Home The Debate Why IP Tracking Is A Bad Idea

Why IP Tracking Is A Bad Idea

SHARE:

The DebateThe Debate” is a column focused on the current debate around ad targeting and consumer privacy.

Today’s article is written by Auren Hoffman, CEO, Rapleaf.

IP addresses are the fabric of the Internet— they are the “To” and “From” stamps that make delivering messages between computers possible.  While they are necessary to route information from computer to computer, they can — in many cases — be traced to a human or, at least, a household.  That means they can be used to track people’s online behavior in a way that eliminates their anonymity online, which bodes poorly for the future of the internet.

Users should be anonymous when they aren’t logged in

While new technologies that enable content personalization can provide substantial value, users must also be assured that their identity is protected for legal, ethical, and safety reasons.  Consumers should have the presumption of anonymity when they are surfing the Internet and not logged into a site, and they should not be tracked – either by the government or private sector – in a way that eliminates anonymity.

To ensure consumer safety and the Internet’s continuing growth, the presumption of anonymity is paramount.  In particular, third-party services like ad networks, widgets, and off-site platforms like Facebook Connect, should maintain individual anonymity. They should not be able to see someone’s cookie, IP address, or browser information and know exactly who the person is.

IP addresses are personally identifiable

IP addresses should be thought of as privileged information.  From our tests, IP addresses perfectly identify about 30% of U.S. households.  That means that from IP address, a site can know your exact address.  My home IP address, for instance, has been the same for over four years.  If consumers understand that their exact browsing habits can be tied to them individually, their wariness will slow their use of the Internet.

The EU took an active stance on IP addresses in 2008, declaring IP addresses as personally identifiable information (PII).  This is an important first step because IP addresses are PII.  That said, even the EU would admit that IP addresses do not always directly correlate to a given person.  Laptop users frequently change IP addresses as they move from an Internet café to work, for example, and ISPs often dynamically swap out IP addresses.  An IP address can sometimes only give approximate location, and may be shared across many members in an office, university, or café.

Many Internet companies use these examples to claim the IP addresses are not personally identifiable, that they are just broad representations.  But while IP addresses do not always identify households, they do so in a significant percentage of traffic (especially in Internet traffic outside work hours).

Of course, there are legitimate and even valuable uses of IP address tracking.  Tracking the IP address of suspicious ad clicking behavior often helps prevent unsophisticated hackers from committing click fraud.  Using an IP address as an additional piece of identity allows an efficient way of spotting when a credit card or identity has been stolen.  IP addresses can help understand the country of a user so you can customize the language displayed.  However, in the process of providing valuable services to its customers, many Internet companies are needlessly tracking a wide variety of data in their logs correlated directly to the IP address.

Subscribe

AdExchanger Daily

Get our editors’ roundup delivered to your inbox every weekday.

Cookies are safer for consumers

Fortunately, for companies interested in tracking user behavior for Internet personalization, there is a great consumer-centric alternative – the cookie.  Using cookies to track users and provide valuable services has several important advantages over using IP addresses:

  • Because cookies sit as plaintext on a user’s browser, they identify the party tracking user information clearly.
  • Since cookies are governed by browser security preferences, the user has complete control over the amount of tracking and can choose between anonymity or personalization.  Another benefit is that cookies can be cleared easily and at any time (unlike IP addresses).
  • Cookies can only be tied to one browser in one device (unlike an IP address, which is tied to all devices in a household). Most importantly, third party cookies should not include any personally identifiable information.  If used properly, cookies allow Internet services to improve their products and the consumer experience without fear of compromising an individual’s anonymity.

Despite these advantages, awareness of what cookies are and how they work continues to be a challenge for the average consumer.  Nonetheless, cookies represent the best technical compromise between personalization and a user’s control over online identity.

The IP address should be considered protected information.  As such, we should agree on a certain limited set of circumstances (e.g. fraud prevention) in which IP address tracking is necessary.  Even for these circumstances, we should agree that anyone collecting IP addresses should be held to a higher standard of security and consumer disclosure.  For the vast majority of Internet personalization cases, we should eliminate tracking of IP addresses and move more to a cookie-centric world in order to protect Internet users and promote more responsible growth and innovation.

Must Read

play button with many coins isolated on blue background. The concept of monetization of the video. Making money on video content. minimal style. 3d rendering

Exclusive: Connatix And JW Player Merge To Create A One-Stop Shop For Video Monetization

On Wednesday, video monetization platforms Connatix and JW Player announced plans to merge into a new entity called JWP Connatix. The deal was first rumored in July.

HUMAN Raises $50 Million

HUMAN plans to build a deterministic ID from its tracking of more than 20 trillion digital signals per week across 3 billion devices, which will aid attribution for ecommerce.

Buyers Can Now Target High-Attention Inventory In The Trade Desk

By applying Adelaide’s Attention Unit scoring, buyers can target low-, medium- and high-attention inventory via TTD’s self-serve platform.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

How Should Advertisers Navigate A TikTok Ban Or Google Breakup? Just Ask Brian Wieser

The online advertising industry is staring down the barrel of not one but two potential shutdowns that could radically change where brands put their ad dollars in 2025, according to Madison and Wall’s Brian Weiser and Olivia Morley.

Intent IQ Has Patents For Ad Tech’s Most Basic Functions – And It’s Not Afraid To Use Them

An unusual dilemma has programmatic vendors and ad tech platforms worried about a flurry of potential patent infringement suits.

TikTok Video For Open Web Publishers? Outbrain Built It.

Outbrain is trying to shed its chumbox rep by bringing social media-style vertical video to mobile publishers on the open web.