{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T12:05:06Z","timestamp":1776168306604,"version":"3.50.1"},"reference-count":72,"publisher":"Association for Computing Machinery (ACM)","issue":"2","funder":[{"DOI":"10.13039\/501100001665","name":"Agence Nationale de la Recherche","doi-asserted-by":"publisher","award":["ANR-21-CE39-0019 FACADES, and ProjetIA-22-PECY-0002 iPoP"],"award-info":[{"award-number":["ANR-21-CE39-0019 FACADES, and ProjetIA-22-PECY-0002 iPoP"]}],"id":[{"id":"10.13039\/501100001665","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006021","name":"Direction G\u00e9n\u00e9rale de l\u2019Armement","doi-asserted-by":"crossref","award":["PRIVABUG and PRIVAWEB"],"award-info":[{"award-number":["PRIVABUG and PRIVAWEB"]}],"id":[{"id":"10.13039\/501100006021","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001665","name":"Agence Nationale de la Recherche","doi-asserted-by":"crossref","award":["ANR-21-CE39-0019"],"award-info":[{"award-number":["ANR-21-CE39-0019"]}],"id":[{"id":"10.13039\/501100001665","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Web"],"published-print":{"date-parts":[[2026,5,31]]},"abstract":"<jats:p>\n                    Affiliate marketing is a growing performance-based marketing arrangement in which affiliates are rewarded for getting users to register, purchase, or visit a shopping website\u00a0[\n                    <jats:xref ref-type=\"bibr\">16<\/jats:xref>\n                    ,\n                    <jats:xref ref-type=\"bibr\">38<\/jats:xref>\n                    ]. This marketing strategy is valued at $18.5 billion USD for 2025\u00a0[\n                    <jats:xref ref-type=\"bibr\">31<\/jats:xref>\n                    ,\n                    <jats:xref ref-type=\"bibr\">67<\/jats:xref>\n                    ]. Deal-sharing platforms take advantage of this marketing strategy by acting as storefronts for sellers that showcase promotions and deals. As the service is free to use, they earn commissions through affiliate links\u00a0[\n                    <jats:xref ref-type=\"bibr\">36<\/jats:xref>\n                    ] when they lead to sales. We perform an in-depth, end-to-end study of the tracking techniques leveraged by\n                    <jats:italic toggle=\"yes\">Pepper<\/jats:italic>\n                    \u00a0[\n                    <jats:xref ref-type=\"bibr\">1<\/jats:xref>\n                    ] and its extended environment, a key player in deal-sharing platforms. Through a systematic 1-month crawl, we analyze the tracking ecosystem of 10 deal-sharing websites active in a diverse range of countries abiding by different privacy laws. Our analysis reveals that a significant part of the tracking occurs during redirect chains\u00a0[\n                    <jats:xref ref-type=\"bibr\">40<\/jats:xref>\n                    ] between the deal-sharing platform and the shopping website. We quantify the tracking-specific use of cookies, CNAME cloaking\u00a0[\n                    <jats:xref ref-type=\"bibr\">14<\/jats:xref>\n                    ], and link decorations\u00a0[\n                    <jats:xref ref-type=\"bibr\">52<\/jats:xref>\n                    ,\n                    <jats:xref ref-type=\"bibr\">58<\/jats:xref>\n                    ] within redirect chains. We find that 67.9% of redirect chains leverage at least one of these additional tracking techniques. We show that redirect chains examined in prior work (limited to HTTP-based redirects) are significantly more constrained than those observed in our study (HTTP-, HTML-, and JS-based), which enable more aggressive behavior by dynamically loading additional tracking resources at runtime. Finally, by analyzing the ecosystem of third-party services and the privacy policies of deal-sharing websites, we reveal the omission of numerous actors involved in redirect chains.