Targeted and Troublesome: Tracking and Advertising on Children's Websites (2308.04887v2)
Abstract: On the modern web, trackers and advertisers frequently construct and monetize users' detailed behavioral profiles without consent. Despite various studies on web tracking mechanisms and advertisements, there has been no rigorous study focusing on websites targeted at children. To address this gap, we present a measurement of tracking and (targeted) advertising on websites directed at children. Motivated by lacking a comprehensive list of child-directed (i.e., targeted at children) websites, we first build a multilingual classifier based on web page titles and descriptions. Applying this classifier to over two million pages, we compile a list of two thousand child-directed websites. Crawling these sites from five vantage points, we measure the prevalence of trackers, fingerprinting scripts, and advertisements. Our crawler detects ads displayed on child-directed websites and determines if ad targeting is enabled by scraping ad disclosure pages whenever available. Our results show that around 90% of child-directed websites embed one or more trackers, and about 27% contain targeted advertisements--a practice that should require verifiable parental consent. Next, we identify improper ads on child-directed websites by developing an ML pipeline that processes both images and text extracted from ads. The pipeline allows us to run semantic similarity queries for arbitrary search terms, revealing ads that promote services related to dating, weight loss, and mental health; as well as ads for sex toys and flirting chat services. Some of these ads feature repulsive and sexually explicit imagery. In summary, our findings indicate a trend of non-compliance with privacy regulations and troubling ad safety practices among many advertisers and child-directed websites. To protect children and create a safer online environment, regulators and stakeholders must adopt and enforce more stringent measures.
- S. Englehardt and A. Narayanan, “Online tracking: A 1-million-site measurement and analysis,” in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, pp. 1388–1401.
- M. D. Ayenson, D. J. Wambach, A. Soltani, N. Good, and C. J. Hoofnagle, “Flash Cookies and Privacy II: Now with HTML5 and ETag Respawning,” 2011.
- I. Fouad, N. Bielova, A. Legout, and N. Sarafijanovic-Djukic, “Missed by filter lists: Detecting unknown third-party trackers with invisible pixels,” Proceedings on Privacy Enhancing Technologies, vol. 2020, no. 2, pp. 499–518, 2020.
- G. Acar, C. Eubank, S. Englehardt, M. Juarez, A. Narayanan, and C. Diaz, “The web never forgets: Persistent tracking mechanisms in the wild,” in Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, 2014, pp. 674–689.
- A. Zarras, A. Kapravelos, G. Stringhini, T. Holz, C. Kruegel, and G. Vigna, “The dark alleys of madison avenue: Understanding malicious advertisements,” in Proceedings of the Conference on Internet Measurement Conference, 2014, pp. 373–380.
- Z. Li, K. Zhang, Y. Xie, F. Yu, and X. Wang, “Knowing your enemy: understanding and detecting malicious web advertising,” in Proceedings of the ACM conference on Computer and communications security, 2012, pp. 674–686.
- K. Subramani, X. Yuan, O. Setayeshfar, P. Vadrevu, K. H. Lee, and R. Perdisci, “When push comes to ads: Measuring the rise of (malicious) push advertising,” in Proceedings of the ACM Internet Measurement Conference, 2020, pp. 724–737.
- I. Ilascu, “Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner,” BleepingComputer, Jan. 2023, https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner.
- L. Abrams, “Ransomware access brokers use Google ads to breach your network,” BleepingComputer, Jan. 2023, https://www.bleepingcomputer.com/news/security/ransomware-access-brokers-use-google-ads-to-breach-your-network.
- “MalVirt |||| .NET Virtualization Thrives in Malvertising Attacks,” https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks, 2023, [Accessed 28 Feb. 2023].
- “Now even YouTube serves ads with CPU-draining cryptocurrency miners,” https://arstechnica.com/information-technology/2018/01/now-even-youtube-serves-ads-with-cpu-draining-cryptocurrency-miners/, 2018, [Accessed 28 Feb. 2023].
