{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T02:49:53Z","timestamp":1777949393733,"version":"3.51.4"},"publisher-location":"Cham","reference-count":55,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032160881","type":"print"},{"value":"9783032160898","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-16089-8_13","type":"book-chapter","created":{"date-parts":[[2026,5,3]],"date-time":"2026-05-03T23:37:36Z","timestamp":1777851456000},"page":"188-205","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["The Bitter Pill: Tracking and\u00a0Remarketing on\u00a0EU Pharmacy Websites"],"prefix":"10.1007","author":[{"given":"Zahra","family":"Moti","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kimberley","family":"Frings","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christine","family":"Utz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frederik Zuiderveen","family":"Borgesius","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gunes","family":"Acar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"13_CR1","doi-asserted-by":"publisher","unstructured":"Acar, G., Englehardt, S., Narayanan, A.: No boundaries: data exfiltration by third parties embedded on web pages. In: Proceedings on Privacy Enhancing Technologies, pp. 220\u2013238 (2020). https:\/\/doi.org\/10.2478\/popets-2020-0070","DOI":"10.2478\/popets-2020-0070"},{"key":"13_CR2","unstructured":"Adamic, L.A., Huberman, B.A.: Zipf\u2019s law and the internet. Glottometrics 3(1), 143\u2013150 (2002)"},{"key":"13_CR3","unstructured":"AdTriba GmbH: Future-proof marketing measurement & optimization (Oct 2024). https:\/\/www.adtriba.com"},{"key":"13_CR4","unstructured":"Agencia Espa\u00f1ola de Medicamentos Productos Sanitarios: Listado de farmacias que realizan la venta a distancia (2024). https:\/\/distafarma.aemps.es\/farmacom\/faces\/inicio.xhtml"},{"key":"13_CR5","unstructured":"AWIN Inc.: Join our global affiliate platform (2024). https:\/\/www.awin.com\/"},{"key":"13_CR6","unstructured":"Baker-White, E.: Facebook Gave Nebraska Cops A Teen\u2019s DMs. https:\/\/www.forbes.com\/sites\/emilybaker-white\/2022\/08\/08\/facebook-abortion-teen-dms"},{"key":"13_CR7","unstructured":"Bundesinstitut f\u00fcr Arzneimittel und Medizinprodukte: Versandhandelsregister (Oct 2024). https:\/\/versandhandel.dimdi.de\/pdfs\/vhr-apo.pdf"},{"key":"13_CR8","unstructured":"Cookiebot: Ad Tech Surveillance on the Public Sector Web (2019). https:\/\/www.cookiebot.com\/media\/1121\/cookiebot-report-2019-medium-size.pdf"},{"key":"13_CR9","unstructured":"Court of Justice of the EU: Judgment in Case C-21\/23, 4 Oct. 2024. https:\/\/curia.europa.eu\/juris\/liste.jsf?num=C-21\/23"},{"key":"13_CR10","unstructured":"Court of Justice of the EU: Judgment in Case C-40\/17, 29 July. 2019. https:\/\/curia.europa.eu\/juris\/liste.jsf?num=C-40\/17"},{"key":"13_CR11","unstructured":"Court of Justice of the EU: Judgment in Case C-446\/21, 4 Oct. 2024. https:\/\/curia.europa.eu\/juris\/liste.jsf?num=C-446\/21"},{"key":"13_CR12","unstructured":"Criteo: The Commerce Media Platform for the Open Internet (2024). https:\/\/www.criteo.com\/"},{"key":"13_CR13","first-page":"92","volume":"1","author":"A Datta","year":"2015","unstructured":"Datta, A., Tschanz, M.C., Datta, A.: Automated experiments on ad privacy settings - a tale of opacity, choice, and discrimination. Proc. Priv. Enhanc. Technol. 1, 92\u2013112 (2015)","journal-title":"Proc. Priv. Enhanc. Technol."},{"key":"13_CR14","doi-asserted-by":"crossref","unstructured":"Dimova, Y., Acar, G., Olejnik, L., Joosen, W., Van Goethem, T.: The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion. Privacy Enhancing Technologies, pp. 394\u2013412 (2021)","DOI":"10.2478\/popets-2021-0053"},{"key":"13_CR15","unstructured":"Dnspython Contributors: dnspython (2024). https:\/\/dnspython.readthedocs.io\/en\/latest"},{"key":"13_CR16","unstructured":"DuckDuckGo: Tracker Radar (2024). https:\/\/github.com\/duckduckgo\/tracker-radar\/"},{"key":"13_CR17","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Han, J., Narayanan, A.: I never signed up for this! Privacy implications of email tracking. In: Proceedings on Privacy Enhancing Technologies, pp. 109\u2013126 (2018)","DOI":"10.1515\/popets-2018-0006"},{"key":"13_CR18","unstructured":"eTracker