\n                  <\/jats:p>","DOI":"10.1145\/3774944","type":"journal-article","created":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T20:53:40Z","timestamp":1773176020000},"page":"1-30","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Gotta Catch \u2019em all: On the Web Tracking Practices of a Deal-Sharing Conglomerate and their Heavy Reliance on Redirect Chain"],"prefix":"10.1145","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-8274-5062","authenticated-orcid":false,"given":"Sterenn","family":"Roux","sequence":"first","affiliation":[{"name":"Universit\u00e9 de Rennes - Campus de Beaulieu","place":["Rennes, France"]},{"name":"CNRS","place":["Rennes, France"]},{"name":"Inria Rennes","place":["Rennes, France"]},{"name":"IRISA","place":["Rennes, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3554-2585","authenticated-orcid":false,"given":"Samuel","family":"P\u00e9lissier","sequence":"additional","affiliation":[{"name":"CentraleSup\u00e9lec","place":["Rennes, France"]},{"name":"Inria Rennes","place":["Rennes, France"]},{"name":"IRISA","place":["Rennes, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2947-9150","authenticated-orcid":false,"given":"Johann","family":"Bourcier","sequence":"additional","affiliation":[{"name":"Universit\u00e9 de Pau et des Pays de l'Adour","place":["Pau, France"]},{"name":"E2S UPPA","place":["Pau, France"]},{"name":"LIUPPA","place":["Pau, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2903-7600","authenticated-orcid":false,"given":"Walter","family":"Rudametkin","sequence":"additional","affiliation":[{"name":"Universite de Rennes","place":["Rennes, France"]},{"name":"CNRS","place":["Rennes, France"]},{"name":"Inria Rennes","place":["Rennes, France"]},{"name":"IRISA","place":["Rennes, France"]},{"name":"Institut Universitaire de France","place":["Rennes, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6901-3596","authenticated-orcid":false,"given":"Pierre","family":"Laperdrix","sequence":"additional","affiliation":[{"name":"CNRS","place":["Paris, France"]},{"name":"Universite de Lille","place":["Paris, France"]},{"name":"Computer Science, Inria Lille","place":["Paris, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-5796-7777","authenticated-orcid":false,"given":"Naif","family":"Mehanna","sequence":"additional","affiliation":[{"name":"Universite de Lille","place":["Lille, France"]},{"name":"Inria Lille","place":["Lille, France"]},{"name":"CNRS","place":["Lille, France"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,4,14]]},"reference":[{"key":"e_1_3_3_2_2","unstructured":"2025. Pepper \u2013 Community Deal Platform (Netherlands). Retrieved March 25 2026 from https:\/\/nl.pepper.com\/"},{"key":"e_1_3_3_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660347"},{"key":"e_1_3_3_4_2","unstructured":"AdGuard authors. 2024. AdGuard tracker report: December 2024 \u2013 How much is your traffic contaminated? Retrieved March 25 2026 from https:\/\/adguard.com\/en\/blog\/adguard-tracker-report-december-2024.html"},{"key":"e_1_3_3_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278573"},{"key":"e_1_3_3_6_2","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583311"},{"key":"e_1_3_3_7_2","doi-asserted-by":"crossref","unstructured":"Berners-Lee et al. 1996. Hypertext Transfer Protocol \u2013 HTTP\/1.0 \u2013 RFC 1945. Retrieved March 25 2026 from https:\/\/datatracker.ietf.org\/doc\/html\/rfc1945#section-9.3","DOI":"10.17487\/rfc1945"},{"key":"e_1_3_3_8_2","doi-asserted-by":"publisher","DOI":"10.5555\/3698900.3699058"},{"key":"e_1_3_3_9_2","volume-title":"The Complete Guide to Affiliate Marketing on the Web: How to Use and Profit from Affiliate Marketing Programs","author":"Brown Bruce C.","year":"2009","unstructured":"Bruce C. Brown. 2009. The Complete Guide to Affiliate Marketing on the Web: How to Use and Profit from Affiliate Marketing Programs. Atlantic Publishing Company."