{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,19]],"date-time":"2025-05-19T03:40:09Z","timestamp":1747626009880,"version":"3.40.5"},"reference-count":0,"publisher":"Privacy Enhancing Technologies Symposium Advisory Board","issue":"3","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["PoPETs"],"abstract":"<jats:p>The Privacy Sandbox initiative from Google includes APIs for enabling privacy-preserving advertising functionalities as part of the effort to limit third-party cookies. In particular, the Private Aggregation API (PAA) and the Attribution Reporting API (ARA) can be used for ad measurement while providing different guardrails for safeguarding user privacy, including a framework for satisfying differential privacy (DP). In this work, we provide an abstract model for analyzing the privacy of these APIs and show that they satisfy a formal DP guarantee under certain assumptions. Our analysis handles the case where both the queries and database can change interactively based on previous responses from the API.<\/jats:p>","DOI":"10.56553\/popets-2025-0104","type":"journal-article","created":{"date-parts":[[2025,5,19]],"date-time":"2025-05-19T03:14:51Z","timestamp":1747624491000},"page":"382-397","source":"Crossref","is-referenced-by-count":0,"title":["On the Differential Privacy and Interactivity of Privacy Sandbox Reports"],"prefix":"10.56553","volume":"2025","author":[{"given":"Badih","family":"Ghazi","sequence":"first","affiliation":[{"name":"Google"}]},{"given":"Charlie","family":"Harrison","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Arpana","family":"Hosabettu","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Pritish","family":"Kamath","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Alexander","family":"Knop","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Ravi","family":"Kumar","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Ethan","family":"Leeman","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Pasin","family":"Manurangsi","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Mariana","family":"Raykova","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Vikas","family":"Sahu","sequence":"additional","affiliation":[{"name":"Google"}]},{"given":"Phillipp","family":"Schoppmann","sequence":"additional","affiliation":[{"name":"Google"}]}],"member":"35752","published-online":{"date-parts":[[2025,7]]},"container-title":["Proceedings on Privacy Enhancing Technologies"],"original-title":[],"deposited":{"date-parts":[[2025,5,19]],"date-time":"2025-05-19T03:14:59Z","timestamp":1747624499000},"score":1,"resource":{"primary":{"URL":"https:\/\/petsymposium.org\/popets\/2025\/popets-2025-0104.php"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":0,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2025,7]]}},"alternative-id":["10.56553\/popets-2025-0104"],"URL":"https:\/\/doi.org\/10.56553\/popets-2025-0104","relation":{},"ISSN":["2299-0984"],"issn-type":[{"value":"2299-0984","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}