GmbH: Set up your own tracking domain (2025). https:\/\/help.etracker.com\/en\/article\/set-up-your-own-tracking-domain"},{"key":"13_CR19","unstructured":"European Data Protection Board: Report of the work undertaken by Cookie Banner Taskforce. Tech. rep. (2023). https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/other\/report-work-undertaken-cookie-banner-taskforce"},{"key":"13_CR20","unstructured":"European Parliament and the Council of the EU: Directive 2011\/62\/EU (2011). http:\/\/data.europa.eu\/eli\/dir\/2011\/62\/oj"},{"key":"13_CR21","unstructured":"European Parliament and the Council of the EU: Regulation (EU) 2016\/679 (2016). https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"13_CR22","unstructured":"Feathers, T., Palmer, K., Fondrie-Teitler, S.: Dozens of Telehealth Startups Sent Sensitive Health Information to Big Tech Companies (2024). https:\/\/themarkup.org\/pixel-hunt\/2022\/12\/13\/out-of-control-dozens-of-telehealth-startups-sent-sensitive-health-information-to-big-tech-companies"},{"key":"13_CR23","unstructured":"Federal Trade Commission: Enforcement Action to Bar GoodRx (2023). https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2023\/02\/ftc-enforcement-action-bar-goodrx-sharing-consumers-sensitive-health-info-advertising"},{"key":"13_CR24","unstructured":"Federal Trade Commission: FTC Order Prohibits Telehealth Firm Cerebral from Using Sensitive Data for Ads (2024). https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2024\/04\/proposed-ftc-order-will-prohibit-telehealth-firm-cerebral-using-or-disclosing-sensitive-data"},{"key":"13_CR25","unstructured":"Federal Trade Commission: FTC to Ban BetterHelp from Revealing Consumers\u2019 Data (2024). https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2023\/03\/ftc-ban-betterhelp-revealing-consumers-data-including-sensitive-mental-health-information-facebook"},{"key":"13_CR26","unstructured":"Fisher, B.: Improve performance and security with Server-Side Tagging (2023). https:\/\/blog.google\/products\/marketingplatform\/360\/improve-performance-and-security-server-side-tagging"},{"key":"13_CR27","doi-asserted-by":"crossref","unstructured":"Fouad, I., Santos, C., Laperdrix, P.: The Devil is in the details: detection, measurement and lawfulness of server-side tracking on the web. In: Proceedings on Privacy Enhancing Technologies, pp. 450\u2013465 (2024)","DOI":"10.56553\/popets-2024-0125"},{"key":"13_CR28","doi-asserted-by":"crossref","unstructured":"Friedman, A.B., Bauer, L., Gonzales, R., McCoy, M.S.: Prevalence of third-party tracking on abortion clinic web pages. JAMA Internal Med. 182(11) (2022)","DOI":"10.1001\/jamainternmed.2022.4208"},{"key":"13_CR29","unstructured":"Google: Setting up a new server container (2023). https:\/\/developers.google.com\/tag-platform\/learn\/sst-fundamentals\/4-sst-setup-container"},{"key":"13_CR30","unstructured":"Google: Limit ads about sensitive topics on Google (2024). https:\/\/support.google.com\/My-Ad-Center-Help\/answer\/12155260"},{"key":"13_CR31","unstructured":"Hill, R.: uBlock Origin works best on Firefox. https:\/\/github.com\/gorhill\/uBlock\/wiki\/uBlock-Origin-works-best-on-Firefox#cname-uncloaking"},{"key":"13_CR32","unstructured":"Hill, R.: uBlock Origin \u2013 make-rulesets.js (2023). https:\/\/github.com\/gorhill\/uBlock\/blob\/491bc87e94a503a17fd11cdee35c1f1b6fea24be\/platform\/mv3\/make-rulesets.js#L1285-L1296"},{"key":"13_CR33","unstructured":"Hill, R.: uBlock Origin Core (2024). https:\/\/www.npmjs.com\/package\/@gorhill\/ubo-core"},{"key":"13_CR34","unstructured":"ID5: ID5 \u2013 Future-proofed user identification for Digital Advertising (2024). https:\/\/id5.io\/"},{"key":"13_CR35","unstructured":"Instagram Help Center: Why am I seeing ads from an advertiser on Instagram? https:\/\/help.instagram.com\/609473930427331"},{"key":"13_CR36","unstructured":"Kaste, M.: Nebraska cops used Facebook messages to investigate an alleged illegal abortion (2022). https:\/\/www.npr.org\/2022\/08\/12\/1117092169\/nebraska-cops-used-facebook-messages-to-investigate-an-alleged-illegal-abortion"},{"key":"13_CR37","unstructured":"Mapp: Custom Track Domain (C-Name) (2025). https:\/\/docs.mapp.com\/docs\/custom-track-domain-c-name"},{"issue":"14","key":"13_CR38","doi-asserted-by":"publisher","first-page":"1462","DOI":"10.1001\/jama.2020.16178","volume":"324","author":"MS