},{"key":"e_1_3_3_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815720"},{"key":"e_1_3_3_11_2","unstructured":"Anthony Chavez. 2024. A new path for Privacy Sandbox on the web \u2013 The Privacy Sandbox. Retrieved March 25 2026 from https:\/\/privacysandbox.com\/news\/privacy-sandbox-update\/"},{"key":"e_1_3_3_12_2","doi-asserted-by":"publisher","unstructured":"Ha Dao Johan Mazel and Kensuke Fukuda. 2021. CNAME cloaking-based tracking on the web: Characterization detection and protection. IEEE Transactions on Network and Service Management 18 3 (2021) 3873\u20133888. DOI:10.1109\/TNSM.2021.3072874","DOI":"10.1109\/TNSM.2021.3072874"},{"key":"e_1_3_3_13_2","unstructured":"David P. Wiggins The Open Group Inc. [n. d.]. XVFB. Retrieved March 25 2026 from https:\/\/www.x.org\/archive\/X11R7.7\/doc\/man\/man1\/Xvfb.1.xhtml"},{"key":"e_1_3_3_14_2","unstructured":"digidip GmbH. 2025. Digidip\u2019s Privacy Policy. Retrieved March 25 2026 from https:\/\/digidip.net\/privacy-policy"},{"key":"e_1_3_3_15_2","doi-asserted-by":"publisher","unstructured":"Yana Dimova Gunes Acar Lukasz Olejnik Wouter Joosen and Tom van Goethem. 2021. The CNAME of the Game: Large-scale analysis of DNS-based tracking evasion. Proceedings on Privacy Enhancing Technologies 2021 3 (2021) 394\u2013412. DOI:10.2478\/POPETS-2021-0053","DOI":"10.2478\/POPETS-2021-0053"},{"key":"e_1_3_3_16_2","unstructured":"Disconnect Inc.2025. DisconnectMe List. Retrieved March 25 2026 from https:\/\/github.com\/disconnectme\/disconnect-tracking-protection\/"},{"key":"e_1_3_3_17_2","doi-asserted-by":"crossref","unstructured":"Yogesh K. Dwivedi Nripendra P. Rana and Mohammad Abdallah Ali Alryalat. 2017. Affiliate marketing: An overview and analysis of emerging literature. The Marketing Review 17 1 (2017) 33\u201350.","DOI":"10.1362\/146934717X14909733966092"},{"key":"e_1_3_3_18_2","unstructured":"EasyList authors (founder: Rick Petnel a.k.a. rick752; maintainers: MonztA Michael). 2025. EasyList. Retrieved March 25 2026 from https:\/\/easylist.to\/"},{"key":"e_1_3_3_19_2","unstructured":"EasyList authors (maintainers: MonztA Michael). 2025. EasyPrivacy \u2013 EasyList supplementary filter list. Retrieved March 25 2026 from https:\/\/easylist.to\/easylist\/easyprivacy.txt"},{"key":"e_1_3_3_20_2","unstructured":"EDPB. 2025. EDPB Cookie Policy. Retrieved March 25 2026 from https:\/\/www.edpb.europa.eu\/concernant-le-cepd\/mentions-legales\/edpb-cookie-policy_en"},{"key":"e_1_3_3_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"e_1_3_3_22_2","unstructured":"European Data Protection Board. 2025. Website Auditing Tool. Retrieved March 25 2026 from https:\/\/code.europa.eu\/edpb\/website-auditing-tool\/"},{"key":"e_1_3_3_23_2","unstructured":"European Union. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation). Retrieved March 25 2026 from https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_3_24_2","doi-asserted-by":"crossref","unstructured":"Imane Fouad Nataliia Bielova Arnaud Legout and Natasa Sarafijanovic-Djukic. 2020. Missed by Filter Lists: Detecting Unknown Third-Party Trackers with Invisible Pixels. arxiv:1812.01514. Retrieved from https:\/\/arxiv.org\/abs\/1812.01514","DOI":"10.2478\/popets-2020-0038"},{"key":"e_1_3_3_25_2","volume-title":"Proceedings of the 24th Privacy Enhancing Technologies Symposium.","author":"Fouad Imane","year":"2024","unstructured":"Imane Fouad, Cristiana Santos, and Pierre Laperdrix. 2024. The devil is in the details: Detection, measurement and lawfulness of server-side tracking on the web. In Proceedings of the 24th Privacy Enhancing Technologies Symposium.Bristol, United Kingdom."},{"key":"e_1_3_3_26_2","unstructured":"Ghostery authors \/ WhoTracks.me team. 2025. WhoTracks.me: Uncover who is tracking you online. Retrieved March 25 2026 from https:\/\/www.ghostery.com\/whotracksme"},{"key":"e_1_3_3_27_2","unstructured":"GitHub. 