master 01829834395e cached
85 files
527.9 KB
125.6k tokens
1 requests
Download .txt
Showing preview only (555K chars total). Download the full file or copy to clipboard to get everything.
Repository: YalePrivacyLab/tracker-profiles
Branch: master
Commit: 01829834395e
Files: 85
Total size: 527.9 KB

Directory structure:
gitextract_wzt87a0e/

├── LICENSE
├── README.md
├── guides/
│   ├── Acronyms.md
│   ├── BasicTrackerTemplate.md
│   ├── Glossary.md
│   ├── Permissions.md
│   └── mozilla_presentation.md
└── trackers/
    ├── AccountKit.md
    ├── Actv8.md
    ├── Ad4Screen.md
    ├── Amplitude.md
    ├── AppNexus.md
    ├── Appodeal.md
    ├── AppsFlyer.md
    ├── Auditude.md
    ├── Axwave.md
    ├── BeatgridMedia.md
    ├── BlueConic.md
    ├── Braze (Appboy).md
    ├── Brightcove.md
    ├── Cifrasoft.md
    ├── CopSonic.md
    ├── Crashlytics (Google).md
    ├── Cuebiq.md
    ├── Demdex (Adobe).md
    ├── Disney.md
    ├── DoubleClick (Google).md
    ├── Dov-e.md
    ├── Embee.md
    ├── Estimote.md
    ├── Eulerian.md
    ├── Fabric.md
    ├── Facebook.md
    ├── Fidzup.md
    ├── Flurry (Yahoo).md
    ├── Gimbal.md
    ├── HockeyApp (Microsoft).md
    ├── Houndify.md
    ├── InMobi.md
    ├── IndoorAtlas.md
    ├── Inmarket.md
    ├── Instreamatic.md
    ├── Intrasonics.md
    ├── Kochava.md
    ├── Krux (SalesForce DMP).mkd
    ├── Leanplum.md
    ├── Lenddo.md
    ├── Localytics.md
    ├── Millenial Media.md
    ├── MixPanel.md
    ├── MoPub.md
    ├── Moca.md
    ├── Moodmedia.md
    ├── Mufin.md
    ├── Nexage (AOL).md
    ├── Omniture.md
    ├── Ooyala.md
    ├── OpenX.md
    ├── Opentracker.md
    ├── OtherLevels.md
    ├── Pilgrim.md
    ├── Pointinside.md
    ├── Proximi.md
    ├── Pushwoosh.md
    ├── SafeGraph.md
    ├── ScorecardResearch.md
    ├── Sift.md
    ├── Smart.md
    ├── TUNE.md
    ├── TVSquared.md
    ├── Taplytics.md
    ├── Tealium.md
    ├── Teemo.md
    ├── Tinder.md
    ├── Trillbit.md
    ├── Umeng Analytics.md
    ├── Umeng Feedback.md
    ├── Weborama.md
    ├── Xfinity.md
    ├── Xiti.md
    ├── YandexAd.md
    ├── YinzcamSobek.md
    ├── Zapr.md
    ├── ironSource.md
    └── mParticle.md

================================================
FILE CONTENTS
================================================

================================================
FILE: LICENSE
================================================
                    GNU AFFERO GENERAL PUBLIC LICENSE
                       Version 3, 19 November 2007

 Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
 Everyone is permitted to copy and distribute verbatim copies
 of this license document, but changing it is not allowed.

                            Preamble

  The GNU Affero General Public License is a free, copyleft license for
software and other kinds of works, specifically designed to ensure
cooperation with the community in the case of network server software.

  The licenses for most software and other practical works are designed
to take away your freedom to share and change the works.  By contrast,
our General Public Licenses are intended to guarantee your freedom to
share and change all versions of a program--to make sure it remains free
software for all its users.

  When we speak of free software, we are referring to freedom, not
price.  Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
them if you wish), that you receive source code or can get it if you
want it, that you can change the software or use pieces of it in new
free programs, and that you know you can do these things.

  Developers that use our General Public Licenses protect your rights
with two steps: (1) assert copyright on the software, and (2) offer
you this License which gives you legal permission to copy, distribute
and/or modify the software.

  A secondary benefit of defending all users' freedom is that
improvements made in alternate versions of the program, if they
receive widespread use, become available for other developers to
incorporate.  Many developers of free software are heartened and
encouraged by the resulting cooperation.  However, in the case of
software used on network servers, this result may fail to come about.
The GNU General Public License permits making a modified version and
letting the public access it on a server without ever releasing its
source code to the public.

  The GNU Affero General Public License is designed specifically to
ensure that, in such cases, the modified source code becomes available
to the community.  It requires the operator of a network server to
provide the source code of the modified version running there to the
users of that server.  Therefore, public use of a modified version, on
a publicly accessible server, gives the public access to the source
code of the modified version.

  An older license, called the Affero General Public License and
published by Affero, was designed to accomplish similar goals.  This is
a different license, not a version of the Affero GPL, but Affero has
released a new version of the Affero GPL which permits relicensing under
this license.

  The precise terms and conditions for copying, distribution and
modification follow.

                       TERMS AND CONDITIONS

  0. Definitions.

  "This License" refers to version 3 of the GNU Affero General Public License.

  "Copyright" also means copyright-like laws that apply to other kinds of
works, such as semiconductor masks.

  "The Program" refers to any copyrightable work licensed under this
License.  Each licensee is addressed as "you".  "Licensees" and
"recipients" may be individuals or organizations.

  To "modify" a work means to copy from or adapt all or part of the work
in a fashion requiring copyright permission, other than the making of an
exact copy.  The resulting work is called a "modified version" of the
earlier work or a work "based on" the earlier work.

  A "covered work" means either the unmodified Program or a work based
on the Program.

  To "propagate" a work means to do anything with it that, without
permission, would make you directly or secondarily liable for
infringement under applicable copyright law, except executing it on a
computer or modifying a private copy.  Propagation includes copying,
distribution (with or without modification), making available to the
public, and in some countries other activities as well.

  To "convey" a work means any kind of propagation that enables other
parties to make or receive copies.  Mere interaction with a user through
a computer network, with no transfer of a copy, is not conveying.

  An interactive user interface displays "Appropriate Legal Notices"
to the extent that it includes a convenient and prominently visible
feature that (1) displays an appropriate copyright notice, and (2)
tells the user that there is no warranty for the work (except to the
extent that warranties are provided), that licensees may convey the
work under this License, and how to view a copy of this License.  If
the interface presents a list of user commands or options, such as a
menu, a prominent item in the list meets this criterion.

  1. Source Code.

  The "source code" for a work means the preferred form of the work
for making modifications to it.  "Object code" means any non-source
form of a work.

  A "Standard Interface" means an interface that either is an official
standard defined by a recognized standards body, or, in the case of
interfaces specified for a particular programming language, one that
is widely used among developers working in that language.

  The "System Libraries" of an executable work include anything, other
than the work as a whole, that (a) is included in the normal form of
packaging a Major Component, but which is not part of that Major
Component, and (b) serves only to enable use of the work with that
Major Component, or to implement a Standard Interface for which an
implementation is available to the public in source code form.  A
"Major Component", in this context, means a major essential component
(kernel, window system, and so on) of the specific operating system
(if any) on which the executable work runs, or a compiler used to
produce the work, or an object code interpreter used to run it.

  The "Corresponding Source" for a work in object code form means all
the source code needed to generate, install, and (for an executable
work) run the object code and to modify the work, including scripts to
control those activities.  However, it does not include the work's
System Libraries, or general-purpose tools or generally available free
programs which are used unmodified in performing those activities but
which are not part of the work.  For example, Corresponding Source
includes interface definition files associated with source files for
the work, and the source code for shared libraries and dynamically
linked subprograms that the work is specifically designed to require,
such as by intimate data communication or control flow between those
subprograms and other parts of the work.

  The Corresponding Source need not include anything that users
can regenerate automatically from other parts of the Corresponding
Source.

  The Corresponding Source for a work in source code form is that
same work.

  2. Basic Permissions.

  All rights granted under this License are granted for the term of
copyright on the Program, and are irrevocable provided the stated
conditions are met.  This License explicitly affirms your unlimited
permission to run the unmodified Program.  The output from running a
covered work is covered by this License only if the output, given its
content, constitutes a covered work.  This License acknowledges your
rights of fair use or other equivalent, as provided by copyright law.

  You may make, run and propagate covered works that you do not
convey, without conditions so long as your license otherwise remains
in force.  You may convey covered works to others for the sole purpose
of having them make modifications exclusively for you, or provide you
with facilities for running those works, provided that you comply with
the terms of this License in conveying all material for which you do
not control copyright.  Those thus making or running the covered works
for you must do so exclusively on your behalf, under your direction
and control, on terms that prohibit them from making any copies of
your copyrighted material outside their relationship with you.

  Conveying under any other circumstances is permitted solely under
the conditions stated below.  Sublicensing is not allowed; section 10
makes it unnecessary.

  3. Protecting Users' Legal Rights From Anti-Circumvention Law.

  No covered work shall be deemed part of an effective technological
measure under any applicable law fulfilling obligations under article
11 of the WIPO copyright treaty adopted on 20 December 1996, or
similar laws prohibiting or restricting circumvention of such
measures.

  When you convey a covered work, you waive any legal power to forbid
circumvention of technological measures to the extent such circumvention
is effected by exercising rights under this License with respect to
the covered work, and you disclaim any intention to limit operation or
modification of the work as a means of enforcing, against the work's
users, your or third parties' legal rights to forbid circumvention of
technological measures.

  4. Conveying Verbatim Copies.

  You may convey verbatim copies of the Program's source code as you
receive it, in any medium, provided that you conspicuously and
appropriately publish on each copy an appropriate copyright notice;
keep intact all notices stating that this License and any
non-permissive terms added in accord with section 7 apply to the code;
keep intact all notices of the absence of any warranty; and give all
recipients a copy of this License along with the Program.

  You may charge any price or no price for each copy that you convey,
and you may offer support or warranty protection for a fee.

  5. Conveying Modified Source Versions.

  You may convey a work based on the Program, or the modifications to
produce it from the Program, in the form of source code under the
terms of section 4, provided that you also meet all of these conditions:

    a) The work must carry prominent notices stating that you modified
    it, and giving a relevant date.

    b) The work must carry prominent notices stating that it is
    released under this License and any conditions added under section
    7.  This requirement modifies the requirement in section 4 to
    "keep intact all notices".

    c) You must license the entire work, as a whole, under this
    License to anyone who comes into possession of a copy.  This
    License will therefore apply, along with any applicable section 7
    additional terms, to the whole of the work, and all its parts,
    regardless of how they are packaged.  This License gives no
    permission to license the work in any other way, but it does not
    invalidate such permission if you have separately received it.

    d) If the work has interactive user interfaces, each must display
    Appropriate Legal Notices; however, if the Program has interactive
    interfaces that do not display Appropriate Legal Notices, your
    work need not make them do so.

  A compilation of a covered work with other separate and independent
works, which are not by their nature extensions of the covered work,
and which are not combined with it such as to form a larger program,
in or on a volume of a storage or distribution medium, is called an
"aggregate" if the compilation and its resulting copyright are not
used to limit the access or legal rights of the compilation's users
beyond what the individual works permit.  Inclusion of a covered work
in an aggregate does not cause this License to apply to the other
parts of the aggregate.

  6. Conveying Non-Source Forms.

  You may convey a covered work in object code form under the terms
of sections 4 and 5, provided that you also convey the
machine-readable Corresponding Source under the terms of this License,
in one of these ways:

    a) Convey the object code in, or embodied in, a physical product
    (including a physical distribution medium), accompanied by the
    Corresponding Source fixed on a durable physical medium
    customarily used for software interchange.

    b) Convey the object code in, or embodied in, a physical product
    (including a physical distribution medium), accompanied by a
    written offer, valid for at least three years and valid for as
    long as you offer spare parts or customer support for that product
    model, to give anyone who possesses the object code either (1) a
    copy of the Corresponding Source for all the software in the
    product that is covered by this License, on a durable physical
    medium customarily used for software interchange, for a price no
    more than your reasonable cost of physically performing this
    conveying of source, or (2) access to copy the
    Corresponding Source from a network server at no charge.

    c) Convey individual copies of the object code with a copy of the
    written offer to provide the Corresponding Source.  This
    alternative is allowed only occasionally and noncommercially, and
    only if you received the object code with such an offer, in accord
    with subsection 6b.

    d) Convey the object code by offering access from a designated
    place (gratis or for a charge), and offer equivalent access to the
    Corresponding Source in the same way through the same place at no
    further charge.  You need not require recipients to copy the
    Corresponding Source along with the object code.  If the place to
    copy the object code is a network server, the Corresponding Source
    may be on a different server (operated by you or a third party)
    that supports equivalent copying facilities, provided you maintain
    clear directions next to the object code saying where to find the
    Corresponding Source.  Regardless of what server hosts the
    Corresponding Source, you remain obligated to ensure that it is
    available for as long as needed to satisfy these requirements.

    e) Convey the object code using peer-to-peer transmission, provided
    you inform other peers where the object code and Corresponding
    Source of the work are being offered to the general public at no
    charge under subsection 6d.

  A separable portion of the object code, whose source code is excluded
from the Corresponding Source as a System Library, need not be
included in conveying the object code work.

  A "User Product" is either (1) a "consumer product", which means any
tangible personal property which is normally used for personal, family,
or household purposes, or (2) anything designed or sold for incorporation
into a dwelling.  In determining whether a product is a consumer product,
doubtful cases shall be resolved in favor of coverage.  For a particular
product received by a particular user, "normally used" refers to a
typical or common use of that class of product, regardless of the status
of the particular user or of the way in which the particular user
actually uses, or expects or is expected to use, the product.  A product
is a consumer product regardless of whether the product has substantial
commercial, industrial or non-consumer uses, unless such uses represent
the only significant mode of use of the product.

  "Installation Information" for a User Product means any methods,
procedures, authorization keys, or other information required to install
and execute modified versions of a covered work in that User Product from
a modified version of its Corresponding Source.  The information must
suffice to ensure that the continued functioning of the modified object
code is in no case prevented or interfered with solely because
modification has been made.

  If you convey an object code work under this section in, or with, or
specifically for use in, a User Product, and the conveying occurs as
part of a transaction in which the right of possession and use of the
User Product is transferred to the recipient in perpetuity or for a
fixed term (regardless of how the transaction is characterized), the
Corresponding Source conveyed under this section must be accompanied
by the Installation Information.  But this requirement does not apply
if neither you nor any third party retains the ability to install
modified object code on the User Product (for example, the work has
been installed in ROM).

  The requirement to provide Installation Information does not include a
requirement to continue to provide support service, warranty, or updates
for a work that has been modified or installed by the recipient, or for
the User Product in which it has been modified or installed.  Access to a
network may be denied when the modification itself materially and
adversely affects the operation of the network or violates the rules and
protocols for communication across the network.

  Corresponding Source conveyed, and Installation Information provided,
in accord with this section must be in a format that is publicly
documented (and with an implementation available to the public in
source code form), and must require no special password or key for
unpacking, reading or copying.

  7. Additional Terms.

  "Additional permissions" are terms that supplement the terms of this
License by making exceptions from one or more of its conditions.
Additional permissions that are applicable to the entire Program shall
be treated as though they were included in this License, to the extent
that they are valid under applicable law.  If additional permissions
apply only to part of the Program, that part may be used separately
under those permissions, but the entire Program remains governed by
this License without regard to the additional permissions.

  When you convey a copy of a covered work, you may at your option
remove any additional permissions from that copy, or from any part of
it.  (Additional permissions may be written to require their own
removal in certain cases when you modify the work.)  You may place
additional permissions on material, added by you to a covered work,
for which you have or can give appropriate copyright permission.

  Notwithstanding any other provision of this License, for material you
add to a covered work, you may (if authorized by the copyright holders of
that material) supplement the terms of this License with terms:

    a) Disclaiming warranty or limiting liability differently from the
    terms of sections 15 and 16 of this License; or

    b) Requiring preservation of specified reasonable legal notices or
    author attributions in that material or in the Appropriate Legal
    Notices displayed by works containing it; or

    c) Prohibiting misrepresentation of the origin of that material, or
    requiring that modified versions of such material be marked in
    reasonable ways as different from the original version; or

    d) Limiting the use for publicity purposes of names of licensors or
    authors of the material; or

    e) Declining to grant rights under trademark law for use of some
    trade names, trademarks, or service marks; or

    f) Requiring indemnification of licensors and authors of that
    material by anyone who conveys the material (or modified versions of
    it) with contractual assumptions of liability to the recipient, for
    any liability that these contractual assumptions directly impose on
    those licensors and authors.

  All other non-permissive additional terms are considered "further
restrictions" within the meaning of section 10.  If the Program as you
received it, or any part of it, contains a notice stating that it is
governed by this License along with a term that is a further
restriction, you may remove that term.  If a license document contains
a further restriction but permits relicensing or conveying under this
License, you may add to a covered work material governed by the terms
of that license document, provided that the further restriction does
not survive such relicensing or conveying.

