1 of 52

Third Party Trackers on Law School Library Websites

Tom Boone

tom@tomboone.com

github.com/tomboone

2 of 52

3 of 52

GET /index.html HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE5.01; Windows NT)

Host: www.google.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

4 of 52

HTTP/1.1 200 OK

Date: Mon, 27 Jul 2009 12:28:53 GMT

Server: Apache/2.2.14 (Win32)

Last-Modified: Wed, 22 Jul 2009 19:15:56 GMT

Content-Length: 88

Content-Type: text/html

Connection: Closed

5 of 52

<html>

<body>

<h1>Hello, World!</h1>

</body>

</html>

6 of 52

<html>

<body>

<h1>Hello, World!</h1>

<img src=”http://www.facebook.com/logo.png” />

</body>

</html>

7 of 52

GET /logo.png HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE5.01; Windows NT)

Host: www.facebook.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

8 of 52

HTTP/1.1 200 OK

Date: Mon, 27 Jul 2009 12:28:53 GMT

Server: Apache/2.2.14 (Win32)

Last-Modified: Wed, 22 Jul 2009 19:15:56 GMT

Content-Length: 88

Content-Type: text/html

Connection: Closed

Set-Cookie: id=a3fWa; Expires=Wed, 21 Oct 2015 07:28:00 GMT; Secure; HttpOnly

9 of 52

GET /logo.png HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE5.01; Windows NT)

Host: www.facebook.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

Cookie: id=a3fWa

10 of 52

HTTP/1.1 200 OK

Date: Mon, 27 Jul 2009 12:28:53 GMT

Server: Apache/2.2.14 (Win32)

Last-Modified: Wed, 22 Jul 2009 19:15:56 GMT

Content-Length: 88

Content-Type: text/html

Connection: Closed

Set-Cookie: id=a3fWa; Expires=Wed, 21 Oct 2015 07:28:00 GMT; Secure; HttpOnly

Location: http://doubleclick.com/tracker.js

11 of 52

GET /tracker.js HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE5.01; Windows NT)

Host: doubleclick.com

Accept-Language: en-us

Accept-Encoding: gzip, deflate

Connection: Keep-Alive

12 of 52

13 of 52

14 of 52

15 of 52

16 of 52

17 of 52

18 of 52

19 of 52

3rd Party HTTP Requests

20 of 52

Most 3rd Party HTTP Requests(Avg. Page Load - All Contexts)

1

Boston College

195.8

2

Brigham Young University

128.1

3

University of Wyoming

113.5

4

Saint Louis University

105.5

5

University of the Pacific (McGeorge)

101.0

6

Ave Maria School of Law

96.6

7

University of Richmond

96.4

8

Case Western Reserve University

90.3

9

Florida Coastal School of Law

89.1

10

University of Pittsburgh

79.3

21 of 52

22 of 52

23 of 52

Most 3rd Party HTTP Requests�(Avg. Page Load - Tracking Context)

1

Suffolk University

29.9

2

University of the Pacific (McGeorge)

26.0

3

University of Pittsburgh

25.7

4

Arizona State University

23.7

5

Concordia University

23.1

6

University of Wyoming

20.5

7

Pepperdine University

20.2

8

Drexel University

20.1

9

Elon University

19.2

10

Case Western Reserve University

19.1

24 of 52

Most 3rd Party Domains Requested�(Avg. Page Load - Tracking Context)

1

University of Pittsburgh

13

2

Suffolk University

12

3

University of Wyoming

11

3

University of the Pacific (McGeorge)

11

5

Concordia University

10

5

Elon University

10

7

Saint Louis University

9

7

University of Baltimore

9

9

Creighton University

8

10

Barry University

7

25 of 52

Most 3rd Party Orgs Requested�(Avg. Page Load - Tracking Context)

1

University of Pittsburgh

10

1

University of Wyoming

10

3

Elon University

9

3

Suffolk University

9

3

University of the Pacific (McGeorge)

9

6

Concordia University

8

6

Saint Louis University

8

8

Creighton University

6

8

University of Baltimore

6

10

Barry University

5

26 of 52

Mean

Median

Third Party HTTP Request

29.5

22

Third Party Tracker Requests

7.32

6

Third Party Tracker Domains Requested

2.99

2

Third Party Tracker Orgs Requested

2.08

2

27 of 52

Most Common Domains(Avg. Page Load - All Contexts)

1

google-analytics.com

85.9%

2

googleapis.com

63.4%

3

doubleclick.net

52.2%

4

google.com

49.8%

5

gstatic.com

42.0%

6

googletagmanager.com

35.6%

7

facebook.com

31.7%

8

facebook.net

30.2%

9

bootstrapcdn.com

24.4%

10

googleadservices.com

22.9%

28 of 52

Most Common Domains(Avg. Page Load - Tracking Context)

1

google-analytics.com

85.9%

2

doubleclick.net

51.7%

3

facebook.com

30.7%

4

typekit.net

15.1%

5

googleadservices.com

12.7%

6

google.com

11.2%

7

addthis.com

8.8%

8

twitter.com

8.3%

9

newrelic.com

7.8%

10

addthisedge.com

6.8%

29 of 52

Most Common Orgs(Avg. Page Load - Tracking Context)

1

Alphabet

86.8%

2

Facebook

30.7%

3

Adobe

16.1%

4

Oracle

8.8%

5

Twitter

8.3%

6

New Relic

7.8%

7

LinkedIn

6.3%

8

Amazon

5.4%

9

AppNexus

4.4%

10

Verizon

3.4%

30 of 52

3rd Party ID Cookies

31 of 52

Most 3rd-party ID cookies set(Avg. Page Load)

