Sammenlign revisioner

PPA, campaign performance, ads

Firefox 128 introduces privacy-preserving attribution, allowing advertisers to measure campaign performance while protecting user privacy.

{warning}Mozilla values user privacy as a fundamental right. In Firefox [[Find what version of Firefox you are using| version]] 128, we are testing a new technology that we hope could one day replace invasive advertising practices. It's a new emerging web standard that allows advertisers to understand how effective their ads are without tracking individuals. This prototype will run on a few sites in the US under strict supervision. It aims to protect user activity from external access and will inform future W3C standards. PPA is not tracking; it's a report that contains Ads ID with impressions count managed by the browser. That info is then aggregated with other user data. Because this is a test, it can be disabled at any time in settings and is only enabled if telemetry is also enabled. We understand this change has sparked debate within our community, and we appreciate your feedback as we work towards a better, privacy-focused solution. {/warning} Privacy-preserving attribution (PPA) is an experimental feature shipping in Firefox [[Find what version of Firefox you are using|version]] 128. Mozilla is prototyping this feature in order to inform an emerging Web standard designed to help sites understand how their ads perform without collecting data about individual people. By offering sites a non-invasive alternative to cross-site tracking, we hope to achieve a significant reduction in this harmful practice across the web. =What is attribution?= Attribution is how advertisers learn whether their advertising works. Attribution measures how many people saw an ad on a website and then later visited the advertiser’s website to do something the advertiser cared about. For example, maybe someone sees an ad for a sale on a product, then buys that product. Attribution counts how many people do that. Attribution is very important to advertisers. Sadly, [https://wiki.mozilla.org/Security/Anti_tracking_policy tracking] is the only way to perform attribution without help from the browser. Tracking is terrible for privacy, because it gives companies detailed information about what you do online. While Firefox includes many privacy protections that make it more difficult for sites to track you online (Enhanced Tracking Protection, Total Cookie Protection, Query Parameter Stripping, and [https://www.mozilla.org/firefox/features/private/ many other measures]), there’s a huge incentive for sites to find ways around these in order to perform attribution. Our hope is that if we develop a good attribution solution, it will offer a real alternative to more objectionable practices like tracking. We are currently testing this approach to see if it can provide advertisers with the information they're looking for. =How does privacy-preserving attribution protect my data?= PPA does not involve websites tracking you. Instead, your browser is in control. This means strong privacy safeguards, including the option to not participate. Privacy-preserving attribution works as follows: #Websites that show you ads can ask Firefox to remember these ads. When this happens, Firefox stores an “impression” which contains a little bit of information about the ad, including a destination website. #If you visit the destination website and do something that the website considers to be important enough to count (a “conversion”), that website can ask Firefox to generate a report. The destination website specifies what ads it is interested in. #Firefox creates a report based on what the website asks, but does not give the result to the website. Instead, Firefox encrypts the report and anonymously submits it using the [https://datatracker.ietf.org/doc/html/draft-ietf-ppm-dap Distributed Aggregation Protocol (DAP)] to an “aggregation service”. #Your results are combined with many similar reports by the aggregation service. The destination website periodically receives a summary of the reports. The summary includes noise that provides [https://en.wikipedia.org/wiki/Differential_privacy differential privacy]. This approach has a lot of advantages over legacy attribution methods, which involve many companies learning a lot about what you do online. PPA does not involve sending information about your browsing activities to anyone. This includes Mozilla and our DAP partner ([https://www.isrg.org/ ISRG]). Advertisers only receive aggregate information that answers basic questions about the effectiveness of their advertising. This all gets very technical, but we have additional reading for anyone interested in the details about how this works, like our [https://blog.mozilla.org/en/mozilla/privacy-preserving-attribution-for-advertising/ announcement] from February 2022 and this [https://github.com/mozilla/explainers/tree/main/ppa-experiment technical explainer]. =In what conditions is privacy-preserving attribution used?= PPA is enabled in Firefox starting in version 128. A small number of sites are going to test this and provide feedback to inform our standardization plans, and help us understand if this is likely to gain traction. PPA can be disabled in Firefox settings. =How can I disable PPA?= Firefox provides an easy simple option to disable the privacy-preserving attribution feature if users prefer not to participate. Websites will not know if you choose to opt out in this way. To opt out, do the following: #[[Template:optionspreferences]] #In the {menu Privacy & Security} panel, find the ''Website Advertising Preferences'' section. #Uncheck the box labeled '''Allow websites to perform privacy-preserving ad measurement'''. ;[[Image:Website advertising preferences]] =Related articles= *[[Firefox privacy and security features]] *[[Enhanced Tracking Protection in Firefox for desktop]]