  If you add terms to a covered work in accord with this section, you
must place, in the relevant source files, a statement of the
additional terms that apply to those files, or a notice indicating
where to find the applicable terms.

  Additional terms, permissive or non-permissive, may be stated in the
form of a separately written license, or stated as exceptions;
the above requirements apply either way.

  8. Termination.

  You may not propagate or modify a covered work except as expressly
provided under this License.  Any attempt otherwise to propagate or
modify it is void, and will automatically terminate your rights under
this License (including any patent licenses granted under the third
paragraph of section 11).

  However, if you cease all violation of this License, then your
license from a particular copyright holder is reinstated (a)
provisionally, unless and until the copyright holder explicitly and
finally terminates your license, and (b) permanently, if the copyright
holder fails to notify you of the violation by some reasonable means
prior to 60 days after the cessation.

  Moreover, your license from a particular copyright holder is
reinstated permanently if the copyright holder notifies you of the
violation by some reasonable means, this is the first time you have
received notice of violation of this License (for any work) from that
copyright holder, and you cure the violation prior to 30 days after
your receipt of the notice.

  Termination of your rights under this section does not terminate the
licenses of parties who have received copies or rights from you under
this License.  If your rights have been terminated and not permanently
reinstated, you do not qualify to receive new licenses for the same
material under section 10.

  9. Acceptance Not Required for Having Copies.

  You are not required to accept this License in order to receive or
run a copy of the Program.  Ancillary propagation of a covered work
occurring solely as a consequence of using peer-to-peer transmission
to receive a copy likewise does not require acceptance.  However,
nothing other than this License grants you permission to propagate or
modify any covered work.  These actions infringe copyright if you do
not accept this License.  Therefore, by modifying or propagating a
covered work, you indicate your acceptance of this License to do so.

  10. Automatic Licensing of Downstream Recipients.

  Each time you convey a covered work, the recipient automatically
receives a license from the original licensors, to run, modify and
propagate that work, subject to this License.  You are not responsible
for enforcing compliance by third parties with this License.

  An "entity transaction" is a transaction transferring control of an
organization, or substantially all assets of one, or subdividing an
organization, or merging organizations.  If propagation of a covered
work results from an entity transaction, each party to that
transaction who receives a copy of the work also receives whatever
licenses to the work the party's predecessor in interest had or could
give under the previous paragraph, plus a right to possession of the
Corresponding Source of the work from the predecessor in interest, if
the predecessor has it or can get it with reasonable efforts.

  You may not impose any further restrictions on the exercise of the
rights granted or affirmed under this License.  For example, you may
not impose a license fee, royalty, or other charge for exercise of
rights granted under this License, and you may not initiate litigation
(including a cross-claim or counterclaim in a lawsuit) alleging that
any patent claim is infringed by making, using, selling, offering for
sale, or importing the Program or any portion of it.

  11. Patents.

  A "contributor" is a copyright holder who authorizes use under this
License of the Program or a work on which the Program is based.  The
work thus licensed is called the contributor's "contributor version".

  A contributor's "essential patent claims" are all patent claims
owned or controlled by the contributor, whether already acquired or
hereafter acquired, that would be infringed by some manner, permitted
by this License, of making, using, or selling its contributor version,
but do not include claims that would be infringed only as a
consequence of further modification of the contributor version.  For
purposes of this definition, "control" includes the right to grant
patent sublicenses in a manner consistent with the requirements of
this License.

  Each contributor grants you a non-exclusive, worldwide, royalty-free
patent license under the contributor's essential patent claims, to
make, use, sell, offer for sale, import and otherwise run, modify and
propagate the contents of its contributor version.

  In the following three paragraphs, a "patent license" is any express
agreement or commitment, however denominated, not to enforce a patent
(such as an express permission to practice a patent or covenant not to
sue for patent infringement).  To "grant" such a patent license to a
party means to make such an agreement or commitment not to enforce a
patent against the party.

  If you convey a covered work, knowingly relying on a patent license,
and the Corresponding Source of the work is not available for anyone
to copy, free of charge and under the terms of this License, through a
publicly available network server or other readily accessible means,
then you must either (1) cause the Corresponding Source to be so
available, or (2) arrange to deprive yourself of the benefit of the
patent license for this particular work, or (3) arrange, in a manner
consistent with the requirements of this License, to extend the patent
license to downstream recipients.  "Knowingly relying" means you have
actual knowledge that, but for the patent license, your conveying the
covered work in a country, or your recipient's use of the covered work
in a country, would infringe one or more identifiable patents in that
country that you have reason to believe are valid.

  If, pursuant to or in connection with a single transaction or
arrangement, you convey, or propagate by procuring conveyance of, a
covered work, and grant a patent license to some of the parties
receiving the covered work authorizing them to use, propagate, modify
or convey a specific copy of the covered work, then the patent license
you grant is automatically extended to all recipients of the covered
work and works based on it.

  A patent license is "discriminatory" if it does not include within
the scope of its coverage, prohibits the exercise of, or is
conditioned on the non-exercise of one or more of the rights that are
specifically granted under this License.  You may not convey a covered
work if you are a party to an arrangement with a third party that is
in the business of distributing software, under which you make payment
to the third party based on the extent of your activity of conveying
the work, and under which the third party grants, to any of the
parties who would receive the covered work from you, a discriminatory
patent license (a) in connection with copies of the covered work
conveyed by you (or copies made from those copies), or (b) primarily
for and in connection with specific products or compilations that
contain the covered work, unless you entered into that arrangement,
or that patent license was granted, prior to 28 March 2007.

  Nothing in this License shall be construed as excluding or limiting
any implied license or other defenses to infringement that may
otherwise be available to you under applicable patent law.

  12. No Surrender of Others' Freedom.

  If conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License.  If you cannot convey a
covered work so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you may
not convey it at all.  For example, if you agree to terms that obligate you
to collect a royalty for further conveying from those to whom you convey
the Program, the only way you could satisfy both those terms and this
License would be to refrain entirely from conveying the Program.

  13. Remote Network Interaction; Use with the GNU General Public License.

  Notwithstanding any other provision of this License, if you modify the
Program, your modified version must prominently offer all users
interacting with it remotely through a computer network (if your version
supports such interaction) an opportunity to receive the Corresponding
Source of your version by providing access to the Corresponding Source
from a network server at no charge, through some standard or customary
means of facilitating copying of software.  This Corresponding Source
shall include the Corresponding Source for any work covered by version 3
of the GNU General Public License that is incorporated pursuant to the
following paragraph.

  Notwithstanding any other provision of this License, you have
permission to link or combine any covered work with a work licensed
under version 3 of the GNU General Public License into a single
combined work, and to convey the resulting work.  The terms of this
License will continue to apply to the part which is the covered work,
but the work with which it is combined will remain governed by version
3 of the GNU General Public License.

  14. Revised Versions of this License.

  The Free Software Foundation may publish revised and/or new versions of
the GNU Affero General Public License from time to time.  Such new versions
will be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.

  Each version is given a distinguishing version number.  If the
Program specifies that a certain numbered version of the GNU Affero General
Public License "or any later version" applies to it, you have the
option of following the terms and conditions either of that numbered
version or of any later version published by the Free Software
Foundation.  If the Program does not specify a version number of the
GNU Affero General Public License, you may choose any version ever published
by the Free Software Foundation.

  If the Program specifies that a proxy can decide which future
versions of the GNU Affero General Public License can be used, that proxy's
public statement of acceptance of a version permanently authorizes you
to choose that version for the Program.

  Later license versions may give you additional or different
permissions.  However, no additional obligations are imposed on any
author or copyright holder as a result of your choosing to follow a
later version.

  15. Disclaimer of Warranty.

  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

  16. Limitation of Liability.

  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.

  17. Interpretation of Sections 15 and 16.

  If the disclaimer of warranty and limitation of liability provided
above cannot be given local legal effect according to their terms,
reviewing courts shall apply local law that most closely approximates
an absolute waiver of all civil liability in connection with the
Program, unless a warranty or assumption of liability accompanies a
copy of the Program in return for a fee.

                     END OF TERMS AND CONDITIONS

            How to Apply These Terms to Your New Programs

  If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
free software which everyone can redistribute and change under these terms.

  To do so, attach the following notices to the program.  It is safest
to attach them to the start of each source file to most effectively
state the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.

    <one line to give the program's name and a brief idea of what it does.>
    Copyright (C) <year>  <name of author>

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published
    by the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU Affero General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.

Also add information on how to contact you by electronic and paper mail.

  If your software can interact with users remotely through a computer
network, you should also make sure that it provides a way for users to
get its source.  For example, if your program is a web application, its
interface could display a "Source" link that leads users to an archive
of the code.  There are many ways you could offer source, and different
solutions will be better for different programs; see section 13 for the
specific requirements.

  You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU AGPL, see
<http://www.gnu.org/licenses/>.


================================================
FILE: README.md
================================================
# Yale Privacy Lab - Tracker Profiles

This repository contains research profiles on Android app trackers hidden in popular Google Play apps.  It also contains guides to help readers understand the advertising tracker business, including a list of acroynyms, a glossary of terms, and a list of Android app permissions.  Our release coincides with the excellent work of [Exodus Privacy](https://exodus-privacy.eu.org) on their Exodus privacy auditing platform.  Exodus is the first attempt at systematically auditing Google Play apps for the presence of tracker code, and the detailed descriptions here can now be integrated with the Exodus privacy auditing software.

* The tracker profiles generated here move upstream to Exodus, then on to F-Droid for scanning of its own requests for packaging (i.e. apps that have been submitted to the F-Droid maintainers).

* Tracker profiles submitted to Exodus will also be used in the Yalp Store and by plugins like Exodify to make sure that users are aware of the trackers in apps they may (or may not) choose to install from Google Play.

* In these ways, the work done here has a tangible impact on the privacy and surveillance awareness of Android users.

Our documents will continue to be improved, and this is just the beginning of in-depth research into the wide world of tracker software inside mobile markets like Google Play and the Apple iOS app store.

## Who We Are

[Yale Privacy Lab](https://privacylab.yale.edu) explores the connection between privacy, security, and anonymity through hands-on software and hardware implementation. Yale Privacy Lab is an initiative of the [Information Society Project](https://www.law.yale.edu/isp) at Yale Law School.

The [Tracking Mobile Trackers](https://github.com/MozillaFestival/open-leaders-6/issues/50) effort is being led by Sean O'Brien, Laurin Weissinger, and Jonathan Oronzo.  See https://privacylab.yale.edu/people

## License
The documents here are dual-licensed under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/) and the [GNU Affero General Public License version 3 or later](https://www.gnu.org/licenses/agpl-3.0.en.html).


================================================
FILE: guides/Acronyms.md
================================================
## Acronyms

**AdX:** Double-Click Ad Exchange

**AMP:** Accelerated Mobile Pages (Google project)

**API:** Application Programming Interface  

**BLE:** Bluetooth Low-Energy

**CDIM** Cross Device Identity Management ("Cross Device Identity Management (CDIM) combines deterministic matching with probabilistic matching to link users across multiple cookies and devices. CDIM bridges a user's disparate ID’s into a single universal ID, which represents the user regardless of the device they are on.") [SF, 28](https://konsole.zendesk.com/hc/en-us/articles/226951307-How-to-Build-Segments-with-CDIM)

**CPC** Cost Per Click

**CPD** Cost Per Day

**CPD (alternative)** Cost Per Download 

**CPG:** Consumer Packaged Goods

**CPL**  Cost Per Lead (the advertiser pays for an explicit sign-up from a consumer interested in the advertiser's offer. It is also commonly called 'online lead generation'; see Wikipedia)

**CPL (alternative use)** Completed forms

**CPCV:** Cost per Complete View

**CPM** Cost Per Mille (cost to advertisers per thousand impressions) [Smart AdServer](http://smartadserver.com/glossary)

**CPV** Cost Per View (ad model)

**CPV (alternative use)** Effective Visit Cost [Ad4S, 03](http://www.ad4screen.com/publicite-mobile)

**CRM:** Customer Relationship Management

**CTR:** Click Through Rate

**DAAST:** Digital Audio Ad Serving Template

**DBM:** DoubleClick Bid Manager

**DCM:** DoubleClick Campaign Manager  

**DCO:** Dynamic Creative Optimization

**DFA:** DoubleClick for Advertisers

**DFP:** DoubleClick for Publishers

**DMP:** Data Management Platform

**DSP::** Demand-side Platform ("a system that allows buyers of digital advertising inventory to manage multiple ad exchange and data exchange accounts through one interface") [Wikipedia](https://en.wikipedia.org/wiki/Demand-side_platform)

**eCPM:** Effective Cost per Mille

**GDN:** Google Display Network

**GDRP:** General Data Protection Regulation (EU, in effect May 25,2018)

**HB:** Header Bidding

**HYM:** Holistic Yield Management

**IAB:** Internet Advertising Bureau

**KfUID** User KUID on Safari

**KUID:** Krux User ID

**KXFP** Corresponding hashed ID that comes from the user data service 

**MAID:** Mobile Advertising ID

**MRAID:** Mobile Rich Media Ad Interface (a standard for rich-media ads that run in mobile apps; [see Digiday](https://moat.com/analytics?utm_campaign=Moat+Analytics))

**OTT:** Over the Top

**PMP:** Private Marketplace

**PPC:** Pay per click

**PPID:** Publisher Provided Identifier

**PRM:** Partner relationship management

**PRM (alternative use):** Positive Results Marketing

**RFP:** Request for Proposal ("asking for facts, figures, management bios, client list, recent wins and losses, capabilities, strategic approach, case histories and examples of work" [Forbes](https://www.forbes.com/sites/avidan/2014/02/19/why-the-rfp-is-a-waste-of-time)]

**RTB:** Real-time bidding ("advertising inventory is bought and sold on a per-impression basis, via programmatic instantaneous auction, similar to financial markets") [Wikipedia](https://en.wikipedia.org/wiki/Real-time_bidding)  ("a real-time auction for the buying and selling of digital ad inventory. Publishers sell available space on their websites and advertisers buy this space to display their ads in front of the target audience." [Quora](https://www.quora.com/What-is-the-Difference-between-an-Ad-Exchange-and-RTB)

**SDK:** Software Development Kit

**SEM:** Search engine marketing

**SEO:** Search engine optimisation

**SERP:** Search engine results page

**SSP:** Supply-side Platform

**UTM:** Urchin Tracking Module

**VAST:** Video Ad Serving Template ("a script that gives video players information about which ad to play, how the ad should show up, how long it should last, and whether users are able to skip it."  This creates a standardized format which allows video ads to scale and prevents forcing a publisher to change its video stack just to use different ad servers) [Digiday](https://digiday.com/media/what-is-vast)

**VMAP:** Digital Video Multiple Ad Playlist 

**VPAID:** Video Player-Ad Interface Definition [see Digiday](https://moat.com/analytics?utm_campaign=Moat+Analytics)



================================================
FILE: guides/BasicTrackerTemplate.md
================================================
# Tracker Name
xxx

# In εxodus?
Yes|No

# Website
xxx

# Short Description
xxx

# [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `xxx.com`
*   Code signature: `com.xxx`

# Category
xxx

# About
xxx

## Capabilities
xxx

## Advertising
xxx

## Analytics
xxx

## Network
xxx

# Notes
xxx

## Technical
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xxx`
*   Gradle: `xxx`
xxx

# Citations
xxx

# Additional Links
xxx


================================================
FILE: guides/Glossary.md
================================================
# Glossary of Terms

## Identifiers

**AAID (Google Advertising ID for Android Devices)** AAID is "A user-specific, unique, resettable ID for advertising, provided by Google Play services. It gives users better controls and provides developers with a simple, standard system to continue to monetize your apps. It is an anonymous identifier for advertising purposes and enables users to reset their identifier or opt out of interest-based ads within Google Play apps." [Google, 1](https://help.tune.com/marketing-console/googles-advertising-identifier)

It "provides the same type of device-specific, unique, resettable ID for advertising as the IDFA. The ID for tablet devices with multiple users may also be unique per user. All of the features, encryption and technical details for IDFA also apply to the advertising ID." [Google,2](https://support.google.com/adxbuyer/answer/3221407)

**IDFA (Identifier for Advertising):** "a random device identifier assigned by Apple to a user’s device" for personalized ads, "used for tracking and identifying a user, which then allows advertisers to access aggregated data which can be used to discover information – such as which in-app events they trigger."  Moreover, "It may be used by advertisers to run remarketing campaigns and record purchasing or downloading conversions."

The IDFA can also identify users when they interact with a mobile advertising campaign, provided the channel offers IDFA tracking and that the advertiser tracks users who interact with adverts successfully. If this occurs the IDFA can pickup whether specific users click an advert for payment and attribution purposes." Users can opt out through "limit ad tracking (LAD)" and 205 of iOS users use LAD.  Companies like Adjust can analyze iOS users to identify how many users opt-out through LAD.