- “Rogue GIMP Google Ad Pushed Info-Stealer Malware Through Website Replica,” https://www.bitdefender.com/blog/hotforsecurity/rogue-gimp-google-ad-pushed-info-stealer-malware-through-website-replica/, 2022, [Accessed 28 Feb. 2023].
- E. Tekiner, A. Acar, A. S. Uluagac, E. Kirda, and A. A. Selcuk, “SoK: cryptojacking malware,” in 2021 IEEE European Symposium on Security and Privacy (EuroS&P), pp. 120–139.
- K. C. Wilbur and Y. Zhu, “Click fraud,” Marketing Science, vol. 28, no. 2, pp. 293–308, 2009.
- “Estimated cost of digital ad fraud worldwide from 2018 to 2023,” https://www.statista.com/statistics/677466/digital-ad-fraud-cost/, 2023, [Accessed 28 Feb. 2023].
- E. Zeng, T. Kohno, and F. Roesner, “What makes a “bad”’ ad? user perceptions of problematic online advertising,” in Proceedings of the CHI Conference on Human Factors in Computing Systems, 2021, pp. 1–24.
- J. Zhao, G. Wang, C. Dally, P. Slovak, J. Edbrooke-Childs, M. Van Kleek, and N. Shadbolt, “‘I Make up a Silly Name’: Understanding Children’s Perception of Privacy Risks Online,” in Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems, New York, NY, USA, 2019, p. 1–13.
- P. Kumar, S. M. Naik, U. R. Devkar, M. Chetty, T. L. Clegg, and J. Vitak, “ ‘No Telling Passcodes Out Because They’re Private’: Understanding Children’s Mental Models of Privacy and Security Online,” Proc. ACM Hum.-Comput. Interact., vol. 1, no. CSCW, dec 2017.
- M.-A. Lawlor and A. Prothero, “Pester power–a battle of wills between children and their parents,” Journal of Marketing Management, vol. 27, no. 5-6, pp. 561–581, 2011.
- D. Kunkel, B. L. Wilcox, J. Cantor, E. Palmer, S. Linn, and P. Dowrick, “Report of the APA task force on advertising and children,” Washington, DC: American Psychological Association, vol. 30, p. 60, 2004.
- D. R. John, “Consumer socialization of children: A retrospective look at twenty-five years of research,” Journal of consumer research, vol. 26, no. 3, pp. 183–213, 1999.
- M. Buijzen, “Reducing children’s susceptibility to commercials: Mechanisms of factual and evaluative advertising interventions,” Media Psychology, vol. 9, no. 2, pp. 411–430, 2007.
- X. Cai and X. Zhao, “Online advertising on popular children’s websites: Structural features and privacy issues,” Computers in Human Behavior, vol. 29, no. 4, pp. 1510–1518, 2013.
- E. Rozendaal, M. Buijzen, and P. Valkenburg, “Comparing children’s and adults’ cognitive advertising competences in the Netherlands,” Journal of Children and Media, vol. 4, no. 1, pp. 77–89, 2010.
- M. Ali, M. Blades, C. Oates, and F. Blumberg, “Young children’s ability to recognize advertisements in web page designs,” British Journal of Developmental Psychology, vol. 27, no. 1, pp. 71–83, 2009.
- V. Le Pochat, T. Van Goethem, S. Tajalizadehkhoob, M. Korczyński, and W. Joosen, “Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation,” in Proceedings of the 26th Annual Network and Distributed System Security Symposium, 2019.
- “Alexa.com (from the Wayback Machine Archive),” https://web.archive.org/web/20210327233130/https://www.alexa.com, 2023, [Accessed 28 Feb. 2023].
- “We retired Alexa.com on May 1, 2022,” https://web.archive.org/web/20221020130106/https://support.alexa.com/hc/en-us/articles/4410503838999, 2023, [Accessed 28 Feb. 2023].
- A. Mathur, G. Acar, M. J. Friedman, E. Lucherini, J. Mayer, M. Chetty, and A. Narayanan, “Dark patterns at scale: Findings from a crawl of 11k shopping websites,” Proceedings of the ACM on Human-Computer Interaction, vol. 3, no. CSCW, pp. 1–32, 2019.
