Unraveling header bidding’s problems with user data
Ad tech is all about tradeoffs.
Although header bidding has been heralded for its ability to increase revenue for publishers, an overlooked downside is that it can expose user data by allowing all bidders to access audience data. Header bidding also makes it easier for fraudsters to hide in the noise created by the vast amount of data points that come from multiple parties bidding on all available impressions.
“There are some real security concerns about header bidding that aren’t being talked about,” said an ad-fraud researcher requesting anonymity.
Because waterfalling — a technique where publishers move inventory from one market to the next — is inefficient at driving revenue, many publishers adopted header bidding, which simultaneously offers inventory to multiple exchanges before making calls to their ad servers. While waterfalling is clunky, one benefit of this technique is that it limits how much user data the bidders could harvest, said Todd Garland, CEO of digital ad network BuySellAds.
For example, if the highest-bidding network in the waterfall wins 50 percent of the impressions in the auction, then subsequently, half of the impressions for sale won’t get passed along to other networks. With this approach, each network only obtains user data from whoever they sell impressions to, which is only a fraction of the total audience that the total impressions in the auction are sold to, Garland said.
But with header bidding having all calls go out simultaneously, each bidder can get access to data from all the users who were served impressions from the auction. A Rubicon Project spokesperson said, on average, the top 100 publishers in terms of comScore traffic have four header bidding partners. But it also isn’t unheard of for publishers to near double digits with their bidders.
“Many exchanges allow demand-side platforms to take bid requests and basically just ‘listen’ for data without spending money,” said independent ad tech consultant Brad Holcenberg. “So the more [bidding partners] you work with, the more likely the data gets to their customers and can leak out further from there.”
While sources did not share any first-hand experiences, data leaking can be problematic for both publishers and users. When data leaks, it can devalue publisher inventory because retargeters use audience data from premium publishers to target their users while they’re visiting websites that have lower CPMs. Hyper-targeting can also irritate users and turn them onto ad blocking. And in the most extreme cases, leaks of personal data can allow bad actors to hack people’s personal accounts and devices.
Jeremy Hlavacek, vp of programmatic at The Weather Company, said that while header bidding does make it easier for programmatic platforms to obtain user data, this effect is mitigated by the fact that data aggregators are connected to most supply-side platforms, so they can find indirect ways to obtain and sell user data even if waterfalling limits direct access to user data. But Hlavacek pointed out that with multiple partners bidding on all impressions available in the auction, header bidding significantly increases the amount of data points in the exchanges. Other sources said it’s this data deluge that is most problematic when it comes to security.
“Header bidding generates as much as 10 times the amount of calls to get the same result,” said Tom Kershaw, chief technology officer of Rubicon Project. “Whenever you generate that much noise, it is much harder to track [fraudulent activity] because it becomes easier for people to hide.”
Speaking on the condition of anonymity, an exec from an ad tracking firm said that data leakage is not affected by whether a header bidding product is browser-based or server-side. However, moving the auction to direct server connections could theoretically give publishers more control over who is bidding on their inventory.
“Regardless of the setup, it’s about your governance and having control over which vendors are involved with bidding,” the exec said. “It can get out of control if it is not managed properly.”
‘We see a world where publisher data replaces third-party data’: News U.K. puts its data at the nucleus of post-cookie push for media budgets
News U.K. has overhauled the way it collects, sorts and monetizes its audience data across all its titles via first-party data platform Nucleus.
Here’s why the loss of the third-party cookie is heading toward a collapse in the middle
In the absence of third-party cookies, marketers will need to work more closely with trusted publishers to reach their audiences. Who will lose out? It is posed for a collapse in the middle.
Member ExclusiveMedia Briefing: What to expect from the Digiday Publishing Summit
This week's Media Briefing previews the upcoming Digiday Publishing Summit, which kicks off on Sept. 27 and will feature speakers from media companies including The Washington Post, BDG, Group Nine Media and Essence.
SponsoredHow retailers can be ready for holiday shoppers this year
Suchi Sastri, managing director and partner, Boston Consulting Group As the holiday season approaches and the pandemic continues to evolve, retailers want to know what to expect. Will e-commerce continue to grow at the rate it did last year? How big of a role will in-store shopping play in holiday shopping? While it’s still early, […]
How the pandemic has been a real a buzz kill for office happy hour bonding, culture
As COVID-19 crawls on, more companies are rethinking the wisdom of mixing booze and the stresses of the workplace.
‘Football has lost its soul’: How Copa90 is repositioning itself around the creator economy
Copa90’s overseers believe there’s another shift happening in tandem with the corporatization of the sport that has the potential to be just as transformative