Skip to Main content Skip to Navigation
Conference papers

My Cookie is a phoenix: detection, measurement, and lawfulness of cookie respawning with browser fingerprinting

Imane Fouad 1 Cristiana Santos 2 Arnaud Legout 3 Nataliia Bielova 1 
1 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
Inria Grenoble - Rhône-Alpes, CITI - CITI Centre of Innovation in Telecommunications and Integration of services, Inria Lyon
3 DIANA - Design, Implementation and Analysis of Networking Architectures
CRISAM - Inria Sophia Antipolis - Méditerranée
Abstract : Stateful and stateless web tracking gathered much attention in the last decade, however they were always measured separately. To the best of our knowledge, our study is the first to detect and measure cookie respawning with browser and machine fingerprinting. We develop a detection methodology that allows us to detect cookies dependency on browser and machine features. Our results show that 1, 150 out of the top 30, 000 Alexa websites deploy this tracking mechanism. We find out that this technique can be used to track users across websites even when third-party cookies are deprecated. Together with a legal scholar, we conclude that cookie respawning with browser fingerprinting lacks legal interpretation under the GDPR and the ePrivacy directive, but its use in practice may breach them, thus subjecting it to fines up to 20 million €.
Document type :
Conference papers
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-03218403
Contributor : Imane FOUAD Connect in order to contact the contributor
Submitted on : Thursday, February 24, 2022 - 2:36:22 PM
Last modification on : Thursday, August 4, 2022 - 5:18:38 PM

File

PETS_21_My_cookie_is_a_phoenix...
Files produced by the author(s)

Identifiers

  • HAL Id : hal-03218403, version 2

Citation

Imane Fouad, Cristiana Santos, Arnaud Legout, Nataliia Bielova. My Cookie is a phoenix: detection, measurement, and lawfulness of cookie respawning with browser fingerprinting. PETS 2022 - 22nd Privacy Enhancing Technologies Symposium, Jul 2022, Sydney, Australia. ⟨hal-03218403v2⟩

Share

Metrics

Record views

1144

Files downloads

478