2025. Intercept Target Creation \\(\\cdot\\) Issue #3667 \\(\\cdot\\) Puppeteer\/Puppeteer. Retrieved November 26 2025 from https:\/\/github.com\/puppeteer\/puppeteer\/issues\/3667"},{"key":"e_1_3_3_28_2","unstructured":"GitHub. 2025. Target Creation Event Listeners Are Sometimes Not Executed Early Enough \\(\\cdot\\) Issue #2669 \\(\\cdot\\) Puppeteer\/Puppeteer. Retrieved November 26 2025 from https:\/\/github.com\/puppeteer\/puppeteer\/issues\/2669"},{"key":"e_1_3_3_29_2","unstructured":"Gobierno de M\u00e9xico. 2010. Ley Federal de Protecci\u00f3n de Datos Personales en Posesi\u00f3n de los Particulares. Retrieved March 25 2026 from https:\/\/www.gob.mx\/indesol\/documentos\/ley-federal-de-proteccion-de-datos-personales-en-posesion-de-los-particulares"},{"key":"e_1_3_3_30_2","unstructured":"Inc. Google. 2024. Puppeteer. Retrieved March 25 2026 from https:\/\/pptr.dev\/"},{"key":"e_1_3_3_31_2","unstructured":"Jim Edwards. 2014. Shawn hogan sentenced in eBay affiliate marketing scam. Retrieved March 25 2026 from https:\/\/www.businessinsider.com\/shawn-hogan-sentenced-in-ebayaffiliate-marketing-scam-2014-5"},{"key":"e_1_3_3_32_2","unstructured":"Hostinger International. 2025. Affiliate Marketing Statistics: The Most Important Trends in 2025. Retrieved March 25 2026 from https:\/\/www.hostinger.com\/tutorials\/affiliate-marketing-statistics"},{"key":"e_1_3_3_33_2","unstructured":"HotUKDeals. 2025. HotUKDeals Club \u2013 Community Deals and Discussions. Retrieved March 25 2026 from https:\/\/www.hotukdeals.com\/club"},{"key":"e_1_3_3_34_2","unstructured":"HotUKDeals. 2025. HotUKDeals Community Discussions. Retrieved March 25 2026 from https:\/\/www.hotukdeals.com\/discussions"},{"key":"e_1_3_3_35_2","unstructured":"HotUKDeals. 2025. HotUKDeals Cookies Policy. Retrieved March 25 2026 from https:\/\/www.hotukdeals.com\/cookies-policy"},{"key":"e_1_3_3_36_2","unstructured":"HotUKDeals. 2025. How Do Ad Slots Work on My Deal Page? Retrieved March 25 2026 from https:\/\/help.hotukdeals.com\/help\/how-do-ad-slots-work-on-my-deal-page"},{"key":"e_1_3_3_37_2","unstructured":"HotUKDeals. 2025. How Does HotUKDeals Make Money? Retrieved March 25 2026 from https:\/\/help.hotukdeals.com\/help\/how-does-hotukdeals-make-money"},{"key":"e_1_3_3_38_2","unstructured":"HotUKDeals. 2025. What Does the Word \u201cSponsored\u201d Mean on Certain Deals? Retrieved March 25 2026 from https:\/\/help.hotukdeals.com\/help\/what-does-the-word-sponsored-mean-on-certain-deals"},{"key":"e_1_3_3_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICEMT.2010.5657647"},{"key":"e_1_3_3_40_2","doi-asserted-by":"publisher","unstructured":"Gayatri Priyadarsini Kancherla Nataliia Bielova Cristiana Santos and Abhishek Bichhawat. 2025. Measuring Compliance of Consent Revocation on the Web. arxiv:2411.15414. Retrieved March 25 2026 from 10.48550\/arXiv.2411.15414","DOI":"10.48550\/arXiv.2411.15414"},{"key":"e_1_3_3_41_2","doi-asserted-by":"crossref","unstructured":"Martin Koop Erik Tews and Stefan Katzenbeisser. 2020. In-depth evaluation of redirect tracking and link usage. Proceedings on Privacy Enhancing Technologies 4 (2020) 394\u2013413.","DOI":"10.2478\/popets-2020-0079"},{"key":"e_1_3_3_42_2","unstructured":"Jack Kwakman. 2025. Open Cookie Database. Retrieved March 25 2026 from https:\/\/github.com\/jkwakman\/Open-Cookie-Database"},{"key":"e_1_3_3_43_2","doi-asserted-by":"publisher","unstructured":"Pierre Laperdrix Nataliia Bielova Benoit Baudry and Gildas Avoine. 2020. Browser fingerprinting: A survey. ACM Transactions on the Web 14 2 (2020) 33 pages. DOI:10.1145\/3386040","DOI":"10.1145\/3386040"},{"key":"e_1_3_3_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3689014"},{"key":"e_1_3_3_45_2","doi-asserted-by":"publisher","unstructured":"Federico Mangi\u00f2 and Giandomenico Di Domenico. 