You visit a news site. Then you see an ad for something you searched for on Amazon. Then the same ad appears on a completely different site. This isn’t coincidence. It’s a tracking infrastructure that follows you around the web, and it’s more extensive than most people realize.
The mechanics: how third-party cookies work
When you visit a website, your browser stores small files called cookies. First-party cookies are set by the site you’re visiting and are mostly legitimate — they remember your login, your cart, your preferences. Third-party cookies are set by other domains embedded in the page: ad networks, analytics services, social media widgets, tracking pixels.
An ad network like Google’s DoubleClick is embedded in thousands of websites. Every time you visit one of those sites, DoubleClick’s code runs and drops a cookie identifying your browser. When you visit a different site that also uses DoubleClick, they recognize your cookie, log that visit, and add it to your profile. Do this across thousands of sites and you get a detailed map of someone’s interests, habits, and behavior.
Tracking beyond cookies
Browsers are phasing out third-party cookies, but the tracking industry has adapted. Browser fingerprinting identifies you by the unique combination of your browser version, operating system, screen resolution, installed fonts, time zone, and hundreds of other attributes. No cookie needed — your browser’s configuration is distinctive enough to identify you across sites with high accuracy.
Tracking pixels — tiny, invisible images embedded in web pages and emails — log when you load a page or open an email, along with your IP address, browser, and device. This is how email marketers know their emails were opened. Link tracking appends parameters to URLs that identify you when you click, even from email.
Login-based tracking is the most persistent: if you’re logged into Google or Facebook, those companies track your activity across every site with a Google or Facebook integration — and both are embedded in the vast majority of the web. Logging out doesn’t fully stop this; being logged in makes the tracking explicit and comprehensive.
What this data is used for
Behavioral profiles built from cross-site tracking are used for advertising targeting — showing you ads based on what you’ve searched for, read, and purchased. They’re also sold to data brokers who combine them with offline data (credit history, public records, purchase data from loyalty programs) to build comprehensive profiles that are used for credit decisions, insurance pricing, and more.
The same infrastructure used for ad targeting has been used for political targeting, manipulation, and surveillance. The Cambridge Analytica case demonstrated how behavioral profile data from Facebook could be used to identify psychographic profiles and deliver targeted political messaging at scale.
How to reduce it
Use a browser with tracking protection. Firefox blocks third-party cookies and known trackers by default. Brave goes further, blocking fingerprinting attempts and replacing ads with privacy-preserving ones. Both are free. If you stay on Chrome, install uBlock Origin — it blocks tracker domains before they load.
Install Privacy Badger. Built by the EFF, it learns to block trackers based on behavior rather than lists, catching trackers that haven’t been added to standard blocklists yet.
Use a privacy-focused DNS. Your DNS provider sees every domain name you request. Cloudflare’s 1.1.1.1 and NextDNS block tracker and ad domains at the DNS level, before requests even leave your device. NextDNS has a free tier that works as a browser extension or system-level DNS setting.
Stay logged out of Google and Facebook when you’re not actively using them. Or use Firefox’s Multi-Account Containers (an extension) to isolate your Google and Facebook sessions so they can’t see your activity on other sites.
The bottom line
You can’t eliminate tracking entirely without significantly changing how you use the web. But switching to Firefox or Brave, installing uBlock Origin and Privacy Badger, and logging out of Google and social accounts when not using them cuts the most invasive tracking by the majority. Start with the browser change — it has the highest impact for the least effort.