WTF are private state tokens in Google’s Privacy Sandbox?

This article is part of a special Digiday editorial series to catch you up on the basics of Google’s phaseout of third-party cookies. More from the series →

The third-party cookie’s deprecation — and broader crackdown on cross-site tracking practices, such as device fingerprinting — comes with side effects. One side effect is losing the means for companies to combat bot traffic. To account for this consequence, Google’s Privacy Sandbox features a proposal for fighting fraudulent traffic called Private State Tokens.

Private State Tokens effectively have sites that are able to authenticate site visitors be the ones to vouch for those visitors’ authenticity so that they can be trusted by other sites. As broken down in this explainer video, it’s akin to a friend recommending a therapist to another friend — albeit with the web browser providing a privacy-preserving means for passing on that recommendation.

More in Marketing

The official judgmental map of Cannes Lions 2026

This map won’t tell you where to go during Cannes Lions. It will tell you where you actually are.

The definitive Digiday guide to what’s in and out at Cannes 2026

Here’s what’s in and out for the Cannes Lions International Festival of Creativity.

As AI reshapes search, TikTok turns discovery into a performance pitch

The platform argues rising search activity is evidence that discovery is increasingly driving performance outcomes advertisers expect.