be a "private browsing option"

The Bad:

  • Although intended to be anonymous, it has a huge potential to be linked to something not anonymous like an email or G+ profile
  • Tracking is tracking. The information can be willingly sold, lawfully subpoenaed, or wrongfully stolen
  • If you are a company tracking users with cookies, future browsers like Crome, may auto-block (verses the current opt-in) cookies. Your only option will be to pay the big boys for that information.

The bottom line

Should we hate Google for doing this to us? It's hard to blame them for wanting to profit off the information that they serve us for free.  Besides; Microsoft, Apple, and FaceBook are in the game too. [4] Users need to take more ownership of their personal information and activities and choose when and how it can be used, otherwise, someone else will.


=========================================================
[1] http://adage.com/article/digital/google-s-plan-replace-cookies/244302/
[2] http://www.engadget.com/2013/09/18/google-adid-an-anonymous-identifier-advertising-cookie/
[3] http://www.digitaltrends.com/opinion/what-is-google-adid-and-how-will-it-replace-browser-cookies/
[4] http://online.wsj.com/news/articles/SB10001424052702304682504579157780178992984

Wednesday, February 13, 2013

Umm, Them tasty Cookies


Overview

Cookies can provide you with essential information about your website's visitors, allowing you to make the best use of your advertising dollars. Recently however, some individuals and groups are questioning the ethical issues behind online cookies. Some argue that cookies are an infringement of privacy, others think that cookies will destroy your computer. On the other side of the battle, supporters of cookies claim that cookies are mutually beneficial between web users, and site administrators. In this post I'm going to briefly discuss a few point about cookies: what a cookie is, what a cookie isn't, different types of cookies, and reasons why you as a webmaster should be using cookies on your site.

What is a Cookie?

Cookies are simply text data sent from a website, then stored on your computer's hard drive. This text contains information about the profile of the web user, such as browsing history and click patterns.The data contained in the cookie can be put to a number of uses, from helping websites identify who its visitors are, to enabling the website to effectively select the right advertisements to put in front of its visitors. Cookies also improve the website visitor's experience by remembering user's preferences. There are also many more uses for these cookies.

Cookies are made up of text data with five variable-length fields: expiration date, domain, path, secure / not secure, and name. These fields all effect how the cookie is used. The expiration date dictates when the cookie will expire. If there is no expiration date, then the cookie will expire as soon as the visitor closes the browser. The domain field is simply the name of your website. The path field contains information about what site the visitor was on before they found your site. The secure / not secure field dictates when the cookie can be retrieved. I the field is "secure," then the cookie will only be accessed through a  secure server. If the field is blank, then there is no restriction as to when the cookie can be accessed. The name field is just the name of the cookie.

Cookies also have restrictions and limitations. For example, a cookie can't be larger than 4K, and each domain can only have 20 cookies. There are no limits however on the maximum amount of cookies a browser can support. However, RCF 2109 6.3 defines the minimum amount of cookies a browser can support to be 300.

What a Cookie isn't

Cookies are not malicious programs out to destroy computers, in fact, they're not programs at all. If a computer is infected with a virus, or has spyware on it, it is true that these can read the cookies on the hard drive, but cookies aren't the problem and they will not destroy your computer; malware is the problem that needs some attention.

First Party vs Third Party cookies

All cookies can fit into one of two groups: first party cookies, and third party cookies. First party cookies are given to the website visitor by the current website domain that he is visiting. A third party cookie is one that is given to a website visitor by a different domain than which he is currently visiting. Webmasters typically use these to track visitor’s traffic to other sites. There is also a case involving first party cookies, but the information from the user, instead of going back to the original domain, is sent to a third party for analytics. To the right I've included diagrams that explain all three of these scenarios.


Session vs Persistent Cookies

Not all cookies are saved on visitor's hard drive. Session cookies are saved in a visitor's browser until they are done with their session. Session cookies allow websites to recognize their visitors as they navigate through the various webpages on their site, but then once the session is ended, the cookie is discarded. E-commerce websites use these when tracking the items in your shopping cart. Persistent cookies however, are stored in a visitor's temporary folder on their hard drive. Webmasters can use this information to identify returning users to their website.

Why Should I Use Cookies?

 Below I've included a list of reasons you should be using cookies on your website.

  • To track shopping carts on your website
  • Using cookies is the best way to follow your traffic
  • Cookies can store user preferences, improving your visitor's experience
  • If you have multiple sites, you can track your traffic between the sites
Almost all major websites are using cookies, with the exception of Federal Websites (see M-03-22). Although there are many individuals and groups out there who are against the use of cookies (mainly third party cookies), cookies are almost a necessity for any company that heavily relies on their website.

Most information used in this post was found in the links below.




























Saturday, January 26, 2013

Cookies and Parties!

Most popular web analytics platforms these days utilize cookies as an integral part of their data collection and compilation.  Simply put, cookies are basic text files which are placed on your computer when you visit a web site.  Not as tasty or exciting as the title might indicate...

Web sites can use one of two types of cookies, 1st party or 3rd party (again, not as exciting as it may sound).  1st party means that the domain on which the user is browsing is the same domain which is issuing the cookie.  For example, if I were on blogspot.com and the site issued to me a cookie with a domain of blogspot.com, then this would be a 1st party cookie.  If I were on blogspot.com and recieved a cookie from the site with a domain of travis.com, then this is a 3rd party cookie[3].  All very exciting, I know.