1

University of Wyoming

55

2

Suffolk University

53

3

Vermont Law School

46

4

University of the Pacific (McGeorge)

43.5

5

Saint Louis University

37

6

IIT Chicago-Kent College of Law

35

7

Loyola University Chicago

34

7

University of Pittsburgh

34

9

Capital University

33

10

Albany Law School

30.5

32 of 52

Most 3rd-party ID cookie domains(Avg. Page Load)

1

University of Wyoming

20

2

Suffolk University

15

2

University of the Pacific (McGeorge)

15

4

IIT Chicago-Kent College of Law

12

5

Saint Louis University

11

6

University of Pittsburgh

10

7

Elon University

9

8

Concordia University

8

8

Loyola University Chicago

8

10

Barry University

7

33 of 52

Most 3rd-party ID cookie orgs(Avg. Page Load)

1

University of Wyoming

17

2

Suffolk University

14

3

University of the Pacific (McGeorge)

12

4

IIT Chicago-Kent College of Law

11

4

Saint Louis University

11

6

Concordia University

8

6

Elon University

8

6

University of Pittsburgh

8

9

Barry University

6

9

Loyola University Chicago

6

9

Southwestern University

6

9

Stetson University

6

9

University of Akron

6

9

Vermont Law School

6

34 of 52

Most common 3rd-party ID cookie domains�(Avg. Page Load)

1

doubleclick.net

34.6%

2

google.com

32.7%

3

facebook.com

24.4%

4

adnxs.com

9.8%

5

addthis.com

9.3%

5

cloudflare.com

9.3%

5

twitter.com

9.3%

8

newrelic.com

7.3%

9

adsrvr.org

6.8%

9

linkedin.com

6.8%

35 of 52

Most common 3rd-party ID cookie orgs�(Avg. Page Load)

1

Alphabet

51.2%

2

Facebook

24.4%

3

AppNexus

9.8%

4

Cloudflare

9.3%

4

Oracle

9.3%

4

Twitter

9.3%

7

Verizon

8.4%

8

New Relic

7.3%

9

LinkedIn

6.8%

9

The Trade Desk

6.8%

36 of 52

ID Cookie Syncing

37 of 52

Libraries w/Most Unique�Instances of ID Cookie Syncing

1

University of Baltimore

13

2

Suffolk University

8

2

University of Pittsburgh

8

4

Capital University

7

4

University of Wyoming

7

6

Loyola University Chicago

6

6

Mississippi College

6

8

Saint Louis University

5

8

South Texas College of Law

5

38 of 52

ID Cookies Sent to the Most Domains

1

adsrvr.org

TDID

29

2

rubiconproject.com

put_3644

23

3

addthis.com

uid

14

4

adnxs.com

uuid2

8

5

addthis.com

na_id

5

5

nexac.com

na_id

5

7

w55c.net

wfivefivec

4

8

turn.com

uid

2

8

weborama.com

wui

2

10

rubiconproject.com

put_2528

1

39 of 52

Domains Sending ID Cookies�to the Most Other Domains

1

adroll.com

23

2

adsrvr.org

16

3

nexac.com

11

4

adnxs.com

6

4

bluekai.com

6

6

w55c.net

4

7

turn.com

2

7

weborama.com

2

40 of 52

Domains Receiving ID Cookies�from the Most Other Domains

1

addthis.com

21

2

bluekai.com

9

2

thebrighttag.com

9

4

adnxs.com

6

5

bidswitch.net

5

5

tapad.com

5

5

twitter.com

5

8

rlcdn.com

3

8

rubiconproject.com

3

8

sharethis.com

3

41 of 52

Google Analytics

42 of 52

43 of 52

44 of 52

http://www.google-analytics.com/r/collect?v=1&_v=j60&a=1876458564&t=pageview&_s=1&dl=http%3A%2F%2Fwww.albanylaw.edu%2Facademic-life%2Fschaffer-law-library&ul=en-us&de=UTF-8&dt=Schaffer%20Law%20Library%20%7C%20Albany%20Law%20School%3A%20A%20New%20York%20Law%20School&sd=24-bit&sr=1366x768&vp=1350x681&je=0&fl=26.0%20r0&_u=IEBAAEABI~&jid=424313670&gjid=323751870&cid=1181300418.1503353988&tid=UA-1381702-1&_gid=529927278.1503353988&_r=1&z=304405929

45 of 52

Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1381702-1&cid=1181300418.1503353988&jid=424313670&_gid=529927278.1503353988&gjid=323751870&_v=j60&z=304405929

46 of 52

Cookie: id=22e2e7283d44002b||t=1501082609|et=730|cs=002213fd48440a75ee301cac03; IDE=AHWqTUkz10USwDC0MXe9UihPVuHvKry_-1vMiQVe2VIE38yooDxCNitKSw; __sonar=10714803290055844155; __gfp_64b=4mAcO.4ySqWqzGmBX3k_Zt6BdZS6M8NtIL_mlHRXWOr.S7; __gads=ID=5f721452f109dc0d:T=1501289629:S=ALNI_MaKC4Gbhw_OfLDim-4rWu4nv6eUlg; _ym_uid=1501440704779661542

47 of 52

48 of 52

AddThis

49 of 52

50 of 52

https://su.addthis.com/red/usync?pid=11124&puid=e237d407-4ed5-4d61-b6dd-0f00c81155bc&url=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3daddthis

51 of 52

Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=addthis

Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=e237d407-4ed5-4d61-b6dd-0f00c81155bc&ttd_puid=

Location:

https://sync.sharethis.com/ttd?uid=e237d407-4ed5-4d61-b6dd-0f00c81155bc

52 of 52