- P. Vallina, V. Le Pochat, . Feal, M. Paraschiv, J. Gamba, T. Burke, O. Hohlfeld, J. Tapiador, and N. Vallina-Rodriguez, “Mis-shapes, Mistakes, Misfits: An Analysis of Domain Classification Services,” in Internet Measurement Conference, ser. IMC 2020, pp. 598–618.
- N. Vlajic, M. El Masri, G. M. Riva, M. Barry, and D. Doran, “Online tracking of kids and teens by means of invisible images: COPPA vs. GDPR,” in Proceedings of the 2nd International Workshop on Multimedia Privacy and Security, 2018, pp. 96–103.
- “June/July 2022 crawl archive now available – Common Crawl,” https://commoncrawl.org/2022/07/june-july-2022-crawl-archive-now-available, 2023, [Accessed 28 Feb. 2023].
- “Digital Services Package: Commission welcomes the adoption by the European Parliament of the EU’s new rulebook for digital services,” https://ec.europa.eu/commission/presscorner/detail/en/IP_22_4313, 2022, [Accessed 28 Feb. 2023].
- “State of the Union Address,” https://www.whitehouse.gov/state-of-the-union-2023/, 2023, [Accessed 28 Feb. 2023].
- “Senators Markey and Cassidy Reintroduce COPPA 2.0, Bipartisan Legislation to Protect Online Privacy of Children and Teens,” https://www.markey.senate.gov/news/press-releases/senators-markey-and-cassidy-reintroduce-coppa-20-bipartisan-legislation-to-protect-online-privacy-of-children-and-teens, 2023, [Accessed 28 Feb. 2023].
- FTC, “Children’s Online Privacy Protection Rule (“COPPA”),” https://www.ftc.gov/node/60175, 2023, [Accessed 28 Feb. 2023].
- F. Roesner, T. Kohno, and D. Wetherall, “Detecting and defending against third-party tracking on the web,” in Presented as part of the 9th {normal-{\{{USENIX}normal-}\}} Symposium on Networked Systems Design and Implementation ({normal-{\{{NSDI}normal-}\}} 12), 2012, pp. 155–168.
- U. Iqbal, S. Englehardt, and Z. Shafiq, “Fingerprinting the fingerprinters: Learning to detect browser fingerprinting behaviors,” in 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 2021, pp. 1143–1161.
- D. Cassel, S.-C. Lin, A. Buraggina, W. Wang, A. Zhang, L. Bauer, H.-C. Hsiao, L. Jia, and T. Libert, “OmniCrawl: Comprehensive Measurement of Web Tracking With Real Desktop and Mobile Browsers.” Proc. Priv. Enhancing Technol., vol. 2022, no. 1, pp. 227–252, 2022.
- S. Dambra, I. Sanchez-Rola, L. Bilge, and D. Balzarotti, “When Sally Met Trackers: Web Tracking From the Users’ Perspective,” in 31st USENIX Security Symposium (USENIX Security 22), 2022, pp. 2189–2206.
- I. Sanchez-Rola, X. Ugarte-Pedrero, I. Santos, and P. G. Bringas, “The web is watching you: A comprehensive review of web-tracking techniques and countermeasures,” Logic Journal of the IGPL, vol. 25, no. 1, pp. 18–29, 2017.
- D. Kristol and L. Montulli, “RFC2965 - HTTP state management mechanism,” Tech. Rep., 2000.
- Q. Chen, P. Ilia, M. Polychronakis, and A. Kapravelos, “Cookie swap party: Abusing first-party cookies for web tracking,” in Proceedings of the Web Conference, 2021, pp. 2117–2129.
- J. R. Mayer and J. C. Mitchell, “Third-party web tracking: Policy and technology,” in 2012 IEEE symposium on security and privacy. IEEE, 2012, pp. 413–427.
