Firefox enables advertisers to track ad performance by default
Mozilla, a company that has always prided itself on putting privacy first, is facing a backlash from users over a Firefox data collection feature designed to help advertisers track ad performance. Adding insult to injury, the feature, called Privacy-Preserving Attribution (PPA), is enabled by default in the newest version of the browser.
In announcing the new feature, Mozilla described it as a “a non-invasive alternative to cross-site tracking.” “Tracking is terrible for privacy, because it gives companies detailed information about what you do online,” it went on. Cross-site tracking has been for the longest time associated with third-party cookies that Mozilla has been blocking in Firefox by default since 2019. However, now that the last abodes of third-party cookies, such as Microsoft Edge and Google Chrome, are finally phasing them out, browser makers are looking for a replacement.
The alternatives proposed by Google Chrome (Protected Audience API) and Microsoft Edge (Ad Selection API) seem sketchy or at least not foolproof when it comes to user privacy. That’s why AdGuard is now blocking both of them.
In light of this, Mozilla’s unveiling of a supposedly private tracking alternative might appear typical — just another browser maker catering to advertisers while also trying to sweeten the pill for users. The catch, however, lies in Mozilla’s own claim that it isn’t your run-of-the-mill tech company — implying it doesn’t shove your privacy aside in pursuit of profits like the others do.
“We’re not a normal tech company. The things we create prioritize people and their privacy over profits. We exist to make the internet a healthier, happier place for everyone,” asserts Mozilla’s mission statement, prominently displayed on its main page.
So, is Mozilla just like the others now? Without jumping the gun on this, let’s take a closer look at this new tracking alternative.
A product of cooperation with Meta
The new feature was rolled out less than a month after Mozilla’s acquisition of Anonym, an ad metrics company. This move raised eyebrows at the time, seen by some, including here at AdGuard, as a reason for concern and a potential step down a slippery slope. That is primarily because embracing technologies that facilitate data sharing for targeted advertising appears to contradict Mozilla’s mission to always prioritize privacy.
On its GitHub page, Mozilla says that it has been “working with Meta and other actors on defining an in-browser attribution API,” so the PPA seems to be the direct result of that work. It goes on to say that it will be conducting a trial of a “lightweight version of a proposal” which is what is happening now in Firefox.
Our hope is that if we develop a good attribution solution, it will offer a real alternative to more objectionable practices like tracking. We are currently testing this approach to see if it can provide advertisers with the information they’re looking for.
So what’s under the hood?
Mozilla provides a detailed technical description of the new API at this link. We will limit ourselves to a more general one.
In a nutshell, Firefox will track attributed conversions, that is where an ad displayed on one site leads to a conversion (like a purchase) on another. Traditionally, this process relies on cross-site tracking to link these events. However, Mozilla claims that its method, where the browser itself manages this, protects user privacy.
During impression registration — when a user views or clicks on an ad — Firefox will store basic information in a write-only repository. This includes the ad’s identifier and whether the user viewed or clicked the ad. When a conversion occurs, the system aggregates this data based on stored impressions. The website where the conversion happens can access related impressions using the ad’s identifier and interaction type (view or click). Mozilla claims that privacy of individual users is protected because the data is aggregated and the noise is added to prevent identifying specific user actions.
Mozilla: privacy loss is offset by the ‘enormous value’ to the advertiser
But not everyone agrees. Digital rights advocate Jonah Aragon points out that there are a “plethora of issues” with the new feature, most importantly that it reflects a misguided belief that advertisers are entitled to the collection of user data.
By baking in software that’s tailor-made for the advertising industry, Mozilla is wrongly asserting that the advertising industry has a legitimate interest in collecting your data and tracking you across the internet over all other parties, including over your own interests.
Even the mere fact that Mozilla is cooperating with Meta out of all companies on this, makes one a little suspicious of the privacy-preserving nature of the technique, but how does Mozilla itself justify it?
On their GitHub page, Mozilla acknowledges that implementing such a tracking scheme would mean users will take a hit on their privacy, with their info being used. However, the browser maker also argues that such loss is justifiable by the “enormous value” advertisers gain from attribution. Their big sell is that other funding models just won’t cut it.
We, however, disagree with the assumption that an advertising-driven model is the only viable option for sustaining online content and services. We believe there are more ethical or privacy-respecting approaches out there worth exploring. And as a self-professed champion of privacy, Mozilla should lead in exploring these alternatives, rather than seemingly trying to accommodate advertisers’ interests.
Why turn it on by default?
In the meantime, Mozilla’s user forums have been flooded with complaints about the feature. The criticism has focused on two things: first, that Mozilla implemented the feature at all, and second, that it decided to turn it on by default for those users who had telemetry enabled.
“Integrating this feature in Firefox, and especially turning it on by default, starts with the assumption that companies have the right to track users online. I am unhappy that Firefox advertises itself as a privacy preserving alternative and then integrates this feature at all,”one of the many comments reads.
Despite the mounting criticism, Mozilla has stood its ground, and has expressed no plans to roll it back or make it opt-in.
Mozilla engineer Bas Schouten argued that making this feature an opt-in would require explaining its value to the users, which he thinks would be too difficult. Schouten also argued that the opt-out option is easily discoverable.
Whether the opt-out option is actually easy to find is debatable, but the argument that users are unlikely to grasp the information about the new API and that’s why it’s better to force it on them is not a good look.
For now, the feature can be disabled by going to Firefox’s browser menu. Once there, select Settings, and find the Website Advertising Preferences section in the Privacy & Security panel. Uncheck the box called “Allow websites to perform privacy-preserving ad measurement” and you should be good.
For its part, AdGuard is blocking this API for its app and extension users with the Tracking Protection Filter enabled as a precaution to ensure our users’ privacy remains protected.