IDFA "can be reset by the user at any time" and "users can opt out using LAD" [Adjust,3](https://www.adjust.com/glossary/idfa]; [Google,2](https://support.google.com/adxbuyer/answer/3221407)


## Trackers

**DoubleClick Ad Exchange:** "Ad Exchange passes the identifier values in the mobile.encrypted_advertising_id field in the bid request. This field will contain either an IDFA or AAID value.  The value of AAID is always clear (unhashed), but IDFA can either be clear or hashed. If the bid request has a clear value, you can use the platform field to determine if it’s iOS or Android. Hashed IDFA values use the mobile.encrypted_hashed_idfa field, instead." [Google, 2](https://support.google.com/adxbuyer/answer/3221407)

**Fidzup:** 

**Salesforce DMP (formerly Krux):** Huge SanFran-based cloud-computing company for Customer Relationship Management (CRM).  Salesforce (the overarching company) is one of the largest software companies in the world, and the world's #1 CRM company [SF, 8](http://investor.salesforce.com/about-us/investor/overview/default.aspx)

**Teemo (formerly Databerries):** 


## Networks

**Google Search Network:** "featuring the standard Google Search, Google Shopping, Maps and its various search partners" [Econsultancy, 2013](https://econsultancy.com/blog/63783-what-is-paid-search-ppc-and-why-do-you-need-it)    

**Google Display Network:** "any website that partners with Google, and other Google sites such as Gmail, YouTube and Blogger" [Econsultancy, 2013](https://econsultancy.com/blog/63783-what-is-paid-search-ppc-and-why-do-you-need-it)    

**Yahoo Bing Network:** "claims to be a ‘combined advertising marketplace’ made up of Yahoo, Bing and many syndicated partners such as Facebook, Amazon and Monster" [Econsultancy, 2013](https://econsultancy.com/blog/63783-what-is-paid-search-ppc-and-why-do-you-need-it) 


## Terms

**Ad Exchange:** "An ad exchange is a digital marketplace that enables advertisers and publishers to buy and sell advertising space, often through real-time auctions. They’re most often used to sell display, video and mobile ad inventory...Virtually anyone can buy from an ad exchange provided the ad exchange allows it. Advertisers and agencies typically use demand-side platforms or their own bidding technologies to do so, but ad networks and other entities also buy ads from exchanges. Basically, an ad exchange is just a big pool of ad impressions. Publishers tip their ad impressions into the pool hoping someone will buy them. Buyers then pick which impressions they wish to purchase using technologies like demand-side platforms. Those decisions are often made in real time based on information such as the previous behavior of the user an ad is being served to, time of day, device type, ad position and more." [Digiday](https://digiday.com/media/what-is-an-ad-exchange)

"A marketplace that auctions ad impressions in real-time, among multiple bidding advertisers and/or networks and sells the impression to the highest bidder. You can think of them as digital stock exchanges where impressions are shares. The auction takes place and the winning ad is served within the milliseconds it takes for your browser to load and serve you an ad impression...they offer considerable increase in transparency, control, and targeting capabilities. They allow advertisers to serve ads to the right viewer, (based on behavioral targeting), at the right time of day, on the right publisher. Budgets can be kept in check and tracking where your ads are served is simplified. They allow advertisers to know which ad space is best to repurchase on and how best to optimize" [WhatRunsWhere](http://blog.whatrunswhere.com/media-buying-101-ad-networks-ad-exchanges)

A "digital marketplace where selling, bidding and purchasing happens. Publishers designate available inventory in Ad Exchanges as if saying, “User X is visiting my website right now, who wants to advertise here?” Advertisers through DSPs assess this inventory, evaluate the user and decide whether this impression is relevant. If yes, DSP would bid automatically on this ad slot in order to place the advertisement on that website in front of that user.  Therefore, Ad Exchange is just a COMPONENT of real-time bidding. To make it short, RTB is a process; Ad Exchange is a software-based platform. RTB is a real-time auction, whereas Ad Exchange is a PLACE where that auction happens." Put another way: "At a high level, one key difference is that an Ad Exchange is a type of business or platform in digital advertising where RTB is a protocol for two digital advertising companies to transact." [Quora](https://www.quora.com/What-is-the-Difference-between-an-Ad-Exchange-and-RTB)  Examples include "DoubleClick (Google), Microsoft Media Network, OpenX, and AppNexus" [WhatRunsWhere](http://blog.whatrunswhere.com/media-buying-101-ad-networks-ad-exchanges)

**Ad Network:** "online ad networks is that online ad networks use a central ad server to deliver advertisements to consumers, which enables targeting, tracking and reporting of impressions in ways not possible with analog media alternatives...The advertising network serves advertisements from its central ad server, which responds to a site once a page is called. A snippet of code is called from the ad server, that represents the advertising banner..." [Wikipedia](https://en.wikipedia.org/wiki/Advertising_network).  

**Ad Server:** "The technology responsible for delivering the creative to the user. Ad servers report which and how many ads were run, where they were run, and who saw them." [Smart AdServer](http://smartadserver.com/glossary)

**Ad types:** Banners, native ads, videos, audio fragments, text, pop clicks, etc.

**Ads.txt:** "a tool that can help ad buyers avoid illegitimate sellers who arbitrage inventory and spoof domains; an IAB-approved text file that aims to prevent unauthorized inventory sales".  With Ads.txt, "Publishers drop a text file on their web servers that lists all of the companies that are authorized to sell the publishers’ inventory. Similarly, programmatic platforms also integrate ads.txt files to confirm which publishers’ inventory they are authorized to sell. This allows buyers to check the validity of the inventory they purchase." Using Ads.txt is a way to "verify that the exchange and publisher have a legitimate connection to each other" and prevents the unauthorized inclusion of publisher's inventory from being sold to buyers [Digiday](https://digiday.com/marketing/wtf-ads-txt).

**Advertising Inventory:** "The number of advertisements, or amount of ad space, a publisher has available to sell to an advertiser. Ad inventory is often calculated by the month." [Chron](http://smallbusiness.chron.com/advertising-inventory-mean-35920.html) "Networks include Google AdSense, Media.Net, BuySellAds and Conversant." [WhatRunsWhere](http://blog.whatrunswhere.com/media-buying-101-ad-networks-ad-exchanges)

**Buyer side:** The advertiser is the "buyer side"

**Conversion:** "A click-through conversion occurs when an ad click leads directly to a valuable user-action such as a purchase, sign-up, registration, lead, or view of a key page. Conversion rate measures the effectiveness of unique clicks. The formula is Conversion Rate = Conversions ÷ Unique Clicks." [AdSpeed](https://www.adspeed.com/Knowledges/776/Conversion/conversion-transaction.html)

**Data Activation:** "Data Activation is the concept of unlocking value in data through development of insights and turning those insights into action."  3 steps: 1) bring data in across different locations (websites, mobile, etc); 2) run analytics; 3) Data Out, potentially in partnership across the ecosystem (eg, using shared segments) [Oracle, 1](https://www.oracle.com/marketingcloud/resources/data-activation.html)

**Data on-boarding (aka data on-ramping):** "the transfer of data gathered offline to the digital realm" [Ad Age, 1](http://adage.com/article/glossary-data-defined/data-boarding/293651)

**Demand-side platform:** A system that allows buyers of digital advertising inventory to manage multiple ad exchange and data exchange accounts through one interface.  "Basically, the DSP automates the online advertising purchase process for advertisers who use DSPs to monitor their campaigns" [WhatRunswhere](http://blog.whatrunswhere.com/media-buying-101-programmatic-buying).   Put another way, a DSP is "a platform, which allows advertisers to buy ads from different publishers and SSPs (Supply/Sell Side Platforms). That’s a user interface to run and manage campaigns on several websites from one place." [Igor Pavlov](https://medium.com/admachine/what-is-white-label-dsp-demand-side-platform-de601f106771)

"A technology system that enables buyers purchasing auction-based digital ad inventory, managing multiple ad exchanges and data exchanges through a single user interface. DSP assures more efficient buying and selling by reduced costs and increased transparency. DSP introduces advanced targeting tools, providing options to target contextually, behaviorally, geographically, and even option to retarget later. The biggest advantage of DSPs is their ability to make automated decisions on how much to bid on each specific ad impression in real time, based on the targeting requirement of the advertiser. Therefore, advertisers can generate the most value and increase return on investments (ROI)... Where do I get this “DSP”? DSPs are could be managed by in-house marketing departments or alternatively, by programmatic companies that specialize in real-time advertising. Key DSP players guarantee buyers reaching billions daily impressions, worth to mention: DoubleClick Bid Manager, BrightRoll DSP, Mediamath etc... all companies provide “DSP platforms” but not all of them share exact the same features, so choose smart!"   

DSPs represent the interests of buyers (advertisers) so they get "better optimization, much lower bids and higher ROI".  They provide advertisers with access to multiple supply partners, and help them cut off from bad traffic that brings less or no conversions.  However, they add an expense for usage, as a sign up fee, monthly fee, or percent of your ad spendings. [Quora](https://www.quora.com/What-is-a-Demand-Side-Platform-DSP).

**Direct Campaigns (direct marketing):** Advertisers communicate directly to customers through media (eg, text messages, emails, websites, online adverts, etc) [Wikipedia](https://en.wikipedia.org/wiki/Direct_marketing)

**Direct deals:** Buyers get First Look at fixed-price unreserved inventory that is specific to a particular audience. [Smart AdServer](http://smartadserver.com/publisher-platform/premium-programmatic).  The pro's are that "Advertisers want the guarantee of being placed next to premium content, above the fold, in front of a guaranteed set of eyeballs, for a specific period of time, at a set rate. Further, media buyers are tasked with spending 100% of their budgets for fear they are reduced next quarter because they didn’t spend enough. Without a guarantee in place with publishers, their media spend is at risk of (a) not being spent or (b) being spent in less than ideal context at the end of a fiscal period. Programmatic buying technology like real-time bidding (RTB) provides advertisers/media buyers no guarantee on price, contextual placement, or impression volume".  Examples are "skin" website takeovers, which must be catered to an individual page, and take on a premium price [Sovrn](https://www.sovrn.com/blog/direct-sales-vs-programmatic-sales)  

**Dwell time:** "The duration of an interaction with a proximity technology" [Unacast](https://www.unacast.com/privacy-statement)

**Dynamic Creative:** personalized content; "built in real time when an ad request is sent to the server, and will pull different creative elements based on the environment, the user and other factors", based on user history (web searches, page visits, etc). [The Balance](https://www.thebalance.com/what-is-dynamic-creative-in-advertising-38508) [Smart AdServer](http://smartadserver.com/glossary)

**Dynamic Floor Pricing:** "In an RTB auction, a minimum bid price that is constantly set and reset in real time. Prices are selected in response to previous transactions and changes in demand. This pricing method allows publishers to boost revenue with an optimization system that fits with buyers’ bidding strategies." 

**Floor Price:** "In an RTB auction, the minimum bid price (CPM) set by a publisher or SSP on ad inventory. Any potential buyers who bid below this price are automatically rejected." [Smart AdServer](http://smartadserver.com/glossary)

**Forecast:** "A tool that allows clients to discover how much space they have sold and how much is left to sell. Forecasts also predict how much a publisher or ad network will earn based on the number of users and the amount of inventory sold." [Smart AdServer](http://smartadserver.com/glossary)

**Geofencing**: "a feature in a software program that uses the global positioning system (GPS) or radio frequency identification (RFID) to define geographical boundaries... Geofence virtual barriers can be active or passive. Active geofences require an end user to opt-in to location services and a mobile app to be open. Passive geofences are always on; they rely on Wi-Fi and cellular data instead of GPS or RFID and work in the background." For one use case in marketing, "A small business can text an opt-in customer a coupon code when the customer's smartphone enters a defined geographical area." [Whatis.com TechTarget](http://whatis.techtarget.com/definition/geofencing)

**Google Insights Engine Project:** "an ongoing initiative to bring Google’s cloud computing and machine learning expertise to DoubleClick’s reporting and forecasting systems" [DoubleClick blog](https://doubleclick-publishers.googleblog.com/2017/10/building-for-beyond-with-insights.html)

**Guaranteed deals:** Buyers purchase your inventory with the same options (priorities, volume, date) that they use for direct campaigns. [Smart AdServer](http://smartadserver.com/publisher-platform/premium-programmatic)

**Header bidding:** "Header bidding, also known as advance bidding or pre-bidding, is an advanced programmatic technique wherein publishers offer inventory to multiple ad exchanges simultaneously before making calls to their ad servers (mostly DoubleClick for Publishers). The idea is that by letting multiple demand sources bid on the same inventory at the same time, publishers increase their yield and make more money." [Digiday](https://digiday.com/media/wtf-header-bidding)

**Holistic Yield Management:** "HYM aims to merge all demand sources and inventory types (guaranteed, performance, networks, RTB, and programmatic direct) and assess their value simultaneously. The programmatic segment is merged based on internal forecast data. HYM integrates programmatic buying into ad delivery logic while taking into account all monetization types (direct, guaranteed, performance, and programmatic), allowing synchronization of the two buying methods." [Smart AdServer](http://smartadserver.com/glossary)

**iBeacon:** Apple bluetooth devices that send data to iPhones; can be used for in-store advertising; can only send data to devices (cannot receive) [Fast Company](https://www.fastcompany.com/3035729/apples-ibeacons-are-going-to-transform-much-more-than-advertising)

**Interstitial:** A full-screen ad that covers the entire interface of the host app.

**Managed Tag:** "A way for advertisers to get a first look at a publisher’s inventory by plugging a tag into the publisher’s ad server. After they’re connected, the advertiser can see the inventory and, if desired, place a bid. If the advertiser buys, it’s at a fixed price and CPM. This process benefits publishers because it cuts out the middleman and helps them manage their campaign spending better. (Note: this has nothing to do with 'tag management'.)" [Smart AdServer](http://smartadserver.com/glossary)

**Marketing Funnel:** "a visualization for understanding the process of turning leads into customers, as understood from a marketing (and sales) perspective. The idea is that, like a funnel, marketers cast a broad net to capture as many leads as possible, and then slowly nurture prospective customers through the purchasing decision, narrowing down these candidates in each stage of the funnel." [TrackMaven](https://trackmaven.com/blog/marketing-funnel-2)

**Open Auction:** All buyers have the opportunity to bid on your unreserved inventory.

**Paid search marketing:** "Paid search marketing means you advertise within the sponsored listings of a search engine or a partner site by paying either each time your ad is clicked (pay-per-click - PPC) or less commonly, when your ad is displayed (cost-per-impression - CPM)" [econsultancy](https://econsultancy.com/blog/63783-what-is-paid-search-ppc-and-why-do-you-need-it)

**Passbacks:** "When an ad server calls various SSPs until it finds one that accepts. Passbacks are part of the “waterfall” prioritization model." [Smart AdServer](http://smartadserver.com/glossary)

**Premium Inventory:** Characteristics: "professional content, high-reach sites (i.e., not long tail), brand-safe and reputable publishers." This could depend on the client and their objectives. [Digiday](https://digiday.com/marketing/what-does-premium-inventory-actually-mean) "Quality, “brand safe” inventory offered by reputable publishers whose users have chosen to frequent their sites because of a true interest in the high-value content provided. The ad environment aids in properly targeting the user, and the surrounding content adds value to an ad impression. This inventory is also primed to display innovative formats which boost ad performance. True premium inventory goes through a strict scanning process that includes proof of a direct relationship with publishers or insertion orders. Often, new inventory information is provided to buyers for approval. This enables fluent communication and knowledge-sharing of any suspicious activities, which helps improve the entire ecosystem." [Smart AdServer](http://smartadserver.com/glossary)  

**Pretargeting:** Online advertising that is "targeted to consumers based on their previous actions on many websites" [Wikipedia](https://en.wikipedia.org/wiki/Pretargeting)

**Private auctions:** Buyers access privileged information about inventory in order to increase their chances of winning an auction. [Smart AdServer](http://smartadserver.com/publisher-platform/premium-programmatic); "An auction within an auction for select, whitelisted buyers who are given first-look at the inventory before it’s made available to the open marketplace. Inventory is not sold at a fixed price." [Smart AdServer](http://smartadserver.com/glossary)

**Private Marketplace / Deals:** "An invitation-only RTB exchange that uses programmatic buying channels to auction premium inventory to a selected set of  pre-approved buyers.  Publishers may set minimum bids (a floor price) to maintain the desired sale price. The tagging, testing, and validation are all automated and the sale is made through the use of deal IDs, private auctions or preferred deals. However, all parties are in contact with each other to negotiate the terms of the auction in advance. However, vendors are in contact with each other and decide on the details of the sale in advance." [Smart AdServer](http://smartadserver.com/glossary)

**Programmatic Advertising:** "Programmatic advertising is not a new form of digital ads, but new approach to targeting, where machines decide if the user is worth seeing that specific ad. You’ve probably heard something about machine learning. Well, that’s what we’re talking about... Programmatic buying is finally the way to buy audience, not a place on a website. That may seem like robots control too much, but they don’t. They still can’t find your customers without you setting proper targeting... What is RTB then? Is it programmatic? At most it is. Real-time bidding is a mechanism of programmatic buying. Since you’re paying for every view or click, advertising platform launches a fast auction for every that single view. 