- P. Eckersley, “How unique is your web browser?” in Privacy Enhancing Technologies: 10th International Symposium, Berlin, Germany, July 21-23, 2010. Proceedings 10. Springer, 2010, pp. 1–18.
- T. Kohno, A. Broido, and K. C. Claffy, “Remote physical device fingerprinting,” IEEE Transactions on Dependable and Secure Computing, vol. 2, no. 2, pp. 93–108, 2005.
- K. Mowery and H. Shacham, “Pixel perfect: Fingerprinting canvas in HTML5,” Proceedings of W2SP, 2012.
- Y. Cao, S. Li, and E. Wijmans, “(Cross-) browser fingerprinting via os and hardware level features,” in Proceedings Network and Distributed System Security Symposium. Internet Society, 2017.
- T. Laor, N. Mehanna, A. Durey, V. Dyadyuk, P. Laperdrix, C. Maurice, Y. Oren, R. Rouvoy, W. Rudametkin, and Y. Yarom, “DRAWNAPART: A Device Identification Technique based on Remote GPU Fingerprinting,” in Network and Distributed System Security Symposium (NDSS), 2022.
- P. Laperdrix, O. Starov, Q. Chen, A. Kapravelos, and N. Nikiforakis, “Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets.” in USENIX Security Symposium, 2021, pp. 2507–2524.
- A. Sjösten, D. Hedin, and A. Sabelfeld, “Essentialfp: Exposing the essence of browser fingerprinting,” in IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), 2021, pp. 32–48.
- U. Iqbal, P. Snyder, S. Zhu, B. Livshits, Z. Qian, and Z. Shafiq, “Adgraph: A graph-based approach to ad and tracker blocking,” in IEEE Symposium on Security and Privacy (SP), 2020, pp. 763–776.
- S. Siby, U. Iqbal, S. Englehardt, Z. Shafiq, and C. Troncoso, “WebGraph: Capturing advertising and tracking information flows for robust blocking,” in 31st USENIX Security Symposium (USENIX Security 22), 2022, pp. 2875–2892.
- I. Reyes, P. Wijesekera, J. Reardon, A. Elazari Bar On, A. Razaghpanah, N. Vallina-Rodriguez, S. Egelman et al., ““Won’t somebody think of the children?” examining COPPA compliance at scale,” in The 18th Privacy Enhancing Technologies Symposium, 2018.
- E. Zeng, T. Kohno, and F. Roesner, “Bad news: Clickbait and deceptive ads on news and misinformation websites,” in Workshop on Technology and Consumer Protection, 2020, pp. 1–11.
- E. Zeng, M. Wei, T. Gregersen, T. Kohno, and F. Roesner, “Polls, clickbait, and commemorative $2 bills: problematic political advertising on news and media websites around the 2020 US elections,” in Proceedings of the 21st ACM Internet Measurement Conference, 2021, pp. 507–525.
- O. Akgul, R. Roberts, M. Namara, D. Levin, and M. L. Mazurek, “Investigating Influencer VPN Ads on YouTube,” in IEEE Symposium on Security and Privacy (SP), 2022, pp. 876–892.
- M. Ali, A. Goetzen, A. Mislove, E. Redmiles, and P. Sapiezynski, “All things unequal: Measuring disparity of potentially harmful ads on Facebook,” in 6th Workshop on Technology and Consumer Protection, 2022.
- G. Venkatadri, E. Lucherini, P. Sapiezynski, and A. Mislove, “Investigating sources of PII used in Facebook’s targeted advertising,” Proc. Priv. Enhancing Technol., vol. 2019, no. 1, pp. 227–244, 2019.
- Y. Zhao, T. Liu, H. Wang, Y. Liu, J. Grundy, and L. Li, “Are mobile advertisements in compliance with app’s age group?” in Proceedings of the ACM Web Conference 2023, 2023, pp. 3132–3141.
