W3C home > Mailing lists > Public > public-tracking@w3.org > December 2011

Re: Re ISSUE-26: When a 3rd party becomes a 1st party

From: Bjoern Hoehrmann <derhoermi@gmx.net>
Date: Thu, 15 Dec 2011 22:30:11 +0100
To: Shane Wiley <wileys@yahoo-inc.com>
Cc: <public-tracking@w3.org>
Message-ID: <27kke716r8dqr89siu1bpqnl3cp6ohs67s@hive.bjoern.hoehrmann.de>
* Shane Wiley wrote:
>I believe when users click on the FB "Like" button they every
>expectation this is going to set the "Like" for that particular item on
>their Facebook page.  Do you have information suggesting users that
>click on the FB Like button do not have this expectation?

It does not seem to matter much whether Facebook is first or third party
in this particular scenario, a user who understands the "like button" is
really asking Facebook to log that they visited this site and when and
so on. A better example would be a third party map service. It does not
seem very plausible that the map service provider would be third party
on load but when the user zooms or pans a little bit it suddenly becomes
first party and the user expects this somehow.

I just loaded a random hotel web site that embeds a Google Maps widget;
there is no indication that this is some kind of third party service at
all, the map just has a footer with "POWERED BY Google Map data ©2011
Cybercity, GeoBasis-DE/BKG (©2009), Google, LGV Hamburg - Terms of Use".
Who would be running this? Google, Cybercity, the BKG (a federal office)
or the LGV Hamburg (a state authority)? Is Automattic, Inc. monitoring
all visits to "Powered by WordPress" blogs? The Wikimedia Foundation all
visits to "Powered by MediaWiki" wikis?

What about YouTube videos? If you click the YouTube logo, you will be
taken to the YouTube web site and YouTube becomes first party. But if
you just click the play button... YouTube also becomes first party and
may compile a profile about you including all the sites where you might
be watching videos, despite your browser telling YouTube you do not want
to be tracked, if that is still why first versus third party matters?
And YouTube, LLC may then share the data with Google, Inc.? I would not
expect that.
-- 
Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de
Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de
25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ 
Received on Thursday, 15 December 2011 21:30:50 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:22 UTC