| Next revision | Previous revision |
| privacy [2026/08/27 14:22] – Create privacy namespace overview (9 children). Authored by Claude. karel.kubicek.claude | privacy [2026/09/16 10:59] (current) – Add Privacy:Data subject rights as the 18th child; note the privacy:requests id clash. Authored by Claude karel.kubicek.claude |
|---|
| |
| <WRAP important> | <WRAP important> |
| **A namespace page outlines the pages inside it rather than carrying its own content.** (([[contributing]], "Namespace and page structure".)) All **9** children below are written. [[Privacy:Cookies]] is the oldest of them and is shorter than its siblings; it has been patched for Chrome's 2025 reversal on third-party cookies, but it is not a 2026 corpus-backed rebuild in the style of [[Privacy:Requests]]. | **A namespace page outlines the pages inside it rather than carrying its own content.** (([[contributing]], "Namespace and page structure".)) All **18** children below are written. [[Privacy:Cookies]] is the oldest of them and is shorter than its siblings; it has been patched for Chrome's 2025 reversal on third-party cookies, but it is not a 2026 corpus-backed rebuild in the style of [[Privacy:Requests]]. |
| </WRAP> | </WRAP> |
| |
| | [[Privacy:Requests]] | Classifying web requests as tracking or not (filter lists vs learned classifiers). | | | [[Privacy:Requests]] | Classifying web requests as tracking or not (filter lists vs learned classifiers). | |
| | [[Privacy:Cookies]] | Classifying cookies; first- vs third-party, and what Chrome's 2025 third-party-cookie decision does to a crawl. | | | [[Privacy:Cookies]] | Classifying cookies; first- vs third-party, and what Chrome's 2025 third-party-cookie decision does to a crawl. | |
| | | [[Privacy:Browser storage]] | Persistence that is not a ''Set-Cookie'': localStorage, IndexedDB, service workers and the caches. What your instrument records, and what it silently does not. | |
| | [[Privacy:Fingerprinting]] | Measuring browser fingerprinting. The word also names unrelated tasks (website / traffic fingerprinting, …). | | | [[Privacy:Fingerprinting]] | Measuring browser fingerprinting. The word also names unrelated tasks (website / traffic fingerprinting, …). | |
| | [[Privacy:JavaScript]] | Observing and labelling scripts. Choosing the unit (domain vs URL vs content). | | | [[Privacy:JavaScript]] | Observing and labelling scripts. Choosing the unit (domain vs URL vs content). | |
| | [[Privacy:TCF consent strings]] | The IAB TC string and Google's Additional Consent string as measurement artefacts. | | | [[Privacy:TCF consent strings]] | The IAB TC string and Google's Additional Consent string as measurement artefacts. | |
| | [[Privacy:Darkpatterns]] | Deceptive patterns as the thing you measure, and as a confounder of the crawler. | | | [[Privacy:Darkpatterns]] | Deceptive patterns as the thing you measure, and as a confounder of the crawler. | |
| | | [[Privacy:Privacy Sandbox]] | The APIs that were built to replace third-party cookies and are now being withdrawn: what shipped, what a crawler can record of it, and what the corpus measured. | |
| | | [[Privacy:Browser protection]] | The browser's own anti-tracking machinery — Firefox ETP and Total Cookie Protection, Safari ITP, Brave Shields, Edge Tracking Prevention — as a crawl //treatment//, and as the confounder your automation library already set for you. | |
| | | [[Privacy:Browser extensions]] | Extensions as the //object// of a measurement: crawling the stores, whether a page can enumerate what you have installed, what extensions leak, and what Manifest V3 did to all three. | |
| | | [[Privacy:Email tracking]] | Measuring what arrives in a mailbox or on a handset: tracking inside a message, the address as an identifier, spam, and SMS / robocall / messaging-app abuse. The instrument is an address you own, not a browser. | |
| | | [[Privacy:Ads txt]] | The observable ad supply chain: ''ads.txt'' / ''app-ads.txt'', ''sellers.json'' and client-side header bidding as three views of who is authorised, who claims, and who actually bids to sell a site's inventory. Not cookie syncing. | |
| | | [[Privacy:Policies]] | The policy, terms and store-declared privacy label as **text you collect and label**: where the document is, how much of the population has one at all, the annotated corpora that already exist, the tool lineage with its dates, and policy-versus-behaviour consistency as the actual measurement. Half of it is Android app policies. | |
| | | [[Privacy:Age assurance]] | Age gates and age verification as deployed: the eight mechanisms the term spans, how you detect one at crawl time, why the denominator needs a jurisdiction, and the ethics questions this topic raises that [[Practices:Ethics]] does not answer. **Thin on purpose** — five papers in the corpus measure it. | |
