WTF are private state tokens in Google’s Privacy Sandbox?

This article is part of a special Digiday editorial series to catch you up on the basics of Google’s phaseout of third-party cookies. More from the series →

The third-party cookie’s deprecation — and broader crackdown on cross-site tracking practices, such as device fingerprinting — comes with side effects. One side effect is losing the means for companies to combat bot traffic. To account for this consequence, Google’s Privacy Sandbox features a proposal for fighting fraudulent traffic called Private State Tokens.

Private State Tokens effectively have sites that are able to authenticate site visitors be the ones to vouch for those visitors’ authenticity so that they can be trusted by other sites. As broken down in this explainer video, it’s akin to a friend recommending a therapist to another friend — albeit with the web browser providing a privacy-preserving means for passing on that recommendation.

More in Marketing

Lowe’s wants to do more with AI shopping in 2026

Mylow, a shopping assistant powered by ChatGPT that launched in March, is already driving double the conversion rate for online shoppers.

‘This isn’t the old pre-roll world’: YouTube has been talking TV — now it’s selling that way

YouTube is ramping up efforts to get TV’s largest advertisers to move more of their budget into its platform.

As every screen becomes shoppable, attribution problems resurface

As more media environments become points of purchase, attribution and measurement remain the thorn in the side of commerce execs.