Privacy Badger

Что такое Privacy Badger?

Privacy Badger — это расширение для браузера, которое не позволяет рекламодателям и другим сторонним трекерам тайно отслеживать, куда вы переходите и какие страницы просматриваете в интернете. Если кажется, что рекламодатель отслеживает вас на нескольких сайтах без вашего разрешения, Privacy Badger автоматически блокирует этого рекламодателя от загрузки любого дальнейшего содержимого в ваш браузер. Для рекламодателя это выглядит так, как будто вы внезапно исчезли.

Чем Privacy Badger отличается от других блокирующих расширений?

Privacy Badger появился из нашего желания иметь возможность порекомендовать только одно расширение, которое:

• Будет автоматически анализировать и блокировать любой трекер или рекламу, которая нарушает принцип согласия пользователя
• Может нормально функционировать без каких-либо настроек, знаний или конфигурации от пользователя
• Использует алгоритмические методы для решения того, что является отслеживанием, а что не является
• Производится организацией, которая однозначно работает для своих пользователей, а не на выгоду

В результате Privacy Badger отличается от традиционных расширений для блокировки рекламы по двум ключевым параметрам. Во-первых, в то время как большинство других расширений для блокировки отдают приоритет блокировке рекламы, Privacy Badger не блокирует рекламу, если только она не отслеживает вас; фактически, одна из наших целей — стимулировать рекламодателей вести себя более достойно.

Во-вторых, большинство других блокировщиков полагаются на управляемый человеком список доменов или URL-адресов для блокировки. Privacy Badger — это алгоритмический блокировщик трекеров: мы определяем, как выглядит отслеживание, и затем Privacy Badger блокирует или ограничивает домены, которые он определил как трекеры, в реальной обстановке. То, что считается трекером, а что нет, полностью основано на том, как проявляет себя конкретный домен, а не на человеческом суждении.

Privacy Badger отправляет сигнал Global Privacy Control, чтобы отказаться от разпростровления и продажи ваших данных, и отправляет сигнал Do Not Track, чтобы сообщить компаниям не отслеживать вас. Если трекеры проигнорируют эти сигналы, Privacy Badger научится блокировать их.

Помимо этого, Privacy Badger имеет другие преимущества, такие как блокировка куки-файлов, замена потенциально полезных виджетов (видео плееров, виджетов для комментарии, и т. п.) специальными элементами с возможностью выборочной активации, и удаление слежения из ссылок при переходе по ссылке на другой веб-сайт на Facebook и Google.

Когда вы используете Privacy Badger, вы поддерживаете Electronic Frontier Foundation и помогаете бороться за лучший Интернет для всех.

How does Privacy Badger work?

When you view a webpage, that page will often be made up of content from many different sources. For example, a news webpage might load the actual article from the news company, ads from an ad company, and the comments section from a different company that’s been contracted out to provide that service.

Privacy Badger keeps track of all of this. If the same source seems to be tracking across different websites, then Privacy Badger springs into action, telling the browser not to load any more content from that source. And when your browser stops loading content from a source, that source can no longer track you. Voila!

At a more technical level, Privacy Badger keeps track of the “third party” domains that embed images, scripts and advertising in the pages you visit. Privacy Badger looks for tracking techniques like uniquely identifying cookies, local storage “supercookies,” and canvas fingerprinting. If it observes the same third-party host tracking on three separate sites, Privacy Badger will automatically disallow content from that third-party tracker.

By default, Privacy Badger receives periodic learning updates from Badger Sett, our Badger training project. This “remote learning” automatically discovers trackers present on thousands of the most popular sites on the Web.

What is a third party tracker?

When you visit a webpage parts of the page may come from domains and servers other than the one you asked to visit. This is an essential feature of hypertext. On the modern Web, embedded images and code often use cookies and other methods to track your browsing habits — often to display advertisements. The domains that do this are called “third party trackers”, and you can read more about how they work here.

What do the red, yellow and green sliders in the Privacy Badger menu mean?

Red means that content from this third party domain has been completely disallowed.

Yellow means that the third party domain appears to be trying to track you, but it is on Privacy Badger’s cookie-blocking “yellowlist” of third party domains that, when analyzed, seemed to be necessary for Web functionality. In that case, Privacy Badger will load content from the domain but will try to screen out third party cookies and referrers from it.