Should I use programmatic?

If you’re an advertiser you may use programmatic advertising to better reach your potential clients. This way you don’t spray your budget all over the place, but get at least relevant audience.

If you are a publisher, you can still sell oldschool display banners, but you can also install SSP code and get at least some more money for the traffic you couldn’t sell as usual. When talking about “as usual” we should also mention that more and more publishers start selling their traffic only through SSPs. Why? Because it is much easier just to install the code and let it do the thing, than to find clients and place every single banner by hands. Programmatic may sometimes bring less income, but you save time and become more cost-effective." [Igor Pavlov](https://medium.com/admachine/what-is-programmatic-advertising-cfa56544c48)

**Programmatic Media Buying:** "generally refers to the automation of all online advertising as a whole, Programmatic Direct and Programmatic RTB are subsets of the umbrella term." [WhatRunswhere](http://blog.whatrunswhere.com/media-buying-101-programmatic-buying).  Programmatic sales do not require teams of humans to broker deals, and it "allows publishers and advertisers alike to benefit from audience data, as programmatic uses cookies... As of late, programmatic has been rapidly gaining traction in mobile and video. As the industry as a whole shifts towards mobile, SSPs are seeing an increasing amount of programmatic transactions served on mobile devices." [Sovrn](https://www.sovrn.com/blog/direct-sales-vs-programmatic-sales)

**Proximity Signals with Beacon technology:** "Proximity-based mobile advertising is one trend in advertising isn’t completely new, but it’s been given some more gusto recently due to the development and inclusion of beacon technology. Proximity signals fire when a user is close to a sensor, and can be used to send promotions or ads to users when they are close to the sensor. This can be seen as an alternative to GPS geolocation targeting in closer spaces, such as shopping malls." [Sovrn](https://www.sovrn.com/blog/7-mobile-advertising-trends)

**Pure Player:** "a company that focuses only on a particular product or activity. Investing in a pure play company can be considered as investing in a particular commodity or product of a company." [Wikipedia](https://en.wikipedia.org/wiki/Pure_play)

**Remnant inventory:** "Any ad units that have not been purchased by an advertiser, and this must be accounted for using another strategy... Ideally, a site will sell every one of its available ad impressions directly to advertisers at premium CPMs" [MonetizePros](https://monetizepros.com/encyclopedia/remnant)

**Retargeting** Retargeting uses tracking technologies like cookies and web pixels to follow users around the web. This allows marketers to serve ads to people who did not convert a sale at a particular website. This "focuses your advertising spend on people who are already familiar with your brand and have recently demonstrated interest" [Retargeter](https://retargeter.com/what-is-retargeting-and-how-does-it-work).

**Seller side:** The publisher is the "seller side"

**Slot:** Digital spaces (area for banner ads, native ads, pop clicks, etc) that publishers sell to advertisers.

**Supply-side platform:** "Advertisers set their bids, the SSP choses the highest one and sells publishers slot. That is RTB, real time bidding and that is how it works. So we may say, that the purpose of SSP is to deliver best price for the publisher." [Igor Pavlov](https://medium.com/admachine/is-dsp-better-than-ssp-9118238f3afd) "One can say the main purpose of SSP is to sell view or click for a highest bid, since it works on RTB basis."

**UTM Parameters:** "UTM parameter is term coined by Google Analytics to describe the URL elements that capture information like the source, medium, and campaign name from that activity."  See [SF, 55](https://konsole.zendesk.com/hc/en-us/articles/115002018607-UTM-Parameters-FAQ)

**Viewability:** "how likely an ad is to be seen on a page... The Media Rating Council decided that a desktop display ad is viewed when 50% of its pixels are in view for 1 continuous second. For video it is the same 50% of pixels in view but for 2 seconds instead of 1... " [Sovrn](https://www.sovrn.com/blog/intro-viewability) "**Viewability:** " an online advertising metric that aims to track only impressions that can actually be seen by users. For example, if an ad is loaded at the bottom of a webpage but a user doesn’t scroll down far enough to see it, that impression would not be deemed viewable. Viewability is designed to let advertisers pay only for the ads that users could possibly see... Depending on whom you believe — and everyone has a dog in this fight — up to 54 percent of ads aren’t viewable." See [Digiday](https://digiday.com/media/wtf-viewability) 

**Waterfall (sales strategy for publishers):** "Publishers offer impressions in one sales channel, and if buyers don’t bite, they push them down to other, less valuable channels until someone makes a bid. The system works, but it’s highly fractured and inherently inefficient. Publishers say the system leaves money on the table." [Digiday](https://digiday.com/media/wtf-header-bidding)

**Web Beacon:** "Web Beacons are used to help web publishers understand how visitors interact with their websites. Pixel tags are transparent images, iFrames, or JavaScript that are placed on a site. The use of a pixel tag allows a website to measure the actions of the visitor opening the page that contains the tag." [Smart AdServer](http://smartadserver.com/company/privacy-policy)

**"White Label" DSP:** The tool you can sell to operate a DSP or SSP, usually after buying software and reselling it to your customers, as "a franchise with no brand included".  Profit comes from a percentage of advertisers' payments; you charge to buy or use the product. AdMachine is an example. [Igor Pavlov](https://medium.com/admachine/what-is-white-label-dsp-demand-side-platform-de601f106771)


## More Resources

Great definitions of cookies, web beacons, IP logging, Social Media Features, and Do Not Track [SF,6](https://www.salesforce.com/company/privacy/full_privacy.jsp)



================================================
FILE: guides/Permissions.md
================================================
## Android Permissions

This is a list of standard Android permissions.  AOSP and Google default permissions belong in this section. Additional permissions (such as device or vendor-specific settings) are listed separately.