- T. Medjkoune, O. Goga, and J. Senechal, “Marketing to children through online targeted advertising: Targeting mechanisms and legal aspects,” in Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, ser. CCS ’23. New York, NY, USA: Association for Computing Machinery, 2023, p. 180–194. [Online]. Available: https://doi.org/10.1145/3576915.3623172
- A. Andreou, G. Venkatadri, O. Goga, K. P. Gummadi, P. Loiseau, and A. Mislove, “Investigating ad transparency mechanisms in social media: A case study of Facebook’s explanations,” in NDSS -Network and Distributed System Security Symposium, 2018, pp. 1–15.
- M. Eslami, S. R. Krishna Kumaran, C. Sandvig, and K. Karahalios, “Communicating algorithmic process in online behavioral advertising,” in Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems, 2018, pp. 1–13.
- M. B. Musa and R. Nithyanand, “Atom: ad-network tomography,” Proceedings on Privacy Enhancing Technologies, vol. 4, pp. 295–313, 2022.
- B. Liu, A. Sheth, U. Weinsberg, J. Chandrashekar, and R. Govindan, “AdReveal: Improving transparency into online targeted advertising,” in Proceedings of the Twelfth ACM Workshop on Hot Topics in Networks, 2013, pp. 1–7.
- P. Vallina et al., “Advanced Methods to Audit Online Web Services,” Ph.D. dissertation, Universidad Carlos III de Madrid, Spain, 2023.
- G. Storey, D. Reisman, J. Mayer, and A. Narayanan, “The future of ad blocking: An analytical framework and new techniques,” arXiv preprint arXiv:1705.08568, 2017.
- X. Song, Y. Zhu, X. Zeng, and X. Chen, “Hierarchical contaminated web page classification based on meta tag denoising disposal,” Security and Communication Networks, vol. 2021, 2021.
- Q. Zhao, W. Yang, and R. Hua, “Design and research of composite web page classification network based on deep learning,” in IEEE 31st International Conference on Tools with Artificial Intelligence (ICTAI), 2019, pp. 1531–1535.
- A. Gupta and R. Bhatia, “Ensemble approach for web page classification,” Multimedia Tools and Applications, vol. 80, no. 16, pp. 25 219–25 240, 2021.
- F. Aydos, A. M. Özbayoğlu, Y. Şirin, and M. F. Demirci, “Web page classification with Google Image Search results,” arXiv preprint arXiv:2006.00226, 2020.
- D. López-Sánchez, A. G. Arrieta, and J. M. Corchado, “Visual content-based web page categorization with deep transfer learning and metric learning,” Neurocomputing, vol. 338, pp. 418–431, 2019.
- “Infographic: How Many Websites Are There?” https://www.statista.com/chart/19058/number-of-websites-online, 2023, [Accessed 28 Feb. 2023].
- “Member list,” https://www.kidsafeseal.com/certifiedproducts.html, 2023, [Accessed 28 Feb. 2023].
- “Best Websites for Kids,” https://www.commonsensemedia.org/website-lists, 2023, [Accessed 28 Feb. 2023].
- “The list of kids’ websites,” https://kids.kaspersky.com/kids-website-list, 2023, [Accessed 28 Feb. 2023].
- “Contributors,” https://support.virustotal.com/hc/en-us/articles/115002146809-Contributors, 2023, [Accessed 28 Feb. 2023].
- “Adding Rank Magnitude to the CrUX Report in BigQuery,” https://developers.google.com/web/updates/2021/03/crux-rank-magnitude, 2021, [Accessed 28 Feb. 2023].
- “Fast and reliable end-to-end testing for modern web apps |||| Playwright,” https://playwright.dev, 2023, [Accessed 28 Feb. 2023].
- N. Reimers and I. Gurevych, “Sentence Embeddings using Siamese BERT-Networks,” arXiv preprint arXiv:1908.10084, 2019.
- “sentence-transformers/all-mpnet-base-v2 ⋅⋅\cdot⋅ Hugging Face,” https://huggingface.co/sentence-transformers/all-mpnet-base-v2, 2023, [Accessed 28 Feb. 2023].