Green means “no action”; Privacy Badger will leave the domain alone.

Why does Privacy Badger block ads?

Actually, nothing in the Privacy Badger code is specifically written to block ads. Rather, it focuses on disallowing any visible or invisible “third party” scripts or images that appear to be tracking you even though you specifically denied consent by sending Do Not Track and Global Privacy Control signals. It just so happens that most (but not all) of these third party trackers are advertisements. When you see an ad, the ad sees you, and can track you. Privacy Badger is here to stop that.

Why doesn't Privacy Badger block all ads?

Because Privacy Badger is primarily a privacy tool, not an ad blocker. Our aim is not to block ads, but to prevent non-consensual invasions of people’s privacy because we believe they are inherently objectionable. We also want to create incentives for advertising companies to do the right thing. Of course, if you really dislike ads, you can also install a traditional ad blocker.

What is Global Privacy Control (GPC)?

Global Privacy Control (GPC) is a new specification that allows users to tell companies they’d like to opt out of having their data shared or sold. By default, Privacy Badger sends the GPC signal to every company you interact with alongside the Do Not Track (DNT) signal.

What’s the difference? Do Not Track is meant to tell companies that you don’t want to be tracked in any way (learn more about what we mean by “tracking” here). Privacy Badger gives third-party companies a chance to comply with DNT by adopting our DNT policy, and blocks those that look like they’re tracking you anyway.

When DNT was developed, many websites simply ignored users’ requests not to be tracked. That’s why Privacy Badger has to act as an enforcer: trackers that don’t want to comply with your wishes get blocked. Today, users in many jurisdictions have the legal right to opt out of some kinds of tracking. That’s where GPC comes in.

GPC is meant to be a legally-binding request to all companies in places with applicable privacy laws. For example, the California Consumer Privacy Act gives California residents the right to opt out of having their data sold. By sending the GPC signal, Privacy Badger is telling companies that you would like to exercise your rights.

The CCPA and other laws are not perfect, which is why Privacy Badger uses both approaches. It asks websites to respect your privacy, and it blocks known trackers from loading at all.

What about tracking by the sites I actively visit, like NYTimes.com or Facebook.com?

At present, Privacy Badger primarily protects you against tracking by third party sites. As far as privacy protections for “first party” sites (sites that you visit directly), Privacy Badger removes outgoing link click tracking on Facebook and Google. We plan on adding more first party privacy protections in the future.

We are doing things in this order because the most scandalous, intrusive and objectionable form of online tracking is that conducted by companies you’ve often never heard of and have no relationship with. First and foremost, Privacy Badger is there to enforce Do Not Track against these domains by providing the technical means to restrict access to their tracking scripts and images. The right policy for whether nytimes.com, facebook.com or google.com can track you when you visit that site – and the technical task of preventing it – is more complicated because often tracking is interwoven with the features the site offers.

Does Privacy Badger contain a list of blocked sites?

Unlike other blocking tools, we have not made decisions about which sites to block, but rather about which behavior is objectionable. Domains will only be blocked if Privacy Badger observes the domain collecting unique identifiers after it was sent Do Not Track and Global Privacy Control signals.

Privacy Badger does contain a “yellowlist” of some sites that are known to provide essential third party resources; those sites show up as yellow and have their cookies blocked rather than being blocked entirely. This is a compromise with practicality, and in the long term we hope to phase out the yellowlist as these third parties begin to explicitly commit to respecting Do Not Track. The criteria for including a domain on the yellowlist can be found here.

How was the cookie blocking yellowlist created?

The initial list of domains that should be cookie blocked rather than blocked entirely was derived from a research project on classifying third party domains as trackers and non-trackers. We will make occasional adjustments to it as necessary. If you find domains that are under- or over-blocked, please file a bug on GitHub.

Does Privacy Badger prevent fingerprinting?

Browser fingerprinting is an extremely subtle and problematic method of tracking, which we documented with the Cover Your Tracks project. Privacy Badger can detect canvas-based fingerprinting, and will block third party domains that use it. Detection of other forms of fingerprinting and protections against first-party fingerprinting are ongoing projects. Of course, once a domain is blocked by Privacy Badger, it will no longer be able to fingerprint you.

Does Privacy Badger consider every cookie to be a tracking cookie?