* Allows the app to access external storage for all users. [android.permission.ACCESS_ALL_EXTERNAL_STORAGE](http://androidpermissions.com/permission/android.permission.ACCESS_ALL_EXTERNAL_STORAGE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to request that the supplied signal be sent to all persistent processes. [android.permission.ACCESS_COARSE_LOCATION](http://androidpermissions.com/permission/android.permission.ACCESS_COARSE_LOCATION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to get your precise location using the Global Positioning System (GPS) or network location sources such as cell towers and Wi-Fi. These location services must be turned on and available to your device for the app to use them. Apps may use this to determine where you are, and may consume additional battery power. [android.permission.ACCESS_FINE_LOCATION](http://androidpermissions.com/permission/android.permission.ACCESS_FINE_LOCATION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to access extra location provider commands. This may allow the app to to interfere with the operation of the GPS or other location sources. [android.permission.ACCESS_LOCATION_EXTRA_COMMANDS](http://androidpermissions.com/permission/android.permission.ACCESS_LOCATION_EXTRA_COMMANDS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Create mock location sources for testing or install a new location provider. This allows the app to override the location and/or status returned by other location sources such as GPS or location providers. [android.permission.ACCESS_MOCK_LOCATION](http://androidpermissions.com/permission/android.permission.ACCESS_MOCK_LOCATION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows access to the kernel MTP driver to implement the MTP USB protocol. [android.permission.ACCESS_MTP](http://androidpermissions.com/permission/android.permission.ACCESS_MTP) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to view information about network connections such as which networks exist and are connected. [android.permission.ACCESS_NETWORK_STATE](http://androidpermissions.com/permission/android.permission.ACCESS_NETWORK_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. [android.permission.ACCESS_WIFI_STATE](http://androidpermissions.com/permission/android.permission.ACCESS_WIFI_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to determine whether WiMAX is enabled and information about any WiMAX networks that are connected. [android.permission.ACCESS_WIMAX_STATE](http://androidpermissions.com/permission/android.permission.ACCESS_WIMAX_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to make calls to AccountAuthenticators. [android.permission.ACCOUNT_MANAGER](http://androidpermissions.com/permission/android.permission.ACCOUNT_MANAGER) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to get information on internal storage. [android.permission.ASEC_ACCESS](http://androidpermissions.com/permission/android.permission.ASEC_ACCESS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to create internal storage. [android.permission.ASEC_CREATE](http://androidpermissions.com/permission/android.permission.ASEC_CREATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to destroy internal storage. [android.permission.ASEC_DESTROY](http://androidpermissions.com/permission/android.permission.ASEC_DESTROY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to mount/unmount internal storage. [android.permission.ASEC_MOUNT_UNMOUNT](http://androidpermissions.com/permission/android.permission.ASEC_MOUNT_UNMOUNT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to rename internal storage. [android.permission.ASEC_RENAME](http://androidpermissions.com/permission/android.permission.ASEC_RENAME) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to use the account authenticator capabilities of the AccountManager, including creating accounts and getting and setting their passwords. [android.permission.AUTHENTICATE_ACCOUNTS](http://androidpermissions.com/permission/android.permission.AUTHENTICATE_ACCOUNTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows an application to read the current low-level battery use data. May allow the application to find out detailed information about which apps you use. [android.permission.BATTERY_STATS](http://androidpermissions.com/permission/android.permission.BATTERY_STATS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to tell the system which widgets can be used by which app. An app with this permission can give access to personal data to other apps. Not for use by normal apps. [android.permission.BIND_APPWIDGET](http://androidpermissions.com/permission/android.permission.BIND_APPWIDGET) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control when and how the user sees the in-call screen. [android.permission.BIND_CALL_SERVICE](http://androidpermissions.com/permission/android.permission.BIND_CALL_SERVICE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.BIND_DIRECTORY_SEARCH
* android.permission.BIND_KEYGUARD_APPWIDGET
* Allows the app to view the configuration of the Bluetooth on the phone, and to make and accept connections with paired devices. [android.permission.BLUETOOTH](http://androidpermissions.com/permission/android.permission.BLUETOOTH) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to configure the local Bluetooth phone, and to discover and pair with remote devices. [android.permission.BLUETOOTH_ADMIN](http://androidpermissions.com/permission/android.permission.BLUETOOTH_ADMIN) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Description [android.permission.BLUETOOTH_PRIVILEGED](http://androidpermissions.com/permission/android.permission.BLUETOOTH_PRIVILEGED) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.BLUETOOTH_STACK
* Allows the app to broadcast a notification that an app package has been removed. Malicious apps may use this to kill any other running app. [android.permission.BROADCAST_PACKAGE_REMOVED](http://androidpermissions.com/permission/android.permission.BROADCAST_PACKAGE_REMOVED) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to broadcast a notification that an SMS message has been received. Malicious apps may use this to forge incoming SMS messages. [android.permission.BROADCAST_SMS](http://androidpermissions.com/permission/android.permission.BROADCAST_SMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to send sticky broadcasts, which remain after the broadcast ends. Excessive use may make the phone slow or unstable by causing it to use too much memory. [android.permission.BROADCAST_STICKY](http://androidpermissions.com/permission/android.permission.BROADCAST_STICKY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to broadcast a notification that a WAP PUSH message has been received. Malicious apps may use this to forge MMS message receipt or to silently replace the content of any webpage with malicious variants. [android.permission.BROADCAST_WAP_PUSH](http://androidpermissions.com/permission/android.permission.BROADCAST_WAP_PUSH) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to call phone numbers without your intervention. This may result in unexpected charges or calls. Note that this doesn't allow the app to call emergency numbers. Malicious apps may cost you money by making calls without your confirmation. [android.permission.CALL_PHONE](http://androidpermissions.com/permission/android.permission.CALL_PHONE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to take pictures and videos with the camera. This permission allows the app to use the camera at any time without your confirmation. [android.permission.CAMERA](http://androidpermissions.com/permission/android.permission.CAMERA) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows a pre-installed system application to disable the camera use indicator LED. [android.permission.CAMERA_DISABLE_TRANSMIT_LED](http://androidpermissions.com/permission/android.permission.CAMERA_DISABLE_TRANSMIT_LED) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the background data usage setting. [android.permission.CHANGE_BACKGROUND_DATA_SETTING](http://androidpermissions.com/permission/android.permission.CHANGE_BACKGROUND_DATA_SETTING) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the current configuration, such as the locale or overall font size. [android.permission.CHANGE_CONFIGURATION](http://androidpermissions.com/permission/android.permission.CHANGE_CONFIGURATION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the state of network connectivity. [android.permission.CHANGE_NETWORK_STATE](http://androidpermissions.com/permission/android.permission.CHANGE_NETWORK_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode. [android.permission.CHANGE_WIFI_MULTICAST_STATE](http://androidpermissions.com/permission/android.permission.CHANGE_WIFI_MULTICAST_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks. [android.permission.CHANGE_WIFI_STATE](http://androidpermissions.com/permission/android.permission.CHANGE_WIFI_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to connect the phone to and disconnect the phone from WiMAX networks. [android.permission.CHANGE_WIMAX_STATE](http://androidpermissions.com/permission/android.permission.CHANGE_WIMAX_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to free phone storage by deleting files in the cache directories of other applications. This may cause other applications to start up more slowly as they need to re-retrieve their data. [android.permission.CLEAR_APP_CACHE](http://androidpermissions.com/permission/android.permission.CLEAR_APP_CACHE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.CONNECTIVITY_INTERNAL
* Allows the app to read and write to any resource owned by the diag group; for example, files in /dev. This could potentially affect system stability and security. This should be ONLY be used for hardware-specific diagnostics by the manufacturer or operator. [android.permission.DIAGNOSTIC](http://androidpermissions.com/permission/android.permission.DIAGNOSTIC]) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to disable the keylock and any associated password security. For example, the phone disables the keylock when receiving an incoming phone call, then re-enables the keylock when the call is finished. [android.permission.DISABLE_KEYGUARD](http://androidpermissions.com/permission/android.permission.DISABLE_KEYGUARD) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to download files through the download manager without any notification being shown to the user. [android.permission.DOWNLOAD_WITHOUT_NOTIFICATION](http://androidpermissions.com/permission/android.permission.DOWNLOAD_WITHOUT_NOTIFICATION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve internal state of the system. Malicious apps may retrieve a wide variety of private and secure information that they should never normally need. [android.permission.DUMP](http://androidpermissions.com/permission/android.permission.DUMP) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to expand or collapse the status bar. [android.permission.EXPAND_STATUS_BAR](http://androidpermissions.com/permission/android.permission.EXPAND_STATUS_BAR) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control the flashlight. [android.permission.FLASHLIGHT](http://androidpermissions.com/permission/android.permission.FLASHLIGHT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to forcibly stop other apps. [android.permission.FORCE_STOP_PACKAGES](http://androidpermissions.com/permission/android.permission.FORCE_STOP_PACKAGES) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to get the list of accounts known by the phone. This may include any accounts created by applications you have installed. [android.permission.GET_ACCOUNTS](http://androidpermissions.com/permission/android.permission.GET_ACCOUNTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve collected application operation statistics. Not for use by normal apps. [android.permission.GET_APP_OPS_STATS](http://androidpermissions.com/permission/android.permission.GET_APP_OPS_STATS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve detailed information about currently and recently running tasks. Malicious apps may discover private information about other apps. [android.permission.GET_DETAILED_TASKS](http://androidpermissions.com/permission/android.permission.GET_DETAILED_TASKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve its code, data, and cache sizes [android.permission.GET_PACKAGE_SIZE](http://androidpermissions.com/permission/android.permission.GET_PACKAGE_SIZE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve information about currently and recently running tasks. This may allow the app to discover information about which applications are used on the device. [android.permission.GET_TASKS](http://androidpermissions.com/permission/android.permission.GET_TASKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.GLOBAL_SEARCH
* android.permission.GLOBAL_SEARCH_CONTROL
* Allows the app to control various peripherals for the purpose of hardware testing. [android.permission.HARDWARE_TEST](http://androidpermissions.com/permission/android.permission.HARDWARE_TEST) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to perform actions across different users on the device. Malicious apps may use this to violate the protection between users. [android.permission.INTERACT_ACROSS_USERS](http://androidpermissions.com/permission/android.permission.INTERACT_ACROSS_USERS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows all possible interactions across users. [android.permission.INTERACT_ACROSS_USERS_FULL](http://androidpermissions.com/permission/android.permission.INTERACT_ACROSS_USERS_FULL) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. [android.permission.INTERNET](http://androidpermissions.com/permission/android.permission.INTERNET) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
*Allows the app to end background processes of other apps. This may cause other apps to stop running. [android.permission.KILL_BACKGROUND_PROCESSES](http://androidpermissions.com/permission/android.permission.KILL_BACKGROUND_PROCESSES) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.LOCATION_HARDWARE
* android.permission.LOOP_RADIO
* Allows the app to perform operations like adding and removing accounts, and deleting their password. [android.permission.MANAGE_ACCOUNTS](http://androidpermissions.com/permission/android.permission.MANAGE_ACCOUNTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to add, remove, and modify the activity stacks in which other apps run. Malicious apps may disrupt the behavior of other apps. [android.permission.MANAGE_ACTIVITY_STACKS](http://androidpermissions.com/permission/android.permission.MANAGE_ACTIVITY_STACKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to manage document storage. [android.permission.MANAGE_DOCUMENTS](http://androidpermissions.com/permission/android.permission.MANAGE_DOCUMENTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to manage preferences and permissions for USB devices. [android.permission.MANAGE_USB](http://androidpermissions.com/permission/android.permission.MANAGE_USB) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to manage users on the device, including query, creation and deletion. [android.permission.MANAGE_USERS](http://androidpermissions.com/permission/android.permission.MANAGE_USERS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.MODIFY_APPWIDGET_BIND_PERMISSIONS
* Allows the app to modify global audio settings such as volume and which speaker is used for output. [android.permission.MODIFY_AUDIO_SETTINGS](http://androidpermissions.com/permission/android.permission.MODIFY_AUDIO_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control the phone features of the device. An app with this permission can switch networks, turn the phone radio on and off and the like without ever notifying you. [android.permission.MODIFY_PHONE_STATE](http://androidpermissions.com/permission/android.permission.MODIFY_PHONE_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to format removable storage. [android.permission.MOUNT_FORMAT_FILESYSTEMS](http://androidpermissions.com/permission/android.permission.MOUNT_FORMAT_FILESYSTEMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to mount and unmount filesystems for removable storage. [android.permission.MOUNT_UNMOUNT_FILESYSTEMS](http://androidpermissions.com/permission/android.permission.MOUNT_UNMOUNT_FILESYSTEMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.NET_ADMIN
* android.permission.NET_TUNNELING
* Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers. [android.permission.NFC](http://androidpermissions.com/permission/android.permission.NFC) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to make parts of itself persistent in memory. This can limit memory available to other apps slowing down the phone. [android.permission.PERSISTENT_ACTIVITY](http://androidpermissions.com/permission/android.permission.PERSISTENT_ACTIVITY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to process outgoing calls and change the number to be dialed. This permission allows the app to monitor, redirect, or prevent outgoing calls. [android.permission.PROCESS_OUTGOING_CALLS](http://androidpermissions.com/permission/android.permission.PROCESS_OUTGOING_CALLS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read all calendar events stored on your phone, including those of friends or co-workers. This may allow the app to share or save your calendar data, regardless of confidentiality or sensitivity. [android.permission.READ_CALENDAR](http://androidpermissions.com/permission/android.permission.READ_CALENDAR) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read your phone's call log, including data about incoming and outgoing calls. This permission allows apps to save your call log data, and malicious apps may share call log data without your knowledge. [android.permission.READ_CALL_LOG](http://androidpermissions.com/permission/android.permission.READ_CALL_LOG) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read cell broadcast messages received by your device. Cell broadcast alerts are delivered in some locations to warn you of emergency situations. Malicious apps may interfere with the performance or operation of your device when an emergency cell broadcast is received. [android.permission.READ_CELL_BROADCASTS](http://androidpermissions.com/permission/android.permission.READ_CELL_BROADCASTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read data about your contacts stored on your phone, including the frequency with which you've called, emailed, or communicated in other ways with specific individuals. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge. [android.permission.READ_CONTACTS](http://androidpermissions.com/permission/android.permission.READ_CONTACTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.READ_DREAM_STATE
* Allows the app to read the contents of your SD card. [android.permission.READ_EXTERNAL_STORAGE](http://androidpermissions.com/permission/android.permission.READ_EXTERNAL_STORAGE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read from the system's various log files. This allows it to discover general information about what you are doing with the phone, potentially including personal or private information. [android.permission.READ_LOGS](http://androidpermissions.com/permission/android.permission.READ_LOGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. [android.permission.READ_PHONE_STATE](http://androidpermissions.com/permission/android.permission.READ_PHONE_STATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.READ_PRIVILEGED_PHONE_STATE
* Allows the app to read personal profile information stored on your device, such as your name and contact information. This means the app can identify you and may send your profile information to others. [android.permission.READ_PROFILE](http://androidpermissions.com/permission/android.permission.READ_PROFILE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read SMS messages stored on your phone or SIM card. This allows the app to read all SMS messages, regardless of content or confidentiality. [android.permission.READ_SMS](http://androidpermissions.com/permission/android.permission.READ_SMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to access and sync social updates from you and your friends. Be careful when sharing information -- this allows the app to read communications between you and your friends on social networks, regardless of confidentiality. Note: this permission may not be enforced on all social networks. [android.permission.READ_SOCIAL_STREAM](http://androidpermissions.com/permission/android.permission.READ_SOCIAL_STREAM) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read the sync settings for an account. For example, this can determine whether the People app is synced with an account. [android.permission.READ_SYNC_SETTINGS](http://androidpermissions.com/permission/android.permission.READ_SYNC_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows an app to read the sync stats for an account, including the history of sync events and how much data is synced. [android.permission.READ_SYNC_STATS](http://androidpermissions.com/permission/android.permission.READ_SYNC_STATS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read all words, names and phrases that the user may have stored in the user dictionary. [android.permission.READ_USER_DICTIONARY](http://androidpermissions.com/permission/android.permission.READ_USER_DICTIONARY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running. [android.permission.RECEIVE_BOOT_COMPLETED](http://androidpermissions.com/permission/android.permission.RECEIVE_BOOT_COMPLETED) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.RECEIVE_DATA_ACTIVITY_CHANGE
* Allows the app to receive and process emergency broadcast messages. This permission is only available to system apps. [android.permission.RECEIVE_EMERGENCY_BROADCAST](http://androidpermissions.com/permission/android.permission.RECEIVE_EMERGENCY_BROADCAST) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to receive and process MMS messages. This means the app could monitor or delete messages sent to your device without showing them to you. [android.permission.RECEIVE_MMS](http://androidpermissions.com/permission/android.permission.RECEIVE_MMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to receive and process SMS messages. This means the app could monitor or delete messages sent to your device without showing them to you. [android.permission.RECEIVE_SMS](http://androidpermissions.com/permission/android.permission.RECEIVE_SMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to receive and process WAP messages. This permission includes the ability to monitor or delete messages sent to you without showing them to you. [android.permission.RECEIVE_WAP_PUSH](http://androidpermissions.com/permission/android.permission.RECEIVE_WAP_PUSH) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to record audio with the microphone. This permission allows the app to record audio at any time without your confirmation. [android.permission.RECORD_AUDIO](http://androidpermissions.com/permission/android.permission.RECORD_AUDIO) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.REMOTE_AUDIO_PLAYBACK
* Allows the app to remove tasks and kill their apps. Malicious apps may disrupt the behavior of other apps. [android.permission.REMOVE_TASKS](http://androidpermissions.com/permission/android.permission.REMOVE_TASKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to move tasks to the foreground and background. The app may do this without your input. [android.permission.REORDER_TASKS](http://androidpermissions.com/permission/android.permission.REORDER_TASKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to end background processes of other apps. This may cause other apps to stop running. [android.permission.RESTART_PACKAGES](http://androidpermissions.com/permission/android.permission.RESTART_PACKAGES) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to retrieve the content of the active window. Malicious apps may retrieve the entire window content and examine all its text except passwords. [android.permission.RETRIEVE_WINDOW_CONTENT](http://androidpermissions.com/permission/android.permission.RETRIEVE_WINDOW_CONTENT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to send requests to other messaging apps to handle respond-via-message events for incoming calls. [android.permission.SEND_RESPOND_VIA_MESSAGE](http://androidpermissions.com/permission/android.permission.SEND_RESPOND_VIA_MESSAGE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to send SMS messages. This may result in unexpected charges. Malicious apps may cost you money by sending messages without your confirmation. [android.permission.SEND_SMS](http://androidpermissions.com/permission/android.permission.SEND_SMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control whether activities are always finished as soon as they go to the background. Never needed for normal apps. [android.permission.SET_ALWAYS_FINISH](http://androidpermissions.com/permission/android.permission.SET_ALWAYS_FINISH) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the global animation speed (faster or slower animations) at any time. [android.permission.SET_ANIMATION_SCALE](http://androidpermissions.com/permission/android.permission.SET_ANIMATION_SCALE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to turn on debugging for another app. Malicious apps may use this to kill other apps. [android.permission.SET_DEBUG_APP](http://androidpermissions.com/permission/android.permission.SET_DEBUG_APP) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify your preferred apps. Malicious apps may silently change the apps that are run, spoofing your existing apps to collect private data from you. [android.permission.SET_PREFERRED_APPLICATIONS](http://androidpermissions.com/permission/android.permission.SET_PREFERRED_APPLICATIONS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control the maximum number of processes that will run. Never needed for normal apps. [android.permission.SET_PROCESS_LIMIT](http://androidpermissions.com/permission/android.permission.SET_PROCESS_LIMIT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control the screen compatibility mode of other applications. Malicious applications may break the behavior of other applications. [android.permission.SET_SCREEN_COMPATIBILITY](http://androidpermissions.com/permission/android.permission.SET_SCREEN_COMPATIBILITY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the phone's time zone. [android.permission.SET_TIME_ZONE](http://androidpermissions.com/permission/android.permission.SET_TIME_ZONE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to set the system wallpaper.  [android.permission.SET_WALLPAPER](http://androidpermissions.com/permission/android.permission.SET_WALLPAPER) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.SET_WALLPAPER_COMPONENT
* Allows the app to set the system wallpaper size hints. [android.permission.SET_WALLPAPER_HINTS](http://androidpermissions.com/permission/android.permission.SET_WALLPAPER_HINTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to request that the supplied signal be sent to all persistent processes. [android.permission.SIGNAL_PERSISTENT_PROCESSES](http://androidpermissions.com/permission/android.permission.SIGNAL_PERSISTENT_PROCESSES) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to start any activity, regardless of permission protection or exported state. [android.permission.START_ANY_ACTIVITY](http://androidpermissions.com/permission/android.permission.START_ANY_ACTIVITY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to get details about the currently synced feeds. [android.permission.SUBSCRIBED_FEEDS_READ](http://androidpermissions.com/permission/android.permission.SUBSCRIBED_FEEDS_READ) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify your currently synced feeds. Malicious apps may change your synced feeds. [android.permission.SUBSCRIBED_FEEDS_WRITE](http://androidpermissions.com/permission/android.permission.SUBSCRIBED_FEEDS_WRITE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to draw on top of other applications or parts of the user interface. They may interfere with your use of the interface in any application, or change what you think you are seeing in other applications. [android.permission.SYSTEM_ALERT_WINDOW](http://androidpermissions.com/permission/android.permission.SYSTEM_ALERT_WINDOW) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to use the phone's infrared transmitter. [android.permission.TRANSMIT_IR](http://androidpermissions.com/permission/android.permission.TRANSMIT_IR) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to request authentication tokens. [android.permission.USE_CREDENTIALS](http://androidpermissions.com/permission/android.permission.USE_CREDENTIALS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to use the SIP service to make/receive Internet calls. [android.permission.USE_SIP](http://androidpermissions.com/permission/android.permission.USE_SIP) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to control the vibrator. [android.permission.VIBRATE](http://androidpermissions.com/permission/android.permission.VIBRATE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to prevent the phone from going to sleep. [android.permission.WAKE_LOCK](http://androidpermissions.com/permission/android.permission.WAKE_LOCK) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change network settings and to intercept and inspect all network traffic, for example to change the proxy and port of any APN. Malicious apps may monitor, redirect, or modify network packets without your knowledge. [android.permission.WRITE_APN_SETTINGS](http://androidpermissions.com/permission/android.permission.WRITE_APN_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to add, remove, change events that you can modify on your phone, including those of friends or co-workers. This may allow the app to send messages that appear to come from calendar owners, or modify events without the owners' knowledge. [android.permission.WRITE_CALENDAR](http://androidpermissions.com/permission/android.permission.WRITE_CALENDAR) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify your phone's call log, including data about incoming and outgoing calls. Malicious apps may use this to erase or modify your call log. [android.permission.WRITE_CALL_LOG](http://androidpermissions.com/permission/android.permission.WRITE_CALL_LOG) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify the data about your contacts stored on your phone, including the frequency with which you've called, emailed, or communicated in other ways with specific contacts. This permission allows apps to delete contact data. [android.permission.WRITE_CONTACTS](http://androidpermissions.com/permission/android.permission.WRITE_CONTACTS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* android.permission.WRITE_DREAM_STATE
* Allows the app to write to the SD card. [android.permission.WRITE_EXTERNAL_STORAGE](http://androidpermissions.com/permission/android.permission.WRITE_EXTERNAL_STORAGE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify the contents of the internal media storage. [android.permission.WRITE_MEDIA_STORAGE](http://androidpermissions.com/permission/android.permission.WRITE_MEDIA_STORAGE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change or add to personal profile information stored on your device, such as your name and contact information. This means the app can identify you and may send your profile information to others. [android.permission.WRITE_PROFILE](http://androidpermissions.com/permission/android.permission.WRITE_PROFILE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify the system's secure settings data. Not for use by normal apps. [android.permission.WRITE_SECURE_SETTINGS](http://androidpermissions.com/permission/android.permission.WRITE_SECURE_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change or add to personal profile information stored on your device, such as your name and contact information. This means the app can identify you and may send your profile information to others. [android.permission.WRITE_SETTINGS](http://androidpermissions.com/permission/android.permission.WRITE_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to write to SMS messages stored on your phone or SIM card. Malicious apps may delete your messages. [android.permission.WRITE_SMS](http://androidpermissions.com/permission/android.permission.WRITE_SMS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to display social updates from your friends. Be careful when sharing information -- this allows the app to produce messages that may appear to come from a friend. Note: this permission may not be enforced on all social networks. [android.permission.WRITE_SOCIAL_STREAM](http://androidpermissions.com/permission/android.permission.WRITE_SOCIAL_STREAM) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows an app to modify the sync settings for an account. For example, this can be used to enable sync of the People app with an account. [android.permission.WRITE_SYNC_SETTINGS](http://androidpermissions.com/permission/android.permission.WRITE_SYNC_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to write new words into the user dictionary. [android.permission.WRITE_USER_DICTIONARY](http://androidpermissions.com/permission/android.permission.WRITE_USER_DICTIONARY) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to set an alarm in an installed alarm clock app. Some alarm clock apps may not implement this feature. [com.android.alarm.permission.SET_ALARM](http://androidpermissions.com/permission/com.android.alarm.permission.SET_ALARM) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read the history of all URLs that the Browser has visited, and all of the Browser's bookmarks. Note: this permission may not be enforced by third-party browsers or other applications with web browsing capabilities. [com.android.browser.permission.READ_HISTORY_BOOKMARKS](http://androidpermissions.com/permission/com.android.browser.permission.READ_HISTORY_BOOKMARKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to modify the Browser's history or bookmarks stored on your phone. This may allow the app to erase or modify Browser data. Note: this permission may note be enforced by third-party browsers or other applications with web browsing capabilities. [com.android.browser.permission.WRITE_HISTORY_BOOKMARKS](http://androidpermissions.com/permission/com.android.browser.permission.WRITE_HISTORY_BOOKMARKS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to read your email attachments. [com.android.email.permission.READ_ATTACHMENT](http://androidpermissions.com/permission/com.android.email.permission.READ_ATTACHMENT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows an application to add Homescreen shortcuts without user intervention. [com.android.launcher.permission.INSTALL_SHORTCUT](http://androidpermissions.com/permission/com.android.launcher.permission.INSTALL_SHORTCUT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* com.android.launcher.permission.PRELOAD_WORKSPACE
* Allows the app to read the settings and shortcuts in Home. [com.android.launcher.permission.READ_SETTINGS](http://androidpermissions.com/permission/com.android.launcher.permission.READ_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the application to remove Homescreen shortcuts without user intervention. [com.android.launcher.permission.UNINSTALL_SHORTCUT](http://androidpermissions.com/permission/com.android.launcher.permission.UNINSTALL_SHORTCUT) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to change the settings and shortcuts in Home.  [com.android.launcher.permission.WRITE_SETTINGS](http://androidpermissions.com/permission/com.android.launcher.permission.WRITE_SETTINGS) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* com.android.vending.CHECK_LICENSE
* Allows the app to add messages to your voicemail inbox. [com.android.voicemail.permission.ADD_VOICEMAIL](http://androidpermissions.com/permission/com.android.voicemail.permission.ADD_VOICEMAIL) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows the app to store and retrieve all voicemails that this device can access. [com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL](http://androidpermissions.com/permission/com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to accept cloud to device messages sent by the app's service. Using this service will incur data usage. Malicious apps could cause excess data usage. [com.google.android.c2dm.permission.RECEIVE](http://androidpermissions.com/permission/com.google.android.c2dm.permission.RECEIVE) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Can broadcast data messages received from the Internet to apps registered to listen for them. [com.google.android.c2dm.permission.SEND](http://androidpermissions.com/permission/com.google.android.c2dm.permission.SEND) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows an app to receive periodic updates of your activity level from Google, for example, if you are walking, driving, cycling, or stationary. [com.google.android.gms.permission.ACTIVITY_RECOGNITION](http://androidpermissions.com/permission/com.google.android.gms.permission.ACTIVITY_RECOGNITION) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to see the usernames (email addresses) of the Google account(s) you have configured. [com.google.android.googleapps.permission.GOOGLE_AUTH](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to ALL Google services using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.adsense](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.adsense) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to unspecified Google services using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.adwords](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.adwords) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google App Engine using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.ah](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.ah) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google AdSense using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.ALL_SERVICES](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.ALL_SERVICES) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Android services using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.android](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.android) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Android services using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.androidsecure](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.androidsecure) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Blogger using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.blogger](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.blogger) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Calendar using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.cl](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.cl) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to access the contacts and profile information of account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.cp](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.cp) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Dodgeball using the account(s) stored on this Android device.  [com.google.android.googleapps.permission.GOOGLE_AUTH.dodgeball](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.dodgeball) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows applications to sign in to the Google Catalogs service using the account(s) stored on this phone. [com.google.android.googleapps.permission.GOOGLE_AUTH.doraemon](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.doraemon) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Finance using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.finance](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.finance) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Base using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.gbase](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.gbase) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows applications to sign in to the Google Map maker service using the account(s) stored on this phone. [com.google.android.googleapps.permission.GOOGLE_AUTH.geowiki](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.geowiki) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows applications to sign in to the Google Tasks service using the account(s) stored on this phone. [com.google.android.googleapps.permission.GOOGLE_AUTH.goanna_mobile](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.goanna_mobile) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Voice using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.grandcentral](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.grandcentral) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Groups using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.groups2](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.groups2) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Health using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.health](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.health) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to iGoogle using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.ig](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.ig) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to JotSpot using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.jotspot](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.jotspot) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Knol using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.knol](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.knol) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Picasa Web Albums using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.lh2](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.lh2) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Maps using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.local](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.local) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google mail services using the account(s) stored on this Android device.  [com.google.android.googleapps.permission.GOOGLE_AUTH.mail](http://androidpermissions.com/permission/com.google.android.googleapps.permission.GOOGLE_AUTH.mail) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google mobile apps using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.mobile](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google News using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.news](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Notebook using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.notebook](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Orkut using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.orkut](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to unspecified Google services using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.OTHER_SERVICES](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows applications to sign in to the Panoramio service using the account(s) stored on this phone.  [com.google.android.googleapps.permission.GOOGLE_AUTH.panoramio](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Book Search using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.print](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows applications to sign in to the Google Reader service using the account(s) stored on this phone. [com.google.android.googleapps.permission.GOOGLE_AUTH.reader](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Checkout (and potentially make purchases) using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.sierra](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Checkout QA using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.sierraqa](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Checkout Sandbox using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.sierrasandbox](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Webmaster Tools using the account(s) stored on this Android device.  [com.google.android.googleapps.permission.GOOGLE_AUTH.sitemaps](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Voice Search using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.speech](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to the Personalized Speech Recognition service using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.speechpersonalization](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Talk using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.talk](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Wi-Fi using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.wifi](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Spreadsheets using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.wise](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to Google Docs using the account(s) stored on this Android device. [com.google.android.googleapps.permission.GOOGLE_AUTH.writely](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to sign in to YouTube using the account(s) stored on this Android device.  [com.google.android.googleapps.permission.GOOGLE_AUTH.youtube](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to see the YouTube username(s) associated with the Google account(s) stored on this Android device.  [com.google.android.googleapps.permission.GOOGLE_AUTH.YouTubeUser](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Used for server cloud to device messages and for sync notifications. Google Talk uses this service to exchange messages and to synchronize presence status. Malicious apps could use this service to transmit excess data. [com.google.android.gtalkservice.permission.GTALK_SERVICE](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Can send a heartbeat packet to the Google Talk server to ensure the health of the connection. [com.google.android.gtalkservice.permission.SEND_HEARTBEAT](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Can broadcast data messages received from the Internet to apps registered to listen for them.  [com.google.android.permission.BROADCAST_DATA_MESSAGE](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows this app to read Google service configuration data. [com.google.android.providers.gsf.permission.READ_GSERVICES](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to read data from the Google Talk content provider. [com.google.android.providers.talk.permission.READ_ONLY](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows apps to write data to the Google Talk content provider. [com.google.android.providers.talk.permission.WRITE_ONLY](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Can broadcast XMPP messages received from the Google servers to apps registered to listen for them. [com.google.android.xmpp.permission.BROADCAST](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows Google apps to send and receive XMPP messages to and from Google servers. [com.google.android.xmpp.permission.SEND_RECEIVE](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Allows Google apps to send and receive XMPP messages to and from Google servers. [com.google.android.xmpp.permission.USE_XMPP_ENDPOINT](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)
* Can broadcast XMPP messages received from the Google servers to apps. [com.google.android.xmpp.permission.XMPP_ENDPOINT_BROADCAST](http://androidpermissions.com/permission/) [Reference](https://developer.android.com/reference/android/Manifest.permission.html)