2022. All that glitters is not real affiliation: How to handle affiliate marketing programs in the era of falsity. Business Horizons 65 6 (2022) 765\u2013776. DOI:10.1016\/j.bushor.2022.07.001","DOI":"10.1016\/j.bushor.2022.07.001"},{"key":"e_1_3_3_46_2","volume-title":"Proceedings of the IEEE Security and Privacy Workshops","author":"Matt\u00e9 C\u00e9lestin","year":"2020","unstructured":"C\u00e9lestin Matt\u00e9, Nataliia Bielova, and Cristiana Santos. 2020. Do cookie banners respect my choice? Measuring legal compliance of banners from IAB Europe\u2019s transparency and consent framework. In Proceedings of the IEEE Security and Privacy Workshops. IEEE."},{"key":"e_1_3_3_47_2","unstructured":"MDN Web Docs. 2015. Set-Cookie - HTTP | MDN. Retrieved March 25 2026 from https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Reference\/Headers\/Set-Cookie"},{"key":"e_1_3_3_48_2","unstructured":"MDN Web Docs. 2025. HTTP response status codes | Redirect messages. Retrieved March 25 2026 from https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Reference\/Status#redirection_messages"},{"key":"e_1_3_3_49_2","unstructured":"MDN Web Docs. 2025. HTTP response status codes | Successful responses. Retrieved March 25 2026 from https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Reference\/Status#successful_responses"},{"key":"e_1_3_3_50_2","unstructured":"MDN Web Docs. 2025. Redirections in HTTP | MDN. Retrieved March 25 2026 from https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Guides\/Redirections"},{"key":"e_1_3_3_51_2","doi-asserted-by":"crossref","unstructured":"Abhishek Kumar Mishra Guillaume Gagnon Mathieu Cunche and Sebastien Gambs. 2025. QRisk: Think before you scan QR codes. In Availability Reliability and Security. Springer Nature Switzerland Cham 3\u201324.","DOI":"10.1007\/978-3-032-00627-1_1"},{"key":"e_1_3_3_52_2","unstructured":"Mozilla. 2022. Firefox rolls out Total Cookie Protection by default to more users worldwide \u2013 Mozilla Blog. Retrieved March 25 2026 from https:\/\/blog.mozilla.org\/en\/mozilla\/firefox-rolls-out-total-cookie-protection-by-default-to-all-users-worldwide\/"},{"key":"e_1_3_3_53_2","first-page":"4103","volume-title":"Proceedings of the 33rd USENIX Security Symposium","author":"Munir Shaoor","year":"2024","unstructured":"Shaoor Munir, Patrick Lee, Umar Iqbal, Zubair Shafiq, and Sandra Siby. 2024. PURL: Safe and Effective Sanitization of Link Decoration. In Proceedings of the 33rd USENIX Security Symposium. USENIX Association, Philadelphia, PA, 4103\u20134120. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/munir"},{"key":"e_1_3_3_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450056"},{"key":"e_1_3_3_55_2","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313542"},{"key":"e_1_3_3_56_2","unstructured":"European Parliament and the Council of the European Union. 2002. Directive 2002\/58\/EC on Privacy and Electronic Communications (ePrivacy Directive). Retrieved March 25 2026 from https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX:02002L0058-20091219"},{"key":"e_1_3_3_57_2","unstructured":"Plebicom. [n. d.]. Notre r\u00e9seau. Retrieved March 25 2026 from https:\/\/plebicom.com\/notre-reseau\/notre-reseau"},{"key":"e_1_3_3_58_2","unstructured":"Puppeteer. 2025. Network Logging | Puppeteer. Retrieved November 26 2025 from https:\/\/pptr.dev\/guides\/network-loggingAccessed: 2025-11-26."},{"key":"e_1_3_3_59_2","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561415"},{"key":"e_1_3_3_60_2","volume-title":"Proceedings of the Workshop on Measurements, Attacks, and Defenses for the Web.","author":"Ren Tongwei","year":"2021","unstructured":"Tongwei Ren, Alexander Wittman, Lorenzo De Carli, and Drew Davidson. 2021. An analysis of first-party cookie exfiltration due to cname redirections. In Proceedings of the Workshop on Measurements, Attacks, and Defenses for the Web."},{"key":"e_1_3_3_61_2","doi-asserted-by":"crossref","unstructured":"Fielding and Reschke. 