Browser Ad Tracking: Big Tech Calls It Privacy

What Is Attribution Level 1

Attribution Level 1 is a browser ad-measurement standard being developed through the W3C's Private Advertising Technology Working Group. It was published as a First Public Working Draft in late 2025, with the comment period open through June 10, 2026. The standard specifies a browser API that records ad impressions - the moments you see an ad - and correlates them with conversions - the moments you buy something or take a desired action on a different website.

Attribution Level 1 is a W3C browser standard that lets your browser silently record the ads you see across websites and match them against purchases you make later. The data is aggregated using differential privacy before being sent to advertisers, meaning individual records are mathematically obscured. But the browser itself still collects the raw events - every impression, every conversion - on your device. The aggregation happens after collection, not instead of it.

The standard's own specification acknowledges the risk directly: it "collates information about people from multiple web origins, which could be a significant risk to their privacy."

Who Is Behind This Standard

This is not one company's side project. Meta, Google, Apple, and Mozilla are collaborating on the specification - all four appear on the W3C Private Advertising Technology Working Group's participant list. Chrome, Safari, and Firefox account for close to nine in ten web visits worldwide, according to StatCounter: Google's Chrome has 66% of the global browser market, Apple's Safari 18%, Mozilla's Firefox 3%. Meta's own business is the stake: advertising was $196.2 billion of its $201 billion revenue in 2025.

The companies rarely agree on anything. Google and Apple have spent years fighting over app store fees, ad tracking, and browser engine requirements. Meta and Apple have been publicly feuding since iOS 14's App Tracking Transparency decimated Meta's ad revenue in 2021. When these four companies align on a proposal, it's worth asking what they all get out of it.

Scale is the answer. In an interview with The Monopoly Report, Mozilla's Martin Thomson said large platforms "have more data to use" and that "big players will be better able to develop the discipline necessary to get more out of the system", while arguing that the specification itself gives them no structural advantage. The browser itself becomes the tracking infrastructure - and the companies that control browsers are the same companies that sell the most advertising.

How Browser-Level Tracking Works

Traditional ad tracking used third-party cookies - small files placed by advertisers on websites you visit. You could see them, block them, and delete them. Browser extensions like uBlock Origin and browsers like Brave made cookie-based tracking increasingly difficult, which is why advertisers needed a replacement.

Attribution Level 1 replaces cookies with the browser itself as the tracking mechanism. Here's how it works:

• Step 1: You visit a website that shows an ad. The browser records the impression locally - which ad, which advertiser, which site.
• Step 2: Later, you visit a different website and make a purchase or take an action the advertiser cares about. The browser records the conversion.
• Step 3: The browser matches impressions to conversions using its local database, then sends aggregated reports to a "trusted" aggregation service.
• Step 4: Differential privacy noise is added before the reports reach advertisers, so individual users cannot be identified from the aggregate data.

The differential privacy layer is real. It does make individual re-identification harder from the final reports. But the browser's local database still knows exactly which ads you saw and what you bought afterward. That database sits on your device, accessible to browser updates, extensions with sufficient permissions, and any vulnerability in the browser's own code.

Why They Call It "Privacy"

The full name of the standard is "Privacy-Preserving Attribution." That name does real work. It positions cross-site tracking as a privacy feature by comparing it to the worse alternative - third-party cookies. The argument goes: since cookies are being deprecated anyway, and advertisers will find ways to track you regardless, a standardized system with differential privacy is better than the chaotic alternatives.

The problem with this framing is that it assumes ad-measurement tracking is inevitable. It treats "no tracking" as an option that does not exist. But it does exist. You can browse the web without your browser recording which ads you see. You did it for decades. The standard does not preserve privacy - it preserves advertising revenue while making opt-out harder than deleting a cookie.

The specification does not include a permissions or consent section. There is no pop-up asking whether you want your browser to record ad impressions. The feature activates by default. Mozilla already shipped a version called Privacy-Preserving Attribution in Firefox 128, enabled without user notification - a decision that drew sharp criticism from privacy advocates and was only discovered because users checked their settings manually.

What This Means for Your Photo Browsing

If you use Google Photos, browse photography gear on Amazon, view a shared album on Facebook, or click on an ad for a camera, your browser is building a record of those interactions. Attribution Level 1 correlates ad impressions with actions across sites - meaning your photo-related browsing becomes part of an advertising feedback loop.

Viallo is a private photo sharing platform that lets you create photo albums and share them through a link. Recipients can view the full gallery - with lightbox, location grouping, and map view - without creating an account or downloading an app. Photos are stored in full resolution and Viallo shows no ads: its business model is subscriptions. Its website does run the Meta Pixel and Google Analytics to measure its own sign-ups, which are the kind of ad-measurement tools this article describes. In the EEA, the UK and Switzerland they load only after you accept analytics cookies.

The distinction matters more now. When the browser itself is the tracking tool, the only defense is choosing services that do not participate in the tracking ecosystem. Ad-supported photo platforms benefit from Attribution Level 1 because it validates their ad inventory. Subscription-funded platforms have no reason to integrate with it.

How to Check Your Browser and Opt Out

Attribution tracking is on by default in most browsers. Here is how to check and disable it in each major browser as of June 2026:

• Firefox: Go to Settings -> Privacy & Security -> Website Advertising Preferences. Uncheck "Allow websites to perform privacy-preserving ad measurement." This was silently enabled in Firefox 128 and remains on unless you turn it off.
• Chrome: Go to Settings -> Privacy and Security -> Ad privacy -> Ad measurement. Toggle off "Ad measurement." Note that Google has its own parallel system (Attribution Reporting API) that may operate separately from the W3C standard.
• Safari: Apple has not fully committed to the W3C standard. Safari's Intelligent Tracking Prevention already blocks most cross-site tracking. Check Settings -> Safari -> Privacy for any attribution-related toggles.
• Brave: Brave blocks attribution APIs by default and has publicly opposed the standard. No action needed.

Beyond browser settings, use a privacy-focused DNS resolver like NextDNS or a tracker-blocking extension like uBlock Origin. For photo browsing specifically, use platforms that do not serve ads and do not participate in ad-attribution networks - their pages generate no impression events for the browser to record.

The broader problem is that privacy settings get reset with updates. A browser update can re-enable attribution tracking without telling you. Checking these settings once is not enough - you need to verify them after every major browser update.

Frequently Asked Questions