## Additional Permissions

Device, application, or vendor-specific settings.

* (com.anddoes.launcher.permission.UPDATE_COUNT)
* (com.google.android.c2dm.permission.RECEIVE)
* (com.htc.launcher.permission.READ_SETTINGS)
* (com.htc.launcher.permission.UPDATE_SHORTCUT)
* (com.huawei.android.launcher.permission.CHANGE_BADGE)
* (com.huawei.android.launcher.permission.READ_SETTINGS)
* (com.huawei.android.launcher.permission.WRITE_SETTINGS)
* (com.majeur.launcher.permission.UPDATE_BADGE)
* (com.oppo.launcher.permission.READ_SETTINGS)
* (com.oppo.launcher.permission.WRITE_SETTINGS)
* (com.sec.android.provider.badge.permission.READ)
* (com.sec.android.provider.badge.permission.WRITE)
* (com.sonyericsson.home.permission.BROADCAST_BADGE)
* (com.sonymobile.home.permission.PROVIDER_INSERT_BADGE)
* (me.everything.badger.permission.BADGE_COUNT_READ)
* (me.everything.badger.permission.BADGE_COUNT_WRITE)
* (.permission.C2D_MESSAGE)


================================================
FILE: guides/mozilla_presentation.md
================================================
# Tracking Mobile Trackers
#### A [Yale Privacy Lab]( https://privacylab.yale.edu) Tech Primer [Guide]

###### Share: [privacylab.yale.edu/tmt](https://privacylab.yale.edu/tmt)

###### [@YalePrivacyLab](https://twitter.com/YalePrivacyLab) | [privacylab@mastodon.social](https://mastodon.social/@privacylab)

###### Presented by Sean O'Brien

----

## Are you worried that your phone is listening to you?

## That it is tracking your movements?

----

### You are being tracked by your phone in some way.  This primer [guide] will help explain and offer some solutions.

----

###  Our phones are full of naughty apps.

----

### At Yale Privacy Lab, we help identify  mobile trackers, code that runs inside  apps without your knowledge or consent.

----

# What Are Trackers?

* We use the term **trackers** broadly, to encompass traditional advertisement surveillance, analytics, behavioral and location tracking, as well as _developer tools_ such as crash reporters.

* We're talking about trackers bundled for app developers as **Software Development Kits** (SDKs) though there are also other ways to track users.

----

# We also focus on proximity and location tracking.

### Trackers that use bluetooth and near-ultrasonic/ultrasonic signals are some of the worst examples.

----

# What About Apple?

We'll be talking about **[Android apps in Google Play](https://www.wired.com/story/android-users-to-avoid-malware-ditch-googles-app-store/)**.

Many of the same companies distributing Google Play apps **also distribute apps via Apple**, and tracker companies openly advertise SDKs compatible with multiple platforms.

Thus, advertising trackers may be concurrently packaged for Android **and iOS**, as well as more obscure mobile platforms.

----

# Digging Deep

* To really understand a specific app and privacy or security concerns, it takes **network analysis**.

* **App permissions** are a big indicator something might be wrong (RECORD_AUDIO etc.)

**Be careful accepting permissions when you install an app!**

----

### **We'll show you an easy way to detect tracker SDKs without needing to know anything about code, via the [εxodus platform](https://reports.exodus-privacy.eu.org).**

----

## reports.exodus-privacy.eu.org

##### εxodus scans Android apps in Google Play.

##### Anyone can scan an app via a slick [fancy] Web UI

----

# Detecting Tracker SDKs

* εxodus scanner does **static analysis** of Android APKs to find  signatures in embedded classes.

* Without εxodus, you can make educated guesses by looking at the **Android manifest** XML and classes* **DEX** files.

* Remember, there are legal restrictions on static analysis of iOS apps, but many of these apps also have trackers (more on that later).

----

[okay to leave this part out]

#### [Cory Doctorow](https://boingboing.net/2017/11/25/la-la-la-cant-hear-you.html) on the subject:

“iOS is DRM-locked and **it's a felony** – punishable by a 5-year prison sentence and a $500,000 fine for a first offense in the USA under DMCA 1201, and similar provisions of Article 6 of the EUCD in France where Exodus is located – to distribute tools that bypass this DRM, even for the essential work of discovering whether billions of people are at risk due to covert spying from the platform.

It's true that the US Copyright Office gave us a soon-to-expire exemption to this rule that started in 2016, but that exemption only allows Exodus to use that tool; **it doesn't allow Exodus to make that tool, or to distribute it so independent researchers can investigate iOS**.”

----

# εxodus Static Analysis

----

## Quick εxodus Stats

* 152 tracker signatures, 28,600 reports (Oct 1, 2018)
* 26,133 apps scanned, 400GB+ APK packages

----

## Tracker Profiles

##### [github.com/YalePrivacyLab/tracker-profiles](https://github.com/YalePrivacyLab/tracker-profiles)

##### Calling crash reporters like HockeyApp, Crashlytics "trackers" has been controversial, though they have advanced analytics features/options.

----

### Adding & Improving Tracker Profiles

* We are  updating profiles, adding new ones.
* We're correlating companies via [OpenCorporates](https://opencorporates.com/).

----

## We're looking for more contributors, and you can help us by contacting [Yale Privacy Lab](https://privacylab.yale.edu/people) directly or [finding us on github](https://github.com/YalePrivacyLab/tracker-profiles).

----

##### Mozilla has been guiding us via the Open Leaders Program and our mentor [Josefina Caro Magaña](https://twitter.com/PepaLisperguer) of [Beyond Activismo](https://beyondactivismo.org).

----

# Real-World Impact:

### Working on tracker profiles with us means you're contributing to software projects that protect privacy such as εxodus, F-Droid, Yalp Store, and our ultrasonic jammer apps.

----

### Our tracker profiles go upstream to these software projects.  Here are some examples.

----

## F-Droid Collaboration

##### [F-Droid Blog Dec 2017](https://f-droid.org/en/2017/12/14/new-collaborations-on-exposing-tracking.html)

----

# F-Droid Package Scanning

* AI/machine learning in the future?

* [LibScout](https://github.com/reddr/LibScout)

https://gitlab.com/fdroid/rfp/issues?label_name[]=trackers

----

## Free Software Projects

* Utilize εxodus API:
  - [εxodus CLI](https://github.com/Exodus-Privacy/exodus-standalone)
  - [εxodus Android app](https://github.com/Exodus-Privacy/exodus-android-app)
  - [εxodify browser addons](https://github.com/FacettsOpen/exodify)

* [PilferShush Android app](https://github.com/YalePrivacyLab/PilferShush_prod)
* [PiRanhaLysis](https://github.com/U039b/PiRogue) network interception/analysis (PiRogue, PiPrecious, Phorcys)

----

### Now that we understand static analysis and tracker SDKs, let's talk about physical methods that companies use to track us.

----

# Proximity Targeting

* Retailers are using **bluetooth** alongside **sonic** (near-ultrasonic/ultrasonic, 18kHz to 22kHz range) technology to track precise physical movements via **beacons**.

* The _de facto_ bluetooth beacon standard is **Apple iBeacon**, one of the first to market.

----

##### Signatures of sonic tracker SDKs [SilverPush](https://reports.exodus-privacy.eu.org/trackers/80/), [Alphonso](https://reports.exodus-privacy.eu.org/trackers/82/), [Lisnr](https://reports.exodus-privacy.eu.org/trackers/79/), [Shopkick](https://reports.exodus-privacy.eu.org/trackers/81/), [Fidzup](https://reports.exodus-privacy.eu.org/trackers/2/), and [Signal360](https://reports.exodus-privacy.eu.org/trackers/86/) can be detected by εxodus.  Their profiles are in our [github repository](https://github.com/YalePrivacyLab/tracker-profiles).

##### We're detecting new trackers that utilize these creepy methods often.  The latest is [CopSonic](https://www.copsonic.com/).

----

# Example Beacon Devices

##### Source: [https://en.wikipedia.org/wiki/IBeacon](https://en.wikipedia.org/wiki/IBeacon#/media/File:An_assortment_of_iBeacon_from_different_vendors.jpg)

----

## Important Caveats

* Beacons use a _combination_ of technologies and **may not require an SDK** on a target person's phone.

* Special beacon devices are not required. Sonic tracking can occur via **stadium/arena** (Lisnr, Signal360), **retail** (Shopkick, Fidzup), **TV** (Alphonso, SilverPush) speakers.

----

#### Example Sonic Tracking Signals

----

#### Sonic Tracking Signal: Closer Look

###### [Audio Sample, Macy's](https://soundcloud.com/city-frequencies/beacon-pitched-time-shifted)

###### [Much More Info from Cityfreqs](http://www.cityfreqs.com.au/pilfer.php)

----

# Sonic Tracking Is Not Sci-Fi

* [Frequency Shift Keying](https://www.sec.cs.tu-bs.de/pubs/2016-batmobile.pdf) is the primary method.

* Some sonic trackers are very basic ([Fidzup](https://patents.google.com/patent/FR3010821A1/fr)), others are complex ([Shopkick](https://soundcloud.com/city-frequencies/beacon-pitched-time-shifted)).

* [FTC warnings](https://www.ftc.gov/news-events/press-releases/2016/03/ftc-issues-warning-letters-app-developers-using-silverpush-code) were issued for app devs who were using SilverPush in 2016.

* Many Alphonso apps were pulled in December 2017 after a [_NYTimes_ story](https://www.nytimes.com/2017/12/28/business/media/alphonso-app-tracking.html).

----

#####  Researchers and journalists have shared their app lists/checksums with us. We've got lists of sonic tracking apps still in the wild.

##### If you are interested in learning more, we can share these and other details (copies of ultrasonic recordings etc.)

----

## Check out the following example of sonic tracking, via a demo video offered by a tracking company.

----

# Sonic Proximity Targeting

* Demo w/ smartphone: https://frama.link/fidvid01
* Video w/ signals:  https://frama.link/fidvid-tmt

----

## GDPR Warnings for Fidzup, Teemo

----

## With the help of our [PilferShush app](https://github.com/YalePrivacyLab/PilferShush_prod), developed by [Cityfreqs](http://www.cityfreqs.com.au/pilfer.php), we can successfully block these ultrasonic signals.

----

## **PilferShush**
#### Detects & Blocks Sonic Tracking Signals

https://github.com/YalePrivacyLab/PilferShush_prod

* Android app by Cityfreqs.

* Two versions. PilferShush Jammer is the friendlier one for blocking signals.

----

## Grab the **PilferShush**  Jammer

* Available in [F-Droid](https://fossdroid.com/a/pilfershush-jammer.html) & [Google Play](https://play.google.com/store/apps/details?id=cityfreqs.com.pilfershushjammer&hl=en_US)

----

### Beacons are a pervasive adversary to privacy in our physical world.

#### We can hunt for beacons that may be sending sonic and bluetooth signals.

----
# Beacon Hunting

On Android - [Beacon Locator](https://f-droid.org/en/packages/com.samebits.beacon.locator/), [iBeacon Detector](https://play.google.com/store/apps/details?id=youten.redo.ble.ibeacondetector&hl=en)

On iOS - [Locate Beacon](https://itunes.apple.com/us/app/locate-beacon/id738709014), [DIY method](http://www.beekn.net/2015/02/tutorial-making-smarter-ibeacon-detector-ios/)

* Sonic tracking is useful in some cases, but bluetooth is more dynamic and widespread.

----

## iBeacon Detected!

----

### Remember, you should turn off bluetooth on your devices by default, and  be careful about **both** microphone and bluetooth settings, as well as app permissions.