No. Privacy Badger analyzes the cookies from each site; unique cookies that contain tracking IDs are disallowed, while “low entropy” cookies that perform other functions are allowed. For instance a cookie like LANG=fr that encodes the user’s language preference, or a cookie that preserves a very small amount of information about ads the user has been shown, would be allowed provided that individual or small groups of users’ reading habits could not be collected with them.

Будете ли вы поддерживать какие-либо другие браузеры, помимо Chrome, Firefox, Edge и Opera?

Мы работаем над поддержкой Safari на macOS. Похоже, что в Safari на iOS отсутствуют некоторые способности расширений, необходимые для корректной работы Privacy Badger.

Chrome для Android не поддерживает расширения. Чтобы использовать Privacy Badger на Android, установите Firefox для Android.

Privacy Badger не работает в браузере Microsoft Edge Legacy. Пожалуйста, перейдите на новый браузер Microsoft Edge. Обратите внимание, что Microsoft Edge не поддерживает расширения на мобильных устройствах.

Можно ли скачать Privacy Badger непосредственно с eff.org?

Если вы пользуетесь Google Chrome, Интернет-магазин Chrome обезателен для установление расширений. Чтобы установить Privacy Badger в Chrome, посетите страницу Privacy Badger в Интернет-магазине Chrome и нажмите там кнопку “Установить”.

В противном случае вы можете воспользоваться следующими ссылками, чтобы получить последнюю версию Privacy Badger непосредственно от eff.org:

• Firefox: https://www.eff.org/files/privacy-badger-latest.xpi
• Chromium: https://www.eff.org/files/privacy_badger-chrome.crx

I run a domain that uses cookies or other tracking. How do I stop Privacy Badger from blocking me?

One way is to stop tracking users who have turned on Global Privacy Control or Do Not Track signals (i.e., stop collecting cookies, supercookies or fingerprints from them). Privacy Badger will stop learning to block that domain. The next version of Privacy Badger to ship with an updated pre-trained list will no longer include that domain in the list. Most Privacy Badger users will then update to that list.

You can also unblock yourself by promising to meaningfully respect the Do Not Track signal. To do so, post a verbatim copy of EFF’s Do Not Track policy to the URL https://example.com/.well-known/dnt-policy.txt, where “example.com” is replaced by your domain. Posting EFF’s DNT policy on a domain is a promise of compliance with EFF’s DNT Policy by that domain.

If your domain is compliant with EFF’s DNT policy and declares this compliance, most Privacy Badgers will see this declaration the next time they encounter your domain. Also, the next version of Privacy Badger to ship with an updated pre-trained list will probably include your declaration of compliance in the list.

Note that the domain must support HTTPS, to protect against tampering by network attackers. The path contains “.well-known” per RFC 5785. Also note that you must post a copy of the policy at each compliant subdomain you control. For example, if you wish to declare compliance by both sub1.example.com and sub2.example.com, you must post EFF’s DNT policy on each domain.

Where can I find general information about Privacy Badger that I can use for a piece I'm writing?

Glad you asked! Check out this downloadable press kit that we’ve put together.

As an administrator, how do I configure Privacy Badger on my managed devices?

Please see our enterprise deployment and configuration document.

What is the Privacy Badger license? Where is the Privacy Badger source code?

Privacy Badger’s source code is licensed under GPLv3+. This website’s source code is licensed under AGPLv3+.

How can I support Privacy Badger?

Thanks for asking! Individual donations make up about half of EFF’s support, which gives us the freedom to work on user-focused projects. If you want to support the development of Privacy Badger and other projects like it, you can throw us a few dollars here. Thank you.

If you want to help directly with the project, we appreciate that as well. Please see Privacy Badger’s CONTRIBUTING document for ways to get started.

How does Privacy Badger handle social media widgets?

Social media widgets (such as the Facebook Like button) often track your reading habits. Even if you don’t click them, the social media companies often see exactly which pages you’re seeing the widget on. When blocking social buttons and other potentially useful (video, audio, comments) widgets, Privacy Badger can replace them with click-to-activate placeholders. You will not be tracked by these replacements unless you explicitly choose to click them.

How do I uninstall/remove Privacy Badger?

Firefox: See the Disable or remove Add-ons Mozilla help page.