McCoy","year":"2020","unstructured":"McCoy, M.S., Libert, T., Buckler, D., Grande, D.T., Friedman, A.B.: Prevalence of third-party tracking on COVID-19\u2013related web pages. J. Am. Med. Assoc. (JAMA) 324(14), 1462\u20131464 (2020)","journal-title":"J. Am. Med. Assoc. (JAMA)"},{"key":"13_CR39","unstructured":"Meshkov, A.: Gotta catch \u2019em all: how AdGuard scanned the entire web in search of hidden trackers (2024). https:\/\/adguard.com\/en\/blog\/cname-tracking.html"},{"key":"13_CR40","unstructured":"Meta: Customer File Custom Audiences (2024). https:\/\/developers.facebook.com\/docs\/marketing-api\/audiences\/guides\/custom-audiences\/#hash"},{"key":"13_CR41","unstructured":"Ministerie van Volksgezondheid, Welzijn en Sport: Aanbiederslijst online medicijnen (2024). https:\/\/aanbiedersmedicijnen.nl\/aanbieders\/aanbiederslijst."},{"key":"13_CR42","unstructured":"Ministero della Salute: Soggetto autorizzato al commercio online di medicinali (2024). https:\/\/www.salute.gov.it\/LogoCommercioElettronico\/CercaSitoEComm"},{"key":"13_CR43","unstructured":"Mullvad VPN AB: \u2013 Free the internet (2024). https:\/\/mullvad.net\/en"},{"key":"13_CR44","unstructured":"Musch, M., Johns, M.: U can\u2019t debug this: detecting Javascript anti-debugging techniques in the wild. In: Proceedings of the 30th USENIX Security Symposium, pp. 2935\u20132950 (2021)"},{"key":"13_CR45","unstructured":"M\u00fcller, M., \u017duni\u010d, G.: Browser Use: Enable AI to control your browser (2024). https:\/\/browser-use.com\/"},{"key":"13_CR46","doi-asserted-by":"crossref","unstructured":"Nouwens, M., Liccardi, I., Veale, M., Karger, D., Kagal, L.: Dark patterns after the GDPR: scraping consent pop-ups and demonstrating their influence. In: Proceedings of the 2020 CHI, pp. 1\u201313 (2020)","DOI":"10.1145\/3313831.3376321"},{"key":"13_CR47","unstructured":"Ordre National des Pharmaciens: Rechercher un site de vente en ligne autoris\u00e9 \u00e0 vendre des m\u00e9dicaments \u2013 CNOP (2024). https:\/\/www.ordre.pharmacien.fr\/je-suis\/patient-grand-public\/rechercher-un-site-de-vente-en-ligne-autorise-a-vendre-des-medicaments?vl-region=&vl-departement=&vl-commune=&vl-site=&vl-pharmacy=&vl-incumbent="},{"key":"13_CR48","unstructured":"Outbrain Inc.: Drive Better Business Results (2024) https:\/\/www.outbrain.com\/"},{"key":"13_CR49","doi-asserted-by":"publisher","first-page":"375","DOI":"10.1007\/s12553-024-00819-w","volume":"14","author":"S Rauti","year":"2022","unstructured":"Rauti, S.: Analyzing third-party data leaks on online pharmacy websites. Heal. Technol. 14, 375\u2013392 (2022)","journal-title":"Heal. Technol."},{"key":"13_CR50","unstructured":"Similarweb LTD: Unlock Digital Growth (2024). https:\/\/www.similarweb.com\/"},{"key":"13_CR51","unstructured":"Spotler: Email marketing automation with Spotler software (2024). https:\/\/spotler.com\/solutions\/use-cases\/email-marketing-automation"},{"key":"13_CR52","unstructured":"Taboola: Restricted Content, Products, Services (2025). https:\/\/taboola.com\/"},{"key":"13_CR53","unstructured":"Tahir, D., Fondrie-Teitler, S.: Need to Get Plan B or an HIV Test Online? Facebook May Know About It (2023). https:\/\/themarkup.org\/pixel-hunt\/2023\/06\/30\/need-to-get-plan-b-or-an-hiv-test-online-facebook-may-know-about-it"},{"key":"13_CR54","unstructured":"webXray: webXray Privacy Search Engine (2024). https:\/\/webxray.ai\/"},{"key":"13_CR55","doi-asserted-by":"crossref","unstructured":"Yu, X., Samarasinghe, N., Mannan, M., Youssef, A.: Got sick and tracked: privacy analysis of hospital websites. In: IEEE Euro S&P Workshops, pp. 278\u2013286 (2022)","DOI":"10.1109\/EuroSPW55150.2022.00034"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2025 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-16089-8_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,3]],"date-time":"2026-05-03T23:37:41Z","timestamp":1777851461000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-16089-8_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032160881","9783032160898"],"references-count":55,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-16089-8_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}