1st Party vs. 3rd Party Cookies
So, what's the difference?  Well, generally speaking, the general consensus is that 1st party cookies are considered to be more secure and trustworthy (mostly due to periods of 3rd party cookie abuse by nefarious troublemakers on the web).  In fact, in his book Web Analytics 2.0, Avinash Kaushik offers a rather scathing review of web analytics providers who primarily use or promote third party cookies.  While there are some clear reasons why 1st party cookies may be preferred for many analytics implementations, there are equal reasons for which 3rd party cookies might be the dessert-themed file type of choice.  So, let's take a closer look at the oft-shunned red-headed step-brother of the illustrious 1st party cookie and see what it has to offer the world and why it's so misunderstood. (And to be fair, Avinash is more harsh on the providers which refuse to use 1st party cookies in any situation, even calling for cases where 3rd party cookies have some clear strengths[5])

Popularity
There are a couple of clear market misperceptions with regards to 3rd party cookies.  First, is that they are less acceptable for analytics deployments and should be avoided.  comScore, a leading digital analytics provider has oft been criticized for its long time promotion of 3rd party cookies, including its cookie of choice, b.scorecardresearch.com[2].  Unfortunately for those waging the smear against 3rd party cookie usage, they are probably unaware that it is likely that they themselves are also using a leading analytics provider with a 3rd party cookie preference, namely and surprisingly, Adobe Omniture (Site Catalyst).  *Collective gasp*  Truth be told, using 3rd party cookies is quite versitile (cross-domain tracking) and is also likely to be easier both for you and your analytics provider to implement.  In fact, the reason for which comScore has historically been so in favor of the 3rd party cookie is that long before its entrance into web analytics (Digital Analytix- the product), comScore was (and is) an industry leader in digital analytics (the industry).  For anyone unfamiliar with the difference, web analytics deals with site measurement (your data) and digital analytics deals with audience measurement (comprehensive internet collection).  In order to more effectively measure the audience of the internet (a small task...I'll have the numbers over this afternoon...), comScore made public its 3rd party tag to anyone willing to use it.  Combined with a 2 million person panel, this tag allowed accurate audience measurement across all leading internet properties[1].  Simply put, this would not be possible without 3rd party cookies.  Little brother's starting to look just a little cooler...

Security and Privacy
Ok, great, so 3rd party cookies allow easier implementation and cross-domain measurement, but their not secure, so even with the added benefits, I just can't commit to them.  Privacy is simply too important.  Well, yes and no.  Sure, 3rd party cookies have a bad rap due to their abuse.  However, there are still ways of guaranteeing the safety of individual 3rd party cookies.  A few bad apples shouldn't have to spoil the whole batch, #amiright? Today's 3rd party cookie, combined with rigorous and industry certified seals of compliance help to secure validate trusted 3rd party cookies[2].  So, if you're worried about it, take a look at the privacy policy posted on the site, investigate the cookie origin, and look for an industry accepted validation or seal to prove the cookie's security and usage.  I know it's hard to admit, but 3rd party isn't sounding quite so bad now is it?!
Cookie Deletion
Well, then, Mr. 3rd party cookie advocate, what about cookie deletion?  It's a proven fact that cookie deletion rates are higher for 3rd party cookies.  So at the end of the day, even if I trust your 3rd party cookie, it's not going to give me good data.  Boom...game, set...

Well, I hate to burst your bubble, but there's an acceptable answer for this one too.  Yes, it is generally accepted by many that deletion rates are higher for 3rd party cookies.  But it's likely that it is not as prevalent or troublesome as has been assumed.  comScore, for example, has done studies (I know, conflict of interest, so you do get me there, 1 point, but keep listening...) which show that cookie deletion rates tend to vary between the two by only 4% or so[1].  To be fair, there are numerous other studies which quote a difference of closer to 20%[3][4].  From my own experience as a Business Consultant for a web analytics provider (I'll let you try and guess which one), I've noticed that the difference is much closer to itdoesn'treallymakeaverybigdifferenceeitherway%.  The honest truth is that web analytics is meant to provide actionable insights.  As long as you can get an idea of what's happening on the other side of the your web servers, the honest truth is that perfect numbers are rarely the answer to any question.  Yes, more accurate data is generally better data, but I have yet to see clear evidence that a 3rd party cookie analytics implementation is any worse at providing those actionable insights than a 1st party cookie implementation, or even that the data is any less accurate or less reliable.  And the honest truth is that you could run a host of unique analytics platforms on your site, both 1st and 3rd party and not a single one of them will provide the exact same numbers to you.  Wait, wha???  That's right, go ahead, give it a shot...no two will match up perfect, I can promise it.  So you tell me which one is giving you the "better" data...  Not to add fuel to the flame, but take into account that nearly all leading web browsers come with 3rd party cookie acceptance as default and most people don't mess with their browser settings ("I'm computer illiterate!! Tehehe..."ever heard that??) and it lends a lot less credence to the argument that 3rd party deletion rates are as high as reported.

Conclusion and victory
Now, in the spirit of fairness, 1st party cookies are great.  And they have their place.  And some people need them.  But are they the only answer and the best answer and a gift to security conscious, privacy aware, focused on accuracy analysts everywhere? No.  And are 3rd party cookies the plague, and evil and will ruin your life and the lives of your visitors? Absolutely not.

So go ahead, have another cookie... and switch it up for a change...

Might I suggest a 3rd party cookie?  Try it, you might just like it...

---------------------------------------------------------------------------------

[1]http://www.comscore.com/Insights/Press_Releases/2007/04/comScore_Cookie_Deletion_Report
[2]http://www.guardian.co.uk/technology/2012/apr/23/scorecardresearch-tracking-trackers-cookies-web-monitoring 
[3]http://www.opentracker.net/article/third-party-cookies-vs-first-party-cookies
[4]http://www.kaushik.net/avinash/web-analytics-visitor-tracking-cookies/
[5]http://www.kaushik.net/avinash/competitive-intelligence-analysis-why-what-how-to-choose/
Photo courtesy of:  http://www.digibuzzme.com/beware-of-the-cookie/