- K. Song, X. Tan, T. Qin, J. Lu, and T.-Y. Liu, “Mpnet: Masked and permuted pre-training for language understanding,” Advances in Neural Information Processing Systems, vol. 33, pp. 16 857–16 867, 2020.
- N. Reimers and I. Gurevych, “Making monolingual sentence embeddings multilingual using knowledge distillation,” arXiv preprint arXiv:2004.09813, 2020.
- Hugging Face, “trainer ⋅⋅\cdot⋅ Hugging Face,” https://huggingface.co/docs/transformers/main_classes/trainer, 2023, [Accessed 28 Feb. 2023].
- ——, “AutoModels,” https://huggingface.co/transformers/v3.0.2/model_doc/auto.html, 2023, [Accessed 28 Feb. 2023].
- Ray Project (Anyscale), “Hyperparameter Search with Transformers and Ray Tune,” https://huggingface.co/blog/ray-tune, 2023, [Accessed 28 Feb. 2023].
- The Ray Team, “Tune: Scalable Hyperparameter Tuning — Ray 2.2.0,” https://docs.ray.io/en/latest/tune/, 2023, [Accessed 28 Feb. 2023].
- M. Jaderberg, V. Dalibard, S. Osindero, W. M. Czarnecki, J. Donahue, A. Razavi, O. Vinyals, T. Green, I. Dunning, K. Simonyan et al., “Population based training of neural networks,” arXiv preprint arXiv:1711.09846, 2017.
- A. Stolerman, R. Overdorf, S. Afroz, and R. Greenstadt, “Classify, but verify: Breaking the closed-world assumption in stylometric authorship attribution,” in IFIP Working Group, vol. 11, 2013, p. 64.
- M. Juarez, S. Afroz, G. Acar, C. Diaz, and R. Greenstadt, “A critical evaluation of website fingerprinting attacks,” in Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, 2014, pp. 263–274.
- scikit-learn developers, “Scikit-learn: Machine learning in Python,” https://scikit-learn.org/stable/modules/generated/sklearn.metrics.fbeta_score.html, 2011–, version 1.0.2 [Accessed 28 Feb. 2023].
- “DNS0 Kids - A childproof version of the Internet.” https://www.dns0.eu/kids, 2023, [Accessed 4 May 2023].
- “Tracker Radar Collector,” https://github.com/duckduckgo/tracker-radar-collector, 2023, [Accessed 28 Feb. 2023].
- puppeteer, “Puppeteer,” https://github.com/puppeteer/puppeteer, 2023, [Accessed 28 Feb. 2023].
- DuckDuckGo, “notABot.js,” https://github.com/duckduckgo/tracker-radar-collector/blob/main/helpers/notABot.js, 2023, [Accessed 3 Aug. 2023].
- “Early browser API accesses and function calls are missed,” https://github.com/duckduckgo/tracker-radar-collector/issues/77, 2023, [Accessed 2 Aug. 2023].
- “Browserleaks - Check your browser for privacy leaks,” https://browserleaks.com, 2023, [Accessed 3 Aug. 2023].
- “@gorhill/ubo-core,” https://www.npmjs.com/package/@gorhill/ubo-core, 2023, [Accessed 28 Feb. 2023].
- R. Hill and N. Rolls, “uBlock Origin,” https://ublockorigin.com/, [Accessed 28 Feb. 2023].
- ——, “uBlock,” https://github.com/gorhill/uBlock/blob/491bc87e94a503a17fd11cdee35c1f1b6fea24be/platform/mv3/make-rulesets.js#L1285-L1296, 2023, [Accessed 28 Feb. 2023].
- “entity_map.json - DuckDuckGo Tracker Radar,” https://github.com/duckduckgo/tracker-radar/blob/main/build-data/generated/entity_map.json, [Accessed 28 Feb. 2023].
- T. Urban, M. Degeling, T. Holz, and N. Pohlmann, “Beyond the front page: Measuring third party dynamics in the field,” in Proceedings of The Web Conference 2020, 2020, pp. 1275–1286.