----

# "PiRogue" Raspberry Pi

## [Network Analysis via MITMproxy](https://www.youtube.com/watch?v=oIcrsuJcTPo)

----

#### Visualizing Network Data in Real-Time

## [PiRanhaLysis](https://piranhalysis.github.io/)
#### Mobile/IoT analysis suite

----

# Thank You!

* Mozilla Open Leaders and Josefina Caro Magaña
* Scott Shapiro, Laurin Weissinger, Jon Oronzo
* Rebecca Crootof, Jack Balkin, Mike Kwet, Yale ISP
* PiRanhaLysis and Exodus Privacy team
* City Frequencies
* Hans-Christoph Steiner and F-Droid team
* Eben Moglen and Danny Haidar, Freedombox Fndn
* Nathan Freitas, Guardian Project

================================================
FILE: trackers/AccountKit.md
================================================
# AccountKit

## About

AccountKit is a product of Facebook lets users quickly register/login to apps by using just their phone number or email address.  No password is needed. [Link to weblink](https://www.accountkit.com/faq/)

## Ownership

AccountKit is owned by Facebook (NASDAQ: FB). 

Note: there is an unaffiliated Australian Accounting firm of the same name.  

## [Exodus Detection Rules](https://exodus-privacy.eu.org)

* Code detection rule: com.facebook.accountkit
* Network detection rule: NC

## What it does

* User Verification
* Phone number collection
* Permits direct app logins without SMS code

## Data Policy

[Policy as of 8/9/2018:](https://www.facebook.com/privacy/explanation/)

* Identical to Facebook's Policy.  This provides controls for users to opt out but no actual commitment to reduce the collection and use of personal data.  

* Data will be used to "reasearch and innovate for social good", "promote satety, integrity and security", personalize advertising, communicate with users, and measure analytics for business services. 

* Third-party apps and websites integrated with Facebook and its products receive information on what users post and share. This "information collected by these third-party services is subject to their own terms and policies, not this one." 

* Facebook's policy states that it doesn't "sell any of your information to anyone and we never will." It imposes "strict restrictions" on how partners use and disclose the data it provides. 

* Information may be accessed, preserved, and shared with regulators, law enforcement, and others in response to legal requests (including those in outside jurisdictions if there is a "good faith belief" they're required to respond), prevention of fraud, unauthorized use of products or services, breaches of Terms or Policies, to prevent harm to Facebook or its property, and harmful or illegal activity.  

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Actv8.md
================================================
# Tracker Name
Actv8

# In εxodus?
No

## Website
http://actv8me.com/

## About
Drive user engagement and inspire transactions. A turnkey platform that connects media with mobile commerce.


## Category
Advertising, Location, Identity, Tracking, Beacons

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `actv8technologies.com`
*   Code signature: `me.actv8`

## Repositories
*   Maven: `https://mvnrepository.com/artifact/me.actv8.core/actv8-sdk`
*   Artifact ID: `actv8-sdk`
*   Group ID: `me.actv8.core`

## Gradle
`xxx`

## Additional links
https://api-production-v4.actv8technologies.com/ , http://sonar.actv8technologies.com/fdb/

## Notes
relies on Cifrasoft, maven repo may be outdated


================================================
FILE: trackers/Ad4Screen.md
================================================
# Ad4Screen

## Primary Location
France (Paris). [Crunchbase, 01](https://www.crunchbase.com/organization/ad4screen)

## Website
[http://www.ad4screen.com](http://www.ad4screen.com)

## About
Ad4Screen is "a marketing and advertising pioneer on Mobile Net (Smartphones, Tablets...)".  They help companies "to set up performant Mobile advertising campaigns and to increase App User engagement, retention and conversion." [Ad4Screen, 02](http://www.ad4screen.com/en/presentation)

## Ownership
Ad4Screen

## [Exodus Detection Rules](https://exodus-privacy.eu.org)

* `ad4screen`
* `a4\.tl`
* `app4free`
* `accengage\.com`

## Documentation
Via Accengage [https://docs.accengage.com/display/AND/Integration](https://docs.accengage.com/display/AND/Integration)

## Products and Services

Ad4Screen advises clients on "the best possible strategy to limit your risks and we manage, for you, the establishment and management of your campaigns from A to Z!" (translated from French) [Ad4Screen, 03](http://www.ad4screen.com/publicite-mobile).

### Products and Services for Mobile Advertising
Branding Campaign / Promote Mobile Sites / Promote Mobile Apps / Mobile RTB / Mobile Tracking / App Store Optimization / Event Driven Strategy (Drive In-Store) [Ad4Screen, 01](http://www.ad4screen.com/en), [Ad4Screen, 02](http://www.ad4screen.com/en/presentation)  

_Branding Campaigns:_ "The best sites & APPS available; Many available targeting criteria’s (socio-demographics…); Geo-target campaigns; Thematic packages (CSP+, Media, Finance, Sports...); Innovative formats (interstial ads, rich media, videos…)  

_Promoting Mobile Sites:_ "Thanks to Mobile advertising key results, Ad4Screen enables you to harness the power of your brand, generate more traffic, leads (CPL) and sales on your Mobile Sites and Tablets. Often the gap between click and real visits might be significantly important. With the objective to maximize performance, Ad4Screen guarantees an effective Cost Per Visit (CPV)."    

Display / Rich Media / Videos: "Our Ad Hoc Experts select the best formats, supports, publishers and Ad-Exchanges in the marketplace in order to efficiently enhance the key advantages and offers of your Mobile Sites and Tablets."    

Facebook & Twitter campaigns: "Our teams are Experts in setting up specific mobile campaigns on Facebook and Twitter. Share high visibility and drive a Performance Business Model forward! Many available targeting criteria specific for Mobile and for each specific plateform. Ensure an Ongoing Performance"  

_Promote Mobile Apps:_ "Thanks to Mobile advertising, Ad4Screen helps you to enhance your brand reputation, gain in-depth visibility and increase your volume of APP downloads. Ad4Screen’s specific business goal lies on the guarantee to capture a growing share of Cost Per Download (CPD)." Display / Videos: "Our Experts select the market’s best set of formats, supports and well known players in the market in order to empower your Mobile APP or Tablet, whether iOS or Android.   
   
  * Traditional formats: banners, interstitials
  * Banners, interstitials HTML5   
  * Interstitials videos   
  * Pre-roll videos   
  * Geolocalisation   
  * Native Formats (referring to Facebook, Viadeo, Twitter).    

Facebook & Twitter App install campaigns: "Our teams are Experts on monitoring Facebook and Twitter campaigns on Mobile. (Mobile Ad Formats exclusively designed to install; Share high exposure and drive a Performance Model forward; Many targeting & optimization criteria; Possibility to track APP installs). Search: "All Queries made on Google from Smartphones and Tablets are explode! It is today’s business imperative to benefit from Search Query Data to obtain high quality users. Our Operations Team is in charge of your Mobile Adwords campaigns from beginning to end.   

  * Buy with CPC   
  * Double Click Download  
  * Track In-APP conversion with keywords  

_Mobile RTB Insights:_ "Our Media Buying & Planning team uses the best next generation Mobile technologies (DSP) in order to program Mobile RTB campaigns. We work with the main 100% Mobile Ad-Exchanges in the market (MoPub, Flurry, Smaato, La Place Média…).  

  * Gain wide access to apps ad inventory (80% ad impressions & non available on Web AdEx)  
  * Use conversion tracking to see in-app activity  
  * Leverage intelligent algorithms in real time based on in-app conversion  
  * Communicating to the best with digital savvy shoppers  
  * Identify your look-alike best prospects  
  * Invite your Mobile Site Visitors to download your APP")  

_Mobile Tracking:_ "Our main concern is to accurately follow conversion on mobile acquisition campaigns to overall revenue. Our ad hoc experts group has the know-how for the best acquisitions and tracking plateforms in the right private marketplaces.    

  * Track where your users come from (lever, design, adWord...)  
  * Analyse and compare specific conversion rates per sources, operating systems, countries, segments…  
  * Track how your users interact with your app  
  * Improve overall ROI by our Experts  

_App Store Optimization:_ "Benefit from our Trends Report to optimize your organic SEO on App Store."  

  * Optimize your ranking on Google Play and iTunes  
  * Improve your APP Ranking in your own category  
  * Create strong viral effects (Earned media)  
  * Generate an increase on your organic installs from 10% to 40% per day!"  

_Event Driven Strategy:_ "For today’s consumer, Mobile has become the ultimate Digital Shopping Tool. Ad4Screen Operations Team helps you generate more Drive In-Store traffic and positively impact on sales conversion.
We use the most pertinent Marketing Drive In-Store Tools:  

  * Mobile Retargeting
  * Push Notification
  * GeoTargeted Mobile Advertising
  * iBeacon, Geofencing, QR Code...

Ad4Screen implements contest specific rules:

  * Instant Win Games
  * Sweepstake
  * In-APP & Mobile Web animations  [Ad4Screen, 05](http://www.ad4screen.com/en/mobile-advertising)

### Products and Services for Mobile CRM
Push Notifications / Customer Loyalty Programs (Relationship Programs) / Mobile Retargeting / Email Responsive (Responsive Email Templates) / Mobile Couponing (Mobile Email Tag) / Passbook [Ad4Screen, 01](http://www.ad4screen.com/en), [Ad4Screen, 02](http://www.ad4screen.com/en/presentation)

_Support:_ Sales Team / Advisory Board / Mobile CRM Experts / Media Buying & Planning / IT Team / Data Mining Team / Support Team   

_Sales Team:_ "We analyze with you all your requirements and needs to create adapted and breakthrough projects maximizing your ROI."  

_Advisory Board:_ "The Advisory Services Team covers App Store SEO, ROI Optimization, International Acquisition Campaigns Management…"  

_Mobile CRM Experts:_ "Our team of experts will support you with setting up Customer Loyalty Programs."  

_Media Buying & Planning_: "We will identify the best traffic sources, getting the best price (CPC, CPL, CPV, CPD...)."  

_IT Team:_ "We choose next generation Mobile Marketing technologies, at the cutting-edge of innovation."  

_Data Mining Team:_ "We manage the extraction, integration and analysis of large volumes of DATA to optimize your targeting."  

_Support Team:_ "We are here to help you planning, implementing SDK, training, preserving, updating..." [Ad4Screen, 02](http://www.ad4screen.com/en/presentation)  

* (translated from French:) "Our Experts select the best formats, supports, boards and Ad-Exchanges of the market to effectively highlight the benefits and offers of your mobile site and / or tablet." [Ad4Screen, 03](http://www.ad4screen.com/publicite-mobile)

Ad4Screen also helps clients set up trigger marketing campaigns [Ad4Screen, 01](http://www.ad4screen.com/en).

## Privacy Policy
Ad4Screen does not appear to list a privacy policy for End Users; see [Ad4Screen, 07](http://www.ad4screen.com/en/privacy-police).

## Relationships
Add4Screen lists 200 customers and 5,000 mobile campaigns [Ad4Screen, 02](http://www.ad4screen.com/en/presentation)

_"They Trust Us":_ Betclic / Bouyges Telecom / Europcar / SFR / numericable / ebookers / La Tribune / Le Figaro / Universal Music / Axa / Airfrance KLM / Danone / Saxo Banque / Capcom / Cadremploi.fr / nexity / pole emploi / Rocket Internet / Condé Nast / Nestle / vente-privee.com / Pages Jaunes / Groupe Casino / Voyages-sncf.com / The Walt Disney Company / Price Minister (Rakuten Group) / Club Med / Century 21 / TF1 / Monoprix / keljob.com / kobojo / Explorimmo / easyflirt / Le Monde / LA Tribune / La Redoute / Malakoff-Médéric / Le PointNathan / Radio France / Orange S.A. (ex France Télécom S.A.) / Pôle emploi (government agency for unemployed) [Ad4Screen, 02](http://www.ad4screen.com/en/presentation), [Ad4Screen, 05](http://www.ad4screen.com/en/mobile-advertising)  OTC Agregator [Ad4Screen, 01](http://www.ad4screen.com/en), [Ad4Screen, 04](http://www.ad4screen.com/en/nos-references)  

_Mobile First Alliance:_ In 2014, Ad4Screen "split its activities into two separate and independent companies", Accengage and Ad4Screen. Accengage offers a Mobile CRM technology while Ad4Screen specializes in "mobile media buying and mobile relationship marketing consulting". The Mobile First Alliance was formed thereafter, composed of three companies: Accengage, Ad4Screen, and Relatia. (Quotes are translated from French.) [Marketing web mobile, 01](http://marketing-webmobile.fr/2014/09/ad4screen-separe-ses-activites-dediteur-de-logiciels-de-mobile-crm-et-dagence-de-publicite-mobile).

## Details
_Financial details:_ Ad4Screen was founded in 2010 and has raised $10 million [Ad4Screen, 02](http://www.ad4screen.com/en/presentation); [Crunchbase, 01](https://www.crunchbase.com/organization/ad4screen). They were crowdfunded by OTC Agregator, a big French Insurance Company (MMA) and Web contractors (Business Interactive Founders as WCube, Betclic, Boncoin or Poweo) [Ad4Screen, 02](http://www.ad4screen.com/en/presentation).

_Devices:_ Mobile and tablet media; iOS and Android [Ad4Screen, 03](http://www.ad4screen.com/publicite-mobile); works with iBeacons [Ad4Screen, 07](http://www.ad4screen.com/ibeacon).

### Methods
Retargeting / Push Notifications / GeoTargeted Mobile Advertising / iBeacon, Geofencing, QR Code / Mobile tracking (including across apps) / Conversion tracking (including intelligent algorithms for in-app conversion)    

_Mobile Push Notification & In-app Message:_  "Do you have a smartphone app? Benefit from push notification, the new and efficient communication channel to interact with your app visitors. Communicate in real time, by sending the right message, to the right person, at the right time toward the right place inside the app. Our CRM Mobile Experts help you build customer loyalty programs in order to create more proximity and engagement with your app users."  

_Customer Loyalty Programs:_ "Ad4Screen enables you to set up a True Value added customer loyalty programs with your savvy shoppers to dialog with them at each touchpoint of their life cycle.  

  * Set up trigger marketing scenarios (send fully automated follow-ups according to mobile user behavior)"  
  * Display a welcome message at first open  
  * Send out alerq messages tbox messages in an application’s life-cycle (last update, error messages, news feed…)  
  * Send out good deals to capture a growing share of revenue  
  * Reactive abandoned shopping carts    

_Mobile Retargeting:_ "2 retargeting methods roll into action to retarget your digital device users:  

  * From opt-in to push notification, mobile users are identified by Ad4Screen as having abandoned their shopping cart and reminded via customized push notifications  
  * No opt-in to push are retargeted in a display mode through targeted customized banners and interstitials    

_Responsive Email:_ "Ad4Screen delivers a Customer Seamless Experience to read your newsletter on Smartphone by displaying the email according to the device used by the user.  

Net benefits with responsive email:  

  * Email designed according to the screen size of the device  
  * Make it easier to read and interact with your current and prospective customers    
  * Optimize Click-Through-Rates (Click-to-Open Rates, Click Conversation Rates)  
  * Yield a significant ROI  

_Mobile Email Tag:_ "Discover belong your subscribers who read your newsletters from a smartphone and display them in real time a bespoke banner offering to download your app.  

Net benefits with Mobile Email Tag:  

  * Redefine smartphone users to individual profile  
  * Complete mobile user’s status  
  * Enrich profiles according to the device used  
  * Drive more traffic and generate high quality installs!  

_Passbook:_ "Thanks to Ad4Screen, discover Passbook and boost your in-store traffic. The application is able to stock reward cards, ad spend coupons and other tickets. With Passbook you can:

  * Dematerialize your loyalty reward cards, ad spend coupons, tickets… without the need to develop an app dedicate for it  
  * Generate in-store traffic by sending a relevant message or a push based on user’s location  
  * Plan specific events and remind them the last discount day  
  * Recommend to install your iPhone app  [Ad4Screen, 06](http://www.ad4screen.com/en/push-notifications)

## References
* Ad4Screen, 01. [http://www.ad4screen.com/en](http://www.ad4screen.com/en)  
* Ad4Screen, 02. [http://www.ad4screen.com/en/presentation](http://www.ad4screen.com/en/presentation)  
* Ad4Screen, 03. [http://www.ad4screen.com/publicite-mobile](http://www.ad4screen.com/publicite-mobile)  
* Ad4Screen, 04. [http://www.ad4screen.com/en/nos-references](http://www.ad4screen.com/en/nos-references)  
* Ad4Screen, 05. [http://www.ad4screen.com/en/mobile-advertising](http://www.ad4screen.com/en/mobile-advertising)  
* Ad4Screen, 06. [http://www.ad4screen.com/en/push-notifications](http://www.ad4screen.com/en/push-notifications)  
* Ad4Screen, 07. [http://www.ad4screen.com/ibeacon](http://www.ad4screen.com/ibeacon)
* Crunchbase, 01. [https://www.crunchbase.com/organization/ad4screen](https://www.crunchbase.com/organization/ad4screen)  
* Marketing Web Mobile, 01. [http://marketing-webmobile.fr/2014/09/ad4screen-separe-ses-activites-dediteur-de-logiciels-de-mobile-crm-et-dagence-de-publicite-mobile](http://marketing-webmobile.fr/2014/09/ad4screen-separe-ses-activites-dediteur-de-logiciels-de-mobile-crm-et-dagence-de-publicite-mobile)

## External links
* _Crunchbase (Ad4Screen)_: [https://www.crunchbase.com/organization/ad4screen](https://www.crunchbase.com/organization/ad4screen)  
* _AppBrain_: [https://www.appbrain.com/dev/AD4Screen/](https://archive.is/SgBjU)

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Amplitude.md
================================================
# Amplitude

## About

Amplitude, Inc. is a product analytics and data analysis company. It serves over 26,000 companies globally.  It is headquartered in San Francisco, CA, and has approximately 200-501 employees.  [See also: OpenCorporates](https://opencorporates.com/companies/us_de/5072121) 
 
Amplitude's clients include Microsoft, PayPal, Capital One, Adidas, Patreon, Instacart, Calm, Change.org, HubSpot, DropBox, Autodesk, DoorDash, Yik Yak, Nokia, and many others.  