Chrome: See the Install and manage extensions Chrome Web Store help page.

Edge: See the Add or remove browser add-ons, extensions, and toolbars Microsoft help page.

Is Privacy Badger compatible with other extensions, including adblockers?

Privacy Badger should be compatible with other extensions.

While there is likely to be overlap between the various manually-edited advertising/tracker lists and Privacy Badger, unlike adblockers, Privacy Badger automatically learns to block trackers based on their behavior. This means that Privacy Badger may learn to block trackers your adblocker doesn’t know about.

Is Privacy Badger compatible with Firefox's built-in privacy protections?

It’s fine to use Firefox’s built-in content blocking (Enhanced Tracking Protection or ETP) and Privacy Badger together. While there is overlap between Firefox’s tracker lists and Privacy Badger, Privacy Badger automatically learns to block trackers based on their behavior. This means that Privacy Badger’s automatically-generated and regularly updated blocklist contains trackers not found in Firefox’s human-generated lists. Additionally, Firefox does not fully block “tracking content” in regular (non-“private”) windows by default.

What about Firefox’s Total Cookie Protection (dynamic First Party Isolation or dFPI)? Total Cookie Protection works by keeping third-party cookies isolated to the site they were set on. However, if unblocked, trackers can still use techniques like first-party cookie syncing and browser fingerprinting. They can track your IP address, or they can use some combination of these techniques. Trackers harvest sensitive information, and serve as vectors for malware. Not to mention, unblocked trackers slow down websites and waste your bandwidth.

Keep in mind that Privacy Badger is not just a tracker blocker.

Почему мой браузер подключается к IP-адресам fastly.com при запуске после установки Privacy Badger?

EFF использует Fastly для размещения веб-ресурсов EFF: Fastly — это CDN EFF. Privacy Badger пингует CDN для следующих ресурсов, чтобы убедиться, что информация в них актуальна, даже если в течение некоторого времени не было нового выпуска Privacy Badger:

• https://www.eff.org/files/pbconfig.json

EFF не устанавливает куки-файлы и не сохраняет IP-адреса для этих запросов.

Why does Privacy Badger need access to my data for all websites?

When you install Privacy Badger, your browser warns that Privacy Badger can “access your data for all websites” (in Firefox), or “read and change all your data on the websites you visit” (in Chrome). You are right to be alarmed. You should only install extensions made by organizations you trust.

Privacy Badger requires these permissions to do its job of automatically detecting and blocking trackers on all websites you visit. We are not ironically (or unironically) spying on you. For more information, see our Privacy Badger extension permissions explainer.

Note that the extension permissions warnings only cover what the extension has access to, not what the extension actually does with what it has access to (such as whether the extension secretly uploads your browsing data to its servers). Privacy Badger will never share data about your browsing unless you choose to share it (by filing a broken site report). For more information, see EFF’s Privacy Policy for Software.

Why aren't videos loading on YouTube? Why isn't Privacy Badger blocking ads on YouTube?

Is YouTube not working? Try disabling Privacy Badger on YouTube. If that resolves the issue, see if re-enabling Privacy Badger breaks YouTube again. If YouTube goes back to not working, please tell us so we can look into what’s going on.

Are you surprised that ads aren’t being blocked on YouTube? Privacy Badger is primarily a privacy tool, not an ad blocker. When you visit YouTube directly, Privacy Badger does not block ads on YouTube because YouTube does not use “third party” trackers. If you really dislike ads, you can also install a traditional ad blocker.

Мне нужна помощь! Нашел ошибку! Что мне теперь делать?

Если сайт не работает должным образом, вы можете выключить Privacy Badger только для этого сайта, оставив Privacy Badger включенным и защищающим вас на всех других сайтах. Для этого перейдите на сайт с проблемой, нажмите на значок Privacy Badger на панели инструментов браузера и нажмите кнопку «Отключить на этом сайте» во всплывающем окне Privacy Badger. Вы также можете сообщить нам о неработающих сайтах, нажав на кнопку «Сообщить о неполадках на сайте».

Чтобы получить помощь или сообщить об ошибках, пишите на extension-devs@eff.org. Если у вас есть аккаунт на GitHub, вы можете использовать нашу систему отслеживания проблем на GitHub.

Вы также можете найти нас на Mastodon и на Bluesky.