- W. Aqeel, B. Chandrasekaran, A. Feldmann, and B. M. Maggs, “On Landing and Internal Web Pages: The Strange Case of Jekyll and Hyde in Web Performance Measurement,” in Proceedings of the ACM Internet Measurement Conference, 2020, pp. 680–695.
- A. Rasaii, S. Singh, D. Gosain, and O. Gasser, “Exploring the cookieverse: A multi-perspective analysis of web cookies,” in International Conference on Passive and Active Network Measurement. Springer, 2023, pp. 623–651.
- DuckDuckGo, “autoconsent,” https://github.com/duckduckgo/autoconsent, 2023, [Accessed 28 Feb. 2023].
- “Web Tracking Protections — DuckDuckGo Help Pages,” https://help.duckduckgo.com/duckduckgo-help-pages/privacy/web-tracking-protections/#cookie-pop-up-management, 2023, [Accessed 3 May 2023].
- R. Bagge, C. Matte, Éric Daspet, K. Emanuel, S. Macbeth, and S. Roeland, “Consent-O-Matic,” https://github.com/cavi-au/Consent-O-Matic/, 2019, [Accessed 28 Feb. 2023].
- M. Nouwens, I. Liccardi, M. Veale, D. Karger, and L. Kagal, “Dark Patterns after the GDPR: Scraping Consent Pop-Ups and Demonstrating Their Influence,” in CHI Conference on Human Factors in Computing Systems, 2020, pp. 1–13.
- “Transparency and ad disclosures - Google Ads Help,” https://support.google.com/google-ads/answer/9729263?hl=en, 2023, [Accessed 28 Feb. 2023].
- L. Gak, S. Olojo, and N. Salehi, “The Distressing Ads That Persist: Uncovering The Harms of Targeted Weight-Loss Ads Among Users with Histories of Disordered Eating,” Proc. ACM Hum.-Comput. Interact., vol. 6, no. CSCW2, Nov 2022.
- A. J. Campbell, “Rethinking children’s advertising policies for the digital age,” Loy. Consumer L. Rev., vol. 29, p. 1, 2016.
- “Age-restricted ads online,” https://www.asa.org.uk/static/44dc1935-0766-4378-91171e6954ae560a/Age-restricted-ads-online-targeting-guidance.pdf, 2023, [Accessed 28 Feb. 2023].
- “Ads & Made for Kids content,” https://support.google.com/adspolicy/answer/9683742?hl=en, 2023, [Accessed 1 Mar. 2023].
- “Restricted Content, Products, and Services,” https://help.taboola.com/hc/en-us/articles/115000220793-Restricted-Content-Products-and-Services, 2023, [Accessed 1 Mar. 2023].
- G. Inc., “Google Cloud Vision API’s SafeSearch Detection,” https://cloud.google.com/vision/docs/detecting-safe-search, 2021.
- Microsoft, “Content Moderator - Image Moderation,” https://docs.microsoft.com/en-us/azure/cognitive-services/content-moderator/image-moderation-api, 2021.
- M. Grootendorst, “Bertopic: Neural topic modeling with a class-based tf-idf procedure,” arXiv preprint arXiv:2203.05794, 2022.
- “IngoSearch,” https://ingosearch.com, 2023, [Accessed 4 May 2023].
- “BetterMe,” https://betterme.world, 2023, [Accessed 4 May 2023].
- “An unhealthy diet of targeted ads: an investigation into how the diet industry exploits our data,” https://privacyinternational.org/long-read/4603/unhealthy-diet-targeted-ads-investigation-how-diet-industry-exploits-our-data, 2021, [Accessed 5 May 2023].
- “Eis.de Is Now Germany’s Biggest Adult Retailer,” https://www.venus-adult-news.com/en/web-tech/e-commerce/eis-de-is-now-germanys-biggest-adult-retailer, 2023, [Accessed 3 Aug. 2023].
- S. Bell, “How URL Tracking Systems are Abused for Phishing,” Security Boulevard, 2020, https://securityboulevard.com/2020/10/how-url-tracking-systems-are-abused-for-phishing.