| | | [[Privacy:Data subject rights]] | Access, deletion and opt-out **requests** — the ones a person sends to a company — as a measurement instrument, plus the machine-readable opt-out signals (Global Privacy Control, "Do Not Sell") that are the scalable half. **Note the id**: [[Privacy:Requests]] on this wiki is //HTTP// requests. | |
| |
| [[Privacy:Requests]], [[Privacy:Cookies]], [[Privacy:JavaScript]] and [[Privacy:Fingerprinting]] are four views of the same page-load. Start with the one your method actually keys on; the other three are where it silently fails. Consent is upstream of all four: a crawl that never touched the banner measured the no-interaction condition, not the post-consent web. | [[Privacy:Privacy Sandbox]] is the odd one out: it is about platform features rather than about a thing on the page, and it is the page to read before you pin a browser version for a 2026 crawl. |
| | |
| | [[Privacy:Browser protection]] is the other page about the instrument rather than the object: every page above measures something through a browser, and the browser is blocking some of it. Read it before you write "we crawled with Firefox" in a methodology section. |
| | |
| | [[Privacy:Browser extensions]] is its mirror image: the browser is also running third-party code that neither you nor the site chose. That page is about measuring those programs — not about using one as your instrument, which 92 of the 218 candidate papers it screened were doing. |
| | |
| | [[Privacy:Email tracking]] is the one page here that usually needs no browser at all. It is in this namespace because it shares the //privacy axis// and the identifier — an email address or phone number is the cross-context key that survives everything third-party cookies do not — rather than because it shares the platform. It also carries the SMS, robocall and messaging-app literature, which is where this topic is currently most active. |
| | |
| | [[Privacy:Data subject rights]] is the only page here whose instrument is a **person** rather than a browser: the request is sent by a named, identifiable human being, so the median study asks **30** organisations where the median crawl visits 10,000 sites. It is also the page that owns the //opt-out// signals — GPC, the "Do Not Sell" link, the US Privacy and GPP strings — which puts its boundary with [[Privacy:Consent]] and [[Privacy:TCF consent strings]] on the page itself. |
| | |
| | [[Privacy:Age assurance]] is the newest and by far the thinnest, and the thinness is the point: of the 5,855 corpus papers with full text, **38** use any age-assurance phrase and **5** measure one. It is here rather than under ''design:'' because the gate is a thing on the page — an interstitial that sets state before any consent interaction, which makes it a confounder for [[Privacy:Consent]] and [[Privacy:Cookies]] as well as an object in its own right. |
| | |
| | [[Privacy:Policies]] is the only page here whose object is a //document// rather than a thing the browser did. It is the other half of a compliance claim: every page above tells you what a site did, and that page tells you what the site said it would do. Read it with [[Privacy:Consent]] — the banner and the policy are different measurements of the same disclosure, and the two literatures barely cite each other. |
| | |
| | [[Privacy:Requests]], [[Privacy:Cookies]], [[Privacy:Browser storage]], [[Privacy:JavaScript]] and [[Privacy:Fingerprinting]] are five views of the same page-load. Start with the one your method actually keys on; the other three are where it silently fails. Consent is upstream of all four: a crawl that never touched the banner measured the no-interaction condition, not the post-consent web. |
| |
| ===== Where this namespace stops ===== | ===== Where this namespace stops ===== |
| ===== Methodology and limitations of these figures ===== | ===== Methodology and limitations of these figures ===== |
| |
| The **5,859** / **1,622** are paper counts from the 5,859-paper extraction (seven venues, 2010–2026). 2025–2026 venue-years are provisional — see [[literature:corpus]]. The **9** is a wiki-page count as of 2026-08-27. Queries: [[provenance:privacy]]. Joint sitting: [[provenance:design]]. | The **5,859** / **1,622** are paper counts from the 5,859-paper extraction (seven venues, 2010–2026). 2025–2026 venue-years are provisional — see [[literature:corpus]]. The **18** is a wiki-page count as of 2026-09-16. Queries: [[provenance:privacy]]. Joint sitting: [[provenance:design]]. |
| |
| <bibtex bibliography></bibtex> | <bibtex bibliography></bibtex> |
