Tracking the Trackers: Where Everybody Knows Your Username
Click the local Home Depot ad and your email address gets handed to a dozen companies monitoring you. Your web browsing, past, present, and future, is now associated with your identity. Swap photos with friends on Photobucket …
Context & Ripple Effects
This Stanford Center for Internet and Society analysis extends the argument of the New York Times' 2010 How Privacy Vanishes Online reporting: the web's tracking economy has moved beyond anonymous behavioral profiles to attaching real identities to browsing histories. Earlier in 2011, Google's plan to build face search from social network photos showed identity being assembled from public material; this piece shows the plumbing that does it commercially — a single click on a local Home Depot ad passing a user's email address to a dozen monitoring companies.
First-order effects
- Users who click locally targeted ads have their email addresses handed to roughly a dozen tracking companies, which then associate their past, present, and future browsing with their identity.
- Photobucket users' photo-sharing activity is cited as part of the same monitoring ecosystem, meaning routine social sharing feeds identity-linked profiles rather than staying within the service.
Second-order effects
- Advertisers and ad networks gain a way to merge clickstream data with directly identifying information, making identity-linked targeting more valuable than the anonymous-cookie model most of the display market still runs on.
- Sites that embed third-party widgets and ads — Photobucket among those named — face pressure over what user data their partners collect, since the handoff happens inside ordinary features like photo swapping.
Third-order effects
- If ad-click-to-email handoffs become standard, the default assumption that browsing is pseudonymous collapses, pushing the policy debate toward consent requirements for linking web activity to real identities.
- The distinction between 'public' actions (sharing a photo, clicking an ad) and surveilled ones erodes, forcing platforms and regulators to define where permission boundaries sit around data users never explicitly handed to trackers.
The trend: Web tracking is shifting from anonymous behavioral profiling to identity-linked surveillance, with everyday actions like ad clicks and photo sharing serving as the handoff points where browsing history gets attached to a name.