- “Pixel for Marketing API - Meta Pixel - Documentation - Meta for Developers,” https://developers.facebook.com/docs/meta-pixel/implementation/marketing-api, Aug. 2023, [Accessed 2 Aug. 2023].
- “LinkedIn Insight Tag |||| LinkedIn Marketing Solutions,” https://business.linkedin.com/marketing-solutions/insight-tag, Aug. 2023, [Accessed 3 Aug. 2023].
- “Advanced Store,” https://www.advanced-store.com/en/, [Accessed: February 24, 2023].
- “Solutions,” https://throtle.io/solutions, 2021, [Accessed 31 Jul. 2023].
- “Stripe |||| Payment Processing Platform for the Internet,” https://stripe.com/en-nl, 2023, [Accessed 28 Feb. 2023].
- “Join the Smart Affiliate Marketing Network |||| WEBGAINS,” https://www.webgains.com/public/en, 2023, [Accessed 28 Feb. 2023].
- European Data Protection Board, “Binding Decision 4/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Instagram service (Art. 65 GDPR),” https://edpb.europa.eu/our-work-tools/our-documents/binding-decision-board-art-65/binding-decision-42022-dispute-submitted_en, 2022, [Accessed 28 Feb. 2023].
- ePrivacy Directive, “Directive 2002/58/EC of the European Parliament and of the Council,” http://data.europa.eu/eli/dir/2002/58/2009-12-19, 2009, [Accessed 28 Feb. 2023].
- I. Milkaite and E. Lievens, “Status quo regarding the child’s article 8 GDPR age of consent for data processing across the EU,” BIK PORTAL, no. 20/12/2019, 2019.
- European Data Protection Board, “Guidelines 05/2020 on consent under Regulation 2016/679,” https://edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf, 2020, [Accessed 28 Feb. 2023].
- “Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act),” http://data.europa.eu/eli/reg/2022/2065/oj, 2022, [Accessed 28 Feb. 2023].
- European Commission, “Digital Services Act: Commission designates first set of Very Large Online Platforms and Search Engines,” https://ec.europa.eu/commission/presscorner/detail/en/IP_23_2413, 2023.
- FTC, “Complying with COPPA: Frequently Asked Questions,” https://www.ftc.gov/node/60394, 2020, [Accessed 28 Feb. 2023].
- ——, “Fortnite Video Game Maker Epic Games to Pay More Than Half a Billion Dollars over FTC Allegations of Privacy Violations and Unwanted Charges,” https://www.ftc.gov/node/80135, 2022, [Accessed 28 Feb. 2023].
- “Digital Advertising - Worldwide |||| Statista Market Forecast,” https://www.statista.com/outlook/dmo/digital-advertising/worldwide, 2023, [Accessed 28 Feb. 2023].
- “5Rights,” https://5rightsfoundation.com, Nov. 2023, [Accessed 29 Nov. 2023].
- D. Zeber, S. Bird, C. Oliveira, W. Rudametkin, I. Segall, F. Wollsén, and M. Lopatka, “The representativeness of automated web crawls as a surrogate for human browsing,” in Proceedings of The Web Conference 2020, 2020, pp. 167–178.
- J. Jueckstock, S. Sarker, P. Snyder, A. Beggs, P. Papadopoulos, M. Varvello, B. Livshits, and A. Kapravelos, “Towards realistic and reproducible web crawl measurements,” in Proceedings of the Web Conference 2021, 2021, pp. 80–91.
- M. L. McHugh, “Interrater reliability: the kappa statistic,” Biochemia Medica, vol. 22, no. 3, pp. 276–282, 2012.
- Zahra Moti (1 paper)
- Asuman Senol (1 paper)
- Hamid Bostani (5 papers)
- Frederik Zuiderveen Borgesius (12 papers)
- Veelasha Moonsamy (14 papers)
- Arunesh Mathur (9 papers)
- Gunes Acar (8 papers)