## Ownership

Amplitude is a private company founded in 2012 by Spencer Skates, Curtis Liu, and Jeffrey Wang. Investors include Benchmark, Battery Ventures, Institutional Venture Partners, and Sequoia Capital. 


## [Exodus Detection Rules](https://exodus-privacy.eu.org)

* Code detection rule: com.amplitude.
* Network detection rule: api.amplitude.com | amplitude.com

## What it does

* Behavioral Analytics
* Market Research Platform
* User Activity, Retention Tracking / Data Processing

## Privacy Policy

[Policy as of 24/5/2018, reviewed 6/5/2019:](https://amplitude.com/privacy)

* Amplitude's privacy policy does not apply to end users, only website users and its clients.

* End Users do not have opt-out rights.  Amplitude states that it functions as a data processor, and the "collection of Customer End User Data through Customer Applications is governed by our Customers’ privacy policies." 

* Users who would like to access or delete their data would contact Amplitude's clients directly.  No list is provided.  

* Devices are tracked using a vendor-specific identifier ("IDFV").  For more information, see how it [tracks unique users.](https://amplitude.zendesk.com/hc/en-us/articles/115003135607-Tracking-Unique-Users) 

## Related Links

For a breakdown of Amplitude's analytics platform, please [see this link.](https://practicoanalytics.com/definitive-guide-amplitude-analytics/)  

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/AppNexus.md
================================================
# AppNexus

## Primary Location
United States (New York City) [Bloomberg, 01](https://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=48973441)

## Website
[https://www.appnexus.com](https://www.appnexus.com)

## About
AppNexus offers services for auction-based and directly negotiated media campaigns across the Internet. According to CEO Brian O'Kelley, "the AppNexus platform" is "a single point where all key stakeholders in our ecosystem -- marketers, ad networks, demand side platforms (DSPs), agency networks, exchanges, inventory aggregators, third party data providers, and more -- connect with one another through a powerful technology platform" [PR Newswire, 01](https://www.prnewswire.com/news-releases/appnexus-officially-launches-ad-platform-fueling-the-real-time-bidding-revolution-in-display-advertising-87460287.html).

## Ownership
AppNexus

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
* `adnxs\.com`

## Documentation
[https://wiki.appnexus.com/display/sdk/Integrate+the+SDK](https://wiki.appnexus.com/display/sdk/Integrate+the+SDK)

## Products and Services
For publishers:

* Segments audiences
* Uses data analytics to predict delivery risk (ie, delivery of ads)
* Connects ads across devices
* Run bidding ad processes [AppsNexus, 01](https://www.appnexus.com/en/publishers)

For advertisers:

* Harnesses machine learning for "targeted ads to tens of millions of users, spread out across billions of interconnected devices, all over the world"
* Real-time data solutions
* Services are used to "deliver intelligent and customized campaigns to hundreds of millions of consumers each day"
* Provide over 100 data points at the (consumer) impression level [AppNexus, 02](https://www.appnexus.com/en/buyers)
* 10 billion impressions transactions each day [AppNexus, 03](https://www.appnexus.com/en)

## Privacy Policy
_Data use and sharing:_ "The AppNexus Platform allows clients to collect and use Platform data. The Platform ingests information provided by third-party sources to allow clients to use such data to target ads. To do this, clients and data providers may use ID synching to enable the use of this information through the Platform."  

"... The Platform enables AppNexus's clients to collect, buy, and sell data and to use Platform Data to buy and sell online advertising. Sometime AppNexus staff give "hands-on" help to clients using the Platform for these purposes, for example by configuring advertising campaigns for clients to best meet their objectives."

"... The AppNexus Platform allows clients to provide and share Platform Data with each other.  Clients also have access to their Platform Data that they collect, acquire, or use on the Platform, and may remove it from the Platform for their own use. AppNexus may provide Platform Data to service providers in order to provide, operate, manage, maintain, and enhance AppNexus' services. AppNexus may provide, or enable others to collect, information for purposes of protecting the safety and security of the online ecosystem, including to detect and prevent malicious activity or fake traffic.  AppNexus may also disclose such information in the event we reasonably suspect malicious activity or fake traffic or when we reasonably believe it is required by law, subpoena or other legal process, including to meet national security or law enforcement requirements. AppNexus may also share aggregated data derived from the Platform, including, for example, statistics about Platform activity. Finally, we may transfer Platform Data to a successor entity in connection with a corporate merger, consolidation, sale of assets, bankruptcy, or other corporate change."

_Precise location data collection:_ "The Platform may ingest Precise Location Information when, for example, an app makes such information available through the Platform."  

_PII:_ "AppNexus does not collect, use, or allow its clients to transfer to or use on the Platform, data that, by itself, directly identifies an individual, such as name, address, phone number, email address, or government identifier. We also prohibit certain categories of sensitive data from being collected, used, or transferred on the Platform."  

_Opt-Out:_ In browsers, AppNexus offers an opt-out web browser cookie to opt out of interest-based advertising. On mobile, AppNexus lists an opt-out option through general device settings in Android and iOS. In Android, the setting is "Opt out of Interest-Based Ads". To stop location collection, AppNexus tells users to either change the preferences on their device or adjust settings in individual apps.  

_Data Retention:_ AppNexus retains data according to "industry standards". "Platform Data is stored using generally accepted security standards. It is usually aggregated or deleted within 30-60 days, but may be retained in the Platform for up to 18 months from the date of collection before aggregation or deletion. Aggregated data is used for reporting and analysis, and may be stored in the Platform for up to 2 additional years. When clients remove their data from the Platform, their storage and retention of data is governed by their own privacy policies and applicable laws, rules, or regulations."

_Regulation:_ AppNexus supports industry self-regulation, and is "a member in good standing of the Network Advertising Initiative (NAI), and adheres to the NAI Code of Conduct for Web and Mobile" [AppNexus, 04](https://www.appnexus.com/en/company/platform-privacy-policy#choices). 

## Relationships
_Clients:_ Affiperf / Air France / Hearst / MEDIA.figaro / The Guardian / Wayfair [AppNexus, 03](https://www.appnexus.com/en) / Underdog Media / Liftoff / Advance Digital / USA Today / Xaxis / Accuen / Bloomberg / Defy Media / Dow Jones / Spectrum Platform Company / District M / BannerConnect / Hitch Digital / ESPN / Fox News / Saavn [AppNexus, 05](https://www.appnexus.com/en/customer-stories)

## Details
_History:_ AppNexus is "Founded and managed by the pioneers of the Web's original and most successful ad exchanges at Yahoo!'s Right Media and Google's DoubleClick" [PR Newswire, 01](https://www.prnewswire.com/news-releases/appnexus-officially-launches-ad-platform-fueling-the-real-time-bidding-revolution-in-display-advertising-87460287.html). AppNexus claims to be "The world's largest independent digital marketplace" [AppsNexus, 01](https://www.appnexus.com/en/publishers). 

_Collection Methods:_ "The Platform uses cookies, beacons, tags, mobile SDKs, and in some cases non-cookie technologies, to collect Platform Data associated with particular web browsers or devices" [AppNexus, 04](https://www.appnexus.com/en/company/platform-privacy-policy#choices).

_AppNexus Platform Data Uses:_

* Interest-based advertising (To opt out of interest-based advertising on the Platform, go to the "What are your choices?" section below.)
* Limiting the number of times a user sees a particular ad
* Showing ads in a particular sequence
* Customizing ads to a particular location
* Showing ads related to the content of the web page on which they are shown
* Determining how users respond to ads
* Reporting aggregated statistics regarding, for example, the effectiveness of online advertising campaigns
* The Platform may use Platform Data for cross-device mapping in order to serve or measure advertising on related devices on behalf of our clients
* Typically, companies using technology like the AppNexus Platform own the data that they provide to and get from the Platform. While the AppNexus Platform is designed to use only certain types of data, and Platform clients are prohibited from bringing data onto the Platform that directly identifies an individual, when clients remove their data from the Platform, their use of that data is governed by their own privacy policies and applicable laws, rules, or regulations [AppNexus, 04](https://www.appnexus.com/en/company/platform-privacy-policy#choices).

## References
* _AppNexus, 01_. [https://www.appnexus.com/en/publishers](https://www.appnexus.com/en/publishers)  
* _AppNexus, 02_. [https://www.appnexus.com/en/buyers](https://www.appnexus.com/en/buyers)  
* _AppNexus, 03_. [https://www.appnexus.com/en](https://www.appnexus.com/en)  
* _AppNexus, 04_. [https://www.appnexus.com/en/company/platform-privacy-policy#choices](https://www.appnexus.com/en/company/platform-privacy-policy#choices)  
* _AppNexus, 05_. [https://www.appnexus.com/en/customer-stories](https://www.appnexus.com/en/customer-stories)  
* _Bloomberg, 01_. [https://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=48973441](https://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=48973441)  
* _PR Newswire, 01_. [https://www.prnewswire.com/news-releases/appnexus-officially-launches-ad-platform-fueling-the-real-time-bidding-revolution-in-display-advertising-87460287.html](https://www.prnewswire.com/news-releases/appnexus-officially-launches-ad-platform-fueling-the-real-time-bidding-revolution-in-display-advertising-87460287.html)

## External Links
* _Wikipedia (AppNexus)_: [https://en.wikipedia.org/wiki/AppNexus](https://en.wikipedia.org/wiki/AppNexus)
* _AppBrain_: [https://www.appbrain.com/dev/AppNexus/](https://archive.is/rI5Hu)

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Appodeal.md
================================================
# Tracker Name
Appodeal

## Website
https://www.appodeal.com/

## About
A Full Stack Ad Monetization Platform. Take full control of your monetization strategy with Appodeal’s complete suite of tools.


## Category
Analyitics, Location, Advertising, Identity

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `xxx.com`
*   Code signature: `com.appodeal.ads`

## Repositories
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xxx`

## Gradle
`xxx`

## Additional links
https://s3.amazonaws.com/appodeal-unity/

## Notes
Appodeal supports iOS, Android, and Amazon devices. Unity3D and Corona Labs.


================================================
FILE: trackers/AppsFlyer.md
================================================
# AppsFlyer

## Primary Location
Israel (Herzliya)

## Website
[https://www.appsflyer.com](https://www.appsflyer.com)

## About
A mobile & attribution analytics platform that aims to help marketers make better decisions [AppsFlyer, 01](https://www.appsflyer.com)

## Ownership
AppsFlyer

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
* `appsflyer\.com`

## Documentation
[https://support.appsflyer.com/hc/en-us/articles/207032126-AppsFlyer-SDK-Integration-Android](https://support.appsflyer.com/hc/en-us/articles/207032126-AppsFlyer-SDK-Integration-Android)

## Products and Services
AppsFlyer provides the following services: 

* Fraud prevention, malware protection [AppsFlyer, 04](https://www.appsflyer.com/product/protect360)
* Identity attribution services. AppsFlyer fingerprints devices by their IDs and tracks across datasets (to solve the problem of fragmentation across devices). This works with all Windows 10 devices (including mobile), Android, and iOS [AppsFlyer, 03](https://www.appsflyer.com/product/mobile-attribution-for-user-acquisition).
* Mobile services for targeted advertising [AppsFlyer, 05](https://www.appsflyer.com/product/mobile-ecosystem)
* Marketing across devices and channels [AppsFlyer, 06](https://www.appsflyer.com/product/marketing-analytics)
* Generates reports based on user behavior [AppsFlyer, 06](https://www.appsflyer.com/product/marketing-analytics)
* Tracks which users install apps; tracks successful re-targeting marketing campaigns [AppsFlyer, 07](https://www.appsflyer.com/product/overview)

AppsFlyer uses artificial intelligence and machine learning for big data analytics [AppsFlyer, 04](https://www.appsflyer.com/product/protect360); [VentureBeat, 01](https://venturebeat.com/2017/05/25/appsflyer-helps-mobile-advertisers-beat-back-ad-fraud-via-machine-learning).

## Privacy Policy
_Third Parties:_ AppsFlyer states it does not sell data to third parties [AppsFlyer, 02](https://www.appsflyer.com/we-are-appsflyer)

## Relationships
Over 2,000 network and analytics partners have integrated with AppsFlyer.

_Investors include:_ Goldman Sachs / Deutsche Telekom / Qumra Capital / Magma Venture Partners / Pitango [AppsFlyer, 02](https://www.appsflyer.com/we-are-appsflyer)  

_Partners:_ Google [Google, 01](https://adwords.googleblog.com/2015/05/new-media-partnerships-and-ad-solutions.html); [TechCrunch, 02](https://techcrunch.com/2015/05/28/google-expands-its-app-promotion-business-with-universal-app-campaigns-and-new-media-partnerships) / Snap / Tencent / HBO / Playtika / Waze / Alibaba / Kayak / Activision [VentureBeat, 01](https://venturebeat.com/2017/05/25/appsflyer-helps-mobile-advertisers-beat-back-ad-fraud-via-machine-learning) / Facebook / Twitter / Accuweather / AdlQuity/Flipkart / Bing Search / Pandora / Opera Software / Ad4Screen / Cooladata / Fiksu / EveryAds / Nanigans / Fyber / HeyZap / Tapjoy / Adroll / Flurry / GameAnalytics / Jampp / Inmobi / Appnexus / Vserv / AppLovin / Vungle / URX / Mobvista / Inneractive / Aarki / Bidalgo / Avazu / Taptica / NativeX / AirPush / Amobee / PlayHaven / Mobilecore / Accesstrade / ADS / ADSNative / Ad County Media / AccordantMedia / Ad2games / Ad2iction / Abakus / APUS / ADyes / Accruo / AID / Aarki / Ad4Game / APPROUND MOBILE / AML / APPSILON / ART DMP / ActionAds / APPAniac / ADvantage / AdBuddiz / ADRW / ADXMI Exchange / ADSAXIS / APPAVE / AVH digital / Actionpay / Ad2Click / ART Ad Platform / ASB / Ad2c / ADPRESSO / Ad@m (kakao) / ADZ JUNCTION MEDIA / ADVERTISE.RU / Ad County / AWIN / Adbird / AdCorsa / Adamas / Adbert / AdReady / Adbrain / Adacts / AdChakra / AdCare / Adattract / AdTiming / AdWyze / AdTen / Adboosters / Adara / AdDeals / Adblender / AdView / AdTiger / AdFit / AdTriba / AdPacker / and many more. For a longer list, see [AppsFlyer, 03](https://www.appsflyer.com/partners)

## Details
### Financial details & history 
AppsFlyer received early seed funding from Microsoft Accelerator and Magma Venture Partners [CrunchBase, 01](https://www.crunchbase.com/funding_round/appsflyer-seed--4b06b119). As of November 2017, AppsFlyer's website lists $84M raised from Top VC's, $6B+ annual mobile ad spend measured, 3k+ mobile tech partners, and 13 global offices (and growing) [AppsFlyer, 02](https://www.appsflyer.com/we-are-appsflyer).

### Scope
According to VentureBeat, AppsFlyer leverages metadata from 98% of the world's mobile devices [VentureBeat, 01](https://venturebeat.com/2017/05/25/appsflyer-helps-mobile-advertisers-beat-back-ad-fraud-via-machine-learning).

### Devices
The AppsFlyer SDK is available for Android, iPhone, and Windows Phone

## References
* _AppsFlyer, 01_. [https://www.appsflyer.com](https://www.appsflyer.com)  
* _AppsFlyer, 02_. [https://www.appsflyer.com/we-are-appsflyer](https://www.appsflyer.com/we-are-appsflyer)  
* _AppsFlyer, 03_. [https://www.appsflyer.com/partners](https://www.appsflyer.com/partners)  
* _AppsFlyer, 04_. [https://www.appsflyer.com/product/protect360](https://www.appsflyer.com/product/protect360)  
* _AppsFlyer, 05_. [https