Web Tracking Overview and Technologies

Tiny code snippets embedded in web pages that send information back to a server, often tracking user behavior.

A unique identifier created by combining various data points about your device and browser settings.

The process of collecting and analyzing data about user behavior on websites.

A legal framework designed to enhance data protection for individuals in the European Union.

The requirement for websites to obtain explicit permission from users before collecting and using their data.

A website's ability to remember user preferences and provide personalized experiences.

Using data collected through web tracking for marketing, advertising, and user experience optimization.

The challenge of enforcing data privacy regulations across different websites and jurisdictions.

Web tracking is the collection and sharing of information about an internet user's online activities. It's like having an invisible observer following you around the internet, taking notes on your actions.

Websites, marketing companies, advertising agencies, and even governments use various technologies to observe your online behavior, follow you across different sites, and build a profile of your digital persona.

Cookies are small text files that websites create and store on your device. They are like digital name tags that help websites recognize you when you return.

Session cookies are temporary files that are deleted when you close your browser, while persistent cookies remain on your device for a set period, even after you close your browser.

Local storage is similar to cookies, but it allows websites to store larger amounts of data on your device. It's faster and more secure than cookies because the data doesn't need to be sent to the server with every request.

Heat maps show where users click, scroll, and spend time on a webpage. They don't typically store data on your device, but instead use JavaScript to collect data about your interactions with a webpage.

Web beacons are tiny, often invisible images embedded in websites or emails. They are used to track user behavior across different websites.

Web beacons are also known as "tracking pixels" or "clear GIFs".

This type of attack involves tricking users into providing sensitive information, such as passwords or credit card details, by disguising as a trustworthy entity through email, messaging, or phone calls.

Software designed to harm computer systems, steal sensitive information, or gain unauthorized access to a network or device. Spreads through infected emails, downloads, or websites.

Software illegally installed to collect information about the user's online activity and private data. Can monitor keystrokes, track browsing history, access webcams, and steal login data.

Software that encrypts a victim's files and demands payment, usually in cryptocurrency, in exchange for a decryption key to restore access.

Masquerades as security software to trick users into paying for fake services. Hijacks a user's device, displays alarming popups, and prevents access to legitimate security software.

A mistake or oversight made by a person that leads to a cybersecurity incident. Examples: weak passwords, clicking on suspicious links, accidentally sharing sensitive information.

A cyberattack that floods a website or server with traffic, overwhelming it and causing it to become inaccessible. Often carried out using a botnet.

Involves stealing physical devices (e.g., laptops) that contain sensitive data or intellectual property. Can result in data breaches, financial loss, and business disruption.

Copies of important data that can be used to restore information after a cybersecurity incident.

A security program that monitors network traffic and prevents unauthorized access to a network or device.

Programs that detect malware and either stop it from entering a computer or remove it.

Permissions that determine which network resources and data users can access.

Use encryption to verify the authenticity of digital documents or messages.

Electronic documents used to verify the identity of a person, organization, or device.

A program that monitors network traffic and identifies potentially malicious activity.

A method of encryption that uses two keys: a public key that can be shared and a private key that is kept secret.

Data privacy involves protecting personal information from unauthorized access or use. It focuses on regulating who can access personal data, how it's collected, used, and stored.

This refers to any piece of information that can help identify an individual, like their name, address, or social security number.

Data collected about your online behavior, such as website visits, search queries, and interactions with ads.

Data that reveals your physical location, usually obtained from your smartphone or GPS.

This refers to the information that businesses and organizations collect about you, which can include various types of data about your online activity, purchases, and even personal details.

A European Union law protecting individuals' digital privacy rights. It applies to all organizations processing personal data of EU residents, including companies, non-profits, public authorities, and online service providers.

The right to be informed about how your data is used, access your data, have it erased (right to be forgotten), and have it transferred to another service provider.

Organizations must be transparent with users about how they collect and use their personal data, and follow strict rules on what information they can collect, how they can use it, and how it must be stored.

Organizations violating GDPR face fines up to €20 million or 4% of their global sales revenues.

The GDPR applies to personal data, regardless of its storage format, whether it's on paper or electronically.