1

I have a question regarding cross-device-tracking, especially on facebook. I'm interested in how this is done and I'm a bit concerned about my privacy.

Yesterday I surfed on amazon (logged in with my account) on my parents computer and clicked on some products (I did not log in to facebook on that computer). Today I was surfing on facebook on my laptop and I saw facebook ads with the same products. You should know that I'm not logged in to amazon on my laptop and that I have no cookies because I delete them after every browser session.

So, how does facebook know which products I looked at on other devices? Does facebook have my amazon account name or something like this?

maxeh
  • 346
  • 3
  • 15
  • Were you connected to the same Wifi (i.e. had the same IP) in both instances? – FatSecurity Sep 26 '16 at 10:45
  • Yes I was, but I still don't understand how facebook can show me the products. If I get the ads on amazon on my laptop I would understand it, but on facebook? – maxeh Sep 26 '16 at 10:52

1 Answers1

1

Based on your clarification, I think that you were re-targeted based on your IP address and some personal/demographic qualities.

I assume you understand that if it happened on the same computer, or while logged in to your FB on both computers, it was simple retargeting - Amazon showing recent product searches as a FB ad to FB users who visited the same product in the past X days.

Since FB doesn't reveal its ad-serving algorithm, I can only guess here, so I apologize in advance for the opinion-based answer.

I do have experience with FB ads and met with their representatives personally more than once, when they demonstrated the FB ads features. These guys claimed that FB ad serving algo is a "black box" that uses a lot of data for ad matching.

In any case, depending on the products you were searching, you might have been retargeted based on your interests on FB in addition to your IP address and recognized as the user who searched Amazon.

For example, if you're a 16 year-old male, and you were looking for video games on Amazon on your parents' computer, the connection could be made on FB's back-end that it was in fact you, because you're probably connected to your parents' FB accounts, you're on the same IP, and the interest in those specific ads fits your demographic much more than that of your parents.

To me, this is the most logical theory. I hope it makes sense.

Here's some interesting reading material about how the advertising industry tackles cross-device tracking, and specifically this section could be interesting for your case:

There are two ways to establish user identity across devices, one far more exact – and therefore potentially more problematic from a privacy perspective – than the other.

The deterministic method relies on personally identifiable information (PII) to make device matches when a person uses the same email address to log into an app and a website, thereby creating cross-device linkage. As long as a user is logged in across devices, advertisers and publishers can use this unique identifier to target those users on multiple screens with near-perfect precision.

...

Probabilistic cross-device matching is achieved by algorithmically analyzing thousands of different anonymous data points – device type, operating system, location data associated with bid requests, time of day and a host of others – to create statistical, aka likely, matches between devices. For example, if a phone, a tablet and a laptop connect to the same networks or Wi-Fi hotspots in the same places every weekday, it’s safe to surmise that all three devices belong to a specific commuter.

To conclude, I think that FB is using a combination of both the deterministic and probabilistic methods to conclude you were the user on both machines and serve you Amazon's retargeting ads.

FatSecurity
  • 507
  • 3
  • 8
  • Yes, I'm using the same email address for amazon and facebook. Amazon is storing my preferences/products on their servers and they want to show me ads on facebook. I guess facebook sends a request to amazon with my email address and amazon responds with products that facebook can show me in my timeline. There has to be this request, otherwise it can't be possible. This would be the deterministic method you talked about. That's a bit scary and fascinating at the same time ;) – maxeh Sep 26 '16 at 11:56
  • Ads can also be targeted using email addresses, so if Amazon has an email list, they simply upload it to FB as a target audience and Voila. I'm guessing there's some way to get remarketing into the mix as well, there. Edit: https://www.facebook.com/business/a/custom-audiences – FatSecurity Sep 26 '16 at 12:01