Googles new advertising terms unmask the identities of billions of users

Whether it is online, or offline, your privacy is under attack - and you've known this for a long time but the level of "surveillance" is about to increase - exponentially.

Online you are tracked everywhere you go, and offline you are increasingly being tracked and identified using persistent surveillance systems, cameras and biometric technologies enabled with advanced machine vision and digital recognition capabilities and much, much more. Whether it's systems that track, monitor and record your brainwaves when you're at airports, or having your emotions read remotely via your WiFi we are going down a rabbit hole faster than you think.

When Google bought the advertising network DoubleClick in 2007, Google founder Sergey Brin said that privacy would be the company’s “number one priority when we contemplate new kinds of advertising products.”

And, for nearly a decade, Google did in fact keep DoubleClick’s massive database of web-browsing records separate by default from the names and other personally identifiable information Google has collected from Gmail and its other login accounts.

The change is enabled by default for new Google accounts while existing users were prompted to opt-in to the change this summer.

The practical result of the change is that the DoubleClick ads that follow people around on the web, using cookies and other techniques,  can now be customized based on your name and other information Google knows about you. It also means that Google could now, if it wished to, build a complete portrait of a user by name, based on everything they write in E-Mail, every website they visit and every searches they conduct. in other words, you are no longer just an anonymous number in Googles great machine - you're you, and everything you do on the web.

The move is a sea change for Google and a further blow to the online ad industry’s longstanding contention that web tracking is mostly anonymous. In recent years, Facebook, offline data brokers and others have increasingly sought to combine their troves of web tracking data with people’s real names. But until this summer, Google held the line.

The new terms

“The fact that DoubleClick data wasn’t being regularly connected to personally identifiable information was a really significant last stand,” said Paul Ohm, faculty director of the Center on Privacy and Technology at Georgetown Law.

“It was a border wall between being watched everywhere and maintaining a tiny semblance of privacy,” he said. “That wall has just fallen.”

Google spokeswoman Andrea Faville emailed a statement describing Google’s change in privacy policy as an update to adjust to the “smartphone revolution”

“We updated our ads system, and the associated user controls, to match the way people use Google today - across many different devices,” Faville wrote. She added that the change “is 100% optional - if users do not opt-in to these changes, their Google experience will remain unchanged.”

Existing Google users were prompted to opt-into the new tracking this summer through a request with titles such as “Some new features for your Google account,” so while the words "opt-in" sound as though it is completely your choice we all know with today's systems isn't never that "convenient."

The “new features" received little scrutiny at the time. Wired wrote that it “gives you more granular control over how ads work across devices" and in a personal tech column, the New York Times also described the change as “new controls for the types of advertisements you see around the web.”

Connecting web browsing habits to personally identifiable information has long been controversial.

Privacy advocates raised a ruckus in 1999 when DoubleClick purchased a data broker that assembled people’s names, addresses and offline interests. The merger could have allowed DoubleClick to combine its web browsing information with people’s names. After an investigation by the Federal Trade Commission, DoubleClick sold the broker at a loss.

In response to the controversy, the nascent online advertising industry formed the Network Advertising Initiative in 2000 to establish ethical codes. The industry promised to provide consumers with notice when their data was being collected, and options to opt out.

Most online ad tracking remained essentially anonymous for some time after that. When Google bought DoubleClick in 2007, for instance, the company’s privacy policy stated: “DoubleClick’s ad-serving technology will be targeted based only on the non-personally-identifiable information.”

In 2012, Google changed its privacy policy to allow it to share data about users between different Google services - such as Gmail and search. But it kept data from DoubleClick – whose tracking technology is enabled on half of the top 1 million websites – separate.

But the era of social networking has ushered in a new wave of identifiable tracking, in which services such as Facebook and Twitter have been able to track logged-in users when they shared an item from another website.

Two years ago, Facebook announced that it would track its users by name across the Internet when they visit websites containing Facebook buttons such as “Share” and “Like” – even when users don’t click on the button.

Offline data brokers also started to merge their mailing lists with online shoppers.

“The marriage of online and offline is the ad targeting of the last 10 years on steroids,” said Scott Howe, chief executive of broker firm Acxiom.

To opt-out of Google’s identified tracking, visit the "Activity controls" on Google’s "My Account page", and uncheck the box next to “Include Chrome browsing history and activity from websites and apps that use Google services," and you can also delete past activity from your account.