This work presents the first longitudinal, consent-aware measurement of the Privacy Sandbox's deployment across the Web, and monitors the usage of all major APIs in the months preceding their retirement.
Abstract
On October 17th, 2025, Google announced the retirement of most Privacy Sandbox APIs, concluding nearly five years of experimentation with its alternative to privacy-invasive data collection on the Web. Designed to balance privacy with advertising functionality and cross-site tracking, the initiative faced repeated redesigns and limited ecosystem support. In this work, we present the first longitudinal, consent-aware measurement of the Privacy Sandbox's deployment across the Web. Using a custom call listener and weekly crawls of the top-10,000 websites, we monitor the usage of all major APIs in the months preceding their retirement. Adoption had already stagnated well before Google's announcement: most APIs were used by only a handful of actors, whose activity declined steadily throughout our study. Even the APIs that Google plans to maintain show no sign of growth. The sole exception is Cookies Having Independent Partitioned State (CHIPS). Overall, the demise of the Privacy Sandbox leaves unresolved the challenge of enabling privacy-preserving interest-based advertising.
This work presents the first privacy- and security-oriented measurement of M365 third-party applications, and finds that only 1,069 of them expose both descriptions and permission sets, with significant inconsistencies in transparency across official distribution channels.
Vincenzo Longo, Alberto Verna, Nikhil Jha et al.· 0 citations
This work filters app reviews for privacy- and security-related content, yielding a comprehensive corpus of over 600K reviews, and introduces TaxoScale, a pipeline that handles taxonomy construction at this scale by extending an expert-defined taxonomy via Recursive Hierarchical Clustering and LLM-based node naming.
Moghis Fereidouni, Vinaik Chhetri, Umar Farooq et al.· 0 citations
TeleGapper, a black-box dynamic analysis framework, is presented, a black-box dynamic analysis framework to assess the privacy posture of Mini Apps by capturing runtime network traffic, identifying third-party communications, and comparing observed data flows against disclosed privacy information.
A deployment-centric taxonomy organized around three architectural constraints is introduced, derive a unified constraint model that quantifies when unsafe optimizations become unavoidable, linking each wall to specific attack surfaces, and proposes the Secure Operational Efficiency Score (SOES), a holistic metric bala...
This work presents an addition to current permission systems that splits apps into multiple sandboxed processes to enforce fine-grained privacy and data-flow controls on smartphones, and implements a proof-of-concept based on the Android Open Source Project code base.
Lucas Becker, David Breuer, Matthias Hollick· Proceedings on Privacy Enhan...· 0 citations
Analysis of the mechanisms designed to regulate and disclose data collection and sharing practices in the macOS ecosystem reveals how the macOS app ecosystem is comprised of disjoint mechanisms with divergent data abstractions, thus increasing complexity for developers while also facilitating undisclosed privacy-invasi...
Jyotirmay Chauhan, Kostas Solomos, Mir Masood Ali et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
