Impacts of Apple’s latest privacy update thwarting ‘link decoration’
With Safari’s anti-tracking feature, Intelligent Tracking Prevention 2.3, Apple fired a warning shot at companies using “link decoration” — a method of passing information through code added to a URL — as an alternative to third-party cookies, closing yet another loophole in its quest of killing off cross-domain tracking through third-party cookies.
For years, link decoration has been used to track referrals. Apple’s concern: Companies have been using link decoration to sidestep Apple’s privacy-focused plans to rid the web of persistent tracking.
Apple’s recent update pointed to the “continued abuse” of companies using link decoration as a workaround to track people in response to earlier ITP updates. As part of the update, Apple thwarted link decoration use by putting a seven-day limit on all non-cookie storage data, like local storage — a type of web storage that allows sites to store data directly in the browser typically with no expiration date.
“The more Safari traffic you have coming to your website, the more you would be impacted by the changes,” said Adriana Tailor, head of data and insight at TI Media. “Beyond CPMs, which everyone agrees has a lower value for Safari inventory when compared with Chrome [around 30% lower], the biggest impact will be for agencies and advertisers to report performance.”
Each release of Apple’s ITP update has led to some drop in publisher CPMs as more identifying data on Safari audiences is stripped out. With Apple’s crackdown on link decoration specifically, publishers have noted that their analytics tools aren’t working as they would expect, said Joe Root, co-founder of data platform Permutive, which offers alternatives to third-party cookies. The company has previously said that the platform is unaffected by the ITP updates.
“Facebook IDs could be getting recycled faster,” said Root. “After seven days, they could count as a new user when they aren’t.” For publishers, for now, this is more annoying than really damaging. But the direction of travel toward a data-privacy first advertising ecosystem is clear.
In the long term, for publishers making use of their first-party data, it’s an opportunity for them to take back more control of CPM prices and encourage advertisers to buy against that data, added Root.
“ITP is the environment publishers will flourish the most in. It puts them back in control,” he said. “In this update, Apple is making a request for publishers to help them clean up the web.” Publishers and marketers can strip out link decoration so they don’t fall foul of Apple’s increasingly restrictive privacy terms. For publishers, this is a fairly low lift.
Subscription publishers and those with scaled authenticated-logins are in the lead with how they are flexing their first-party data strategies. The issue with the latter is getting login alliances to scale when they’re met with headwinds like working with competitors, configuring technical issues and generating enough interest from buyers.
Vendors who aren’t able to pivot quickly enough to respond to Apple’s changes will struggle. The number of companies offering alternatives to third-party cookies continues to grow, ratcheting up the game of cat and mouse. But ITP 2.3 also appears to put Facebook, which uses link decoration and is likely classified as a tracking domain, in the firing line.
“This version looks like going after Facebook,” said Root, adding that in recent earnings calls Facebook referenced that it is finding it increasingly difficult to target Apple audiences. “There could be some downstream impact on the platform.”
For context, the Safari audience impacted by ITP 2.3 is still going to be a slice of publishers’ Safari traffic, which in turn can be between 30% and 40% of traffic. But Apple isn’t done killing off cross-domain tracking, and, increasingly, industry onlookers fear Google’s Chrome browser, which has been flirting with third-party cookie crackdown, is ramping up its efforts.
For now, this sting from ITP 2.3 isn’t as bad as earlier updates. “A seven-day expiry on this type of data [using local storage] is much better than the one-day expiry that first-party cookies get from the same process,” said Tailor. “However, it’s impossible to rule out changes to this expiry date. Future ITP updates may put a one-day expiry date on non-cookie storage.”
How publishers are handling the Juneteenth holiday this year
A number of publishers are observing Juneteenth this year, but not in the same way, with some making it an official holiday and others encouraging employees to use their PTO to take the day off.
Member ExclusiveMedia Briefing: How media companies’ DE&I efforts, office return statuses are affecting hiring
This week's Media Briefing looks at how issues like diversity, equity and inclusion and office return statuses are factoring into media companies' ability to hire people.
Cheat Sheet: How new antitrust bills could force more data access from Facebook and Google (and stop them from favoring their own services)
A set of bills proposed recently could force platforms to stop favoring their own services and give more data access and tech connectivity to others.
SponsoredIdentity solution fatigue is setting in: How to keep moving
By Kristina Prokop, CEO and co-founder, Eyeota As we move deeper into 2021, the desperate search for identity solutions that can smooth marketing organizations’ transitions to a cookieless world is reaching a fever pitch. There’s no shortage of new identifiers and identity technologies vying for attention — and that’s a big part of the problem. […]
Single-source panel measurement is key to optimizing social media planning, says DISQO report
New study is based on responses from 166,000 U.S. consumers in February and March, each of whom voluntarily allowed to have their digital behaviors observed.
BuzzFeed will finally monetarily reward its Community users for their viral quizzes, lists
BuzzFeed is testing to see if user-generated content could identify new areas of coverage for its staff, and bring in niche audiences, with a new summer program that could pay a contributor up to $10,000 for a viral post.