Online ads track you using a combination of browser cookies, device fingerprinting, tracking pixels, and cross-device identity graphs. These technologies allow advertisers to build detailed profiles of your browsing behavior, purchase intent, and personal interests—often without your meaningful consent. Understanding how ad tracking works is the first step toward reclaiming your digital privacy.
What Are the Main Ways Online Ads Track You?
There are six primary tracking methods used by the digital advertising industry today. Each operates differently, but all serve the same purpose: building a profile of who you are and what you're likely to buy.
According to a 2024 study by Ghostery, the average webpage loads 48 trackers before a user even interacts with it. The Electronic Frontier Foundation (EFF) reports that most users encounter over 6,000 tracking attempts per week during normal browsing activity.
How Do Browser Cookies Track You?
Browser cookies are small text files stored on your device that identify you across websites. Third-party cookies—placed by domains other than the one you're visiting—are the backbone of traditional ad tracking.
When you visit a news site, for example, an ad network like Google's DoubleClick may place a cookie in your browser. Every subsequent site you visit that uses the same ad network can read that cookie, building a cross-site profile of your browsing history. According to research from Princeton's WebTAP project, over 70% of the top 10,000 websites include third-party trackers from Google.
What Is Browser Fingerprinting?
Browser fingerprinting is a tracking technique that identifies users by collecting unique characteristics of their browser and device configuration. Unlike cookies, fingerprinting doesn't store anything on your device, making it much harder to detect or block.
Your browser reveals surprisingly specific information: screen resolution, installed fonts, GPU model, timezone, language settings, and even how your browser renders specific graphics. The EFF's Cover Your Tracks project found that 83.6% of browsers have a unique fingerprint, making this technique nearly as reliable as cookies for individual identification.
How Do Tracking Pixels and Beacons Work?
Tracking pixels are invisible 1x1 pixel images embedded in web pages and emails. When your browser loads the pixel, it sends a request to the tracking server that includes your IP address, browser type, and referring page.
Email tracking pixels are particularly invasive. According to a study by Hey.com, approximately two-thirds of all emails contain tracking pixels. Opening an email can reveal your location, the device you used, and exactly when you read the message.
What Is Cross-Device Tracking?
Cross-device tracking links your activity across your phone, laptop, tablet, and smart TV into a single identity profile. This is accomplished through deterministic matching (using login data when you sign into the same service on multiple devices) and probabilistic matching (using IP addresses, location data, and behavioral patterns to infer connections).
Companies like Oracle, LiveRamp, and The Trade Desk maintain identity graphs connecting billions of device IDs. Oracle's ID Graph alone claims to cover over 200 million individual profiles in the US.
How Big Is the Ad Tracking Problem?
The scale of digital surveillance has driven a massive backlash. According to Statista, over 912 million people worldwide now use ad blockers—a number that has grown 30% since 2020. In the US, 42.7% of internet users employ some form of ad blocking. The advertising industry loses an estimated $78 billion annually to ad blocking, but rather than addressing the underlying privacy concerns, most ad tech companies have responded by developing harder-to-block tracking methods.
Tracking Methods Compared
| Technique | Data Collected | Persistence | User Visibility | Blockable? |
|---|---|---|---|---|
| Third-party cookies | Browsing history, interests | Days to years | Visible in browser settings | Yes, easily |
| Browser fingerprinting | Device config, hardware specs | Indefinite | Invisible to most users | Very difficult |
| Tracking pixels | Page views, email opens, IP | Per request | Invisible (1x1 pixel) | Partially |
| Cross-device graphs | Multi-device identity linkage | Indefinite | Completely hidden | Nearly impossible |
| First-party cookies | Site-specific behavior | Session to years | Visible in browser settings | Yes, but breaks sites |
| Server-side tracking | All interaction data | Indefinite | Completely hidden | No |
How Adreva Approaches Ad Tracking Differently
Adreva eliminates the need for surveillance-based tracking entirely. Instead of following users across the web, Adreva's on-device ad matching system lets users declare their own interests and matches ads locally in the browser. No tracking cookies are placed, no fingerprinting is performed, and no personal data ever leaves the user's device. Users see relevant ads because they chose their preferences—not because they were secretly profiled.
Frequently Asked Questions
Can ads track you in incognito mode?
Yes. Incognito mode only prevents your browser from saving local history and cookies after the session. Websites can still track you during the session using fingerprinting, IP-based identification, and server-side logging. A 2019 Google study found that 56% of users incorrectly believed incognito mode prevented all tracking.
Do ad blockers stop all tracking?
No. Traditional ad blockers effectively block many trackers but cannot prevent server-side tracking, first-party data collection, or advanced fingerprinting techniques. According to a study by the University of Iowa, even the best ad blockers miss approximately 25% of tracking attempts.
Is browser fingerprinting legal?
In the EU, browser fingerprinting falls under the ePrivacy Directive and GDPR, requiring user consent. However, enforcement is inconsistent. In the US, there is no federal law specifically prohibiting browser fingerprinting, though the CCPA gives California residents the right to know what data is collected about them.
How many companies have my tracking data?
According to research by Cracked Labs, the average person's data is held by approximately 2,500 to 4,000 companies in the data broker ecosystem. Major data brokers like Oracle, Acxiom, and Experian maintain profiles containing up to 1,500 individual data points per consumer.
Can I see what trackers are on a website?
Yes. Tools like Ghostery, Privacy Badger, and uBlock Origin can reveal which trackers are active on any webpage. Browser developer tools (press F12) also show all third-party network requests. The average news website loads trackers from 30 or more different companies.
What is the safest browser for privacy?
Firefox with strict tracking protection, Brave Browser, and Tor Browser offer the strongest built-in privacy protections. However, no browser can prevent all forms of tracking. The most effective approach combines a privacy-focused browser with carefully chosen extensions and an awareness of how your data is collected.