2014. Hypertext Transfer Protocol (HTTP\/1.1): Semantics and Content \u2013 RFC 7231. Retrieved March 25 2026 from https:\/\/datatracker.ietf.org\/doc\/html\/rfc7231#s ection-6.4","DOI":"10.17487\/rfc7231"},{"key":"e_1_3_3_62_2","doi-asserted-by":"crossref","unstructured":"Cristiana Santos Midas Nouwens Michael Toth Nataliia Bielova and Vincent Roca. 2021. Consent Management Platforms under the GDPR: processors and\/or controllers?arxiv:2104.06861. Retrieved from https:\/\/arxiv.org\/abs\/2104.06861","DOI":"10.2139\/ssrn.4205933"},{"key":"e_1_3_3_63_2","unstructured":"Justin Schuh. 2020. Building a more private web: A path towards making third party cookies obsolete \u2013 Chromium blog. Retrieved March 25 2026 from https:\/\/blog.chromium.org\/2020\/01\/building-more-private-web-path-towards.html"},{"key":"e_1_3_3_64_2","unstructured":"SEMrush. [n. d.]. SEMrush \u2013 Online visibility management platform. Retrieved March 25 2026 from https:\/\/www.semrush.com\/"},{"key":"e_1_3_3_65_2","first-page":"4","volume-title":"Proceedings of the ACM SIGIR Forum","author":"Shen Xuehua","year":"2007","unstructured":"Xuehua Shen, Bin Tan, and ChengXiang Zhai. 2007. Privacy protection in personalized search. In Proceedings of the ACM SIGIR Forum. ACM New York, NY, USA, 4\u201317."},{"key":"e_1_3_3_66_2","doi-asserted-by":"publisher","unstructured":"Nivedita Singh Yejin Do Yongsang Yu Imane Fouad Jungrae Kim and Hyoungshick Kim. 2025. Crumbled cookies: Exploring e-commerce websites\u2019 cookie policies with data protection regulations. ACM Transactions on the Web 19 1 (2025) 24 pages. DOI:10.1145\/3708515","DOI":"10.1145\/3708515"},{"key":"e_1_3_3_67_2","unstructured":"StatCounter. 2025. Browser Market Share Worldwide \u2013 statcounter. Retrieved March 25 2026 from https:\/\/gs.statcounter.com\/browser-market-share\/#monthly-202401-202501"},{"key":"e_1_3_3_68_2","unstructured":"Statista. 2024. Affiliate Marketing Spending Worldwide from 2023 to 2028. Retrieved March 25 2026 from https:\/\/www.statista.com\/statistics\/693438\/affiliate-marketing-spending\/"},{"key":"e_1_3_3_69_2","unstructured":"European Union. 2016. Article 4 \u2014 Definitions. Retrieved March 25 2026 from https:\/\/gdpr-info.eu\/art-4-gdpr\/"},{"key":"e_1_3_3_70_2","unstructured":"European Union. 2016. Article 5 \u2014 Principles relating to processing of personal data. Retrieved March 25 2026 from https:\/\/gdpr-info.eu\/art-5-gdpr\/"},{"key":"e_1_3_3_71_2","unstructured":"Wikipedia contributors. 2024. Spy pixel \u2014 Wikipedia The Free Encyclopedia. Retrieved March 25 2026 from https:\/\/en.wikipedia.org\/w\/index.php?title=Spy_pixel&oldid=1250427073"},{"key":"e_1_3_3_72_2","unstructured":"John Wilander. 2020. Full Third-Party Cookie Blocking and More \u2013 WebKit. Retrieved March 25 2026 from https:\/\/webkit.org\/blog\/10218\/full-third-party-cookie-blocking-and-more\/"},{"key":"e_1_3_3_73_2","unstructured":"Ziff Davis. [n. d.]. Ziff Davis Brands. Retrieved March 25 2026 from https:\/\/www.ziffdavis.com\/brands\/shopping"}],"container-title":["ACM Transactions on the Web"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774944","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T11:23:35Z","timestamp":1776165815000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3774944"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,14]]},"references-count":72,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,5,31]]}},"alternative-id":["10.1145\/3774944"],"URL":"https:\/\/doi.org\/10.1145\/3774944","relation":{},"ISSN":["1559-1131","1559-114X"],"issn-type":[{"value":"1559-1131","type":"print"},{"value":"1559-114X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,4,14]]},"assertion":[{"value":"2025-07-24","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-11-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-04-14","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}