Audit Privacy Behavior in Authenticated and Interaction-Gated Flows

Investigate cookie-based tracking and privacy behavior in authenticated or interaction-gated website flows, including login and scrolling interactions, which are not captured by the current PrivAudit measurements.

Background

PrivAudit measures cookies observable during automated visits to website pages without authentication or user interactions such as login and scrolling. The authors acknowledge that these restrictions exclude potentially important tracking behavior that may occur only after a user authenticates or interacts with page content. Extending the audit to these flows would improve coverage of website data-collection practices and provide a more complete assessment of privacy-signal and consent compliance.

References

Our measurements nonetheless remain limited to cookies observable without authenticated or interaction-gated flows (e.g., login, scrolling), which we leave to future work.

PrivAudit: A Dual-Lens Auditing Framework for Website Privacy Practices under the CCPA  (2609.09697 - Dawoud et al., 9 Sep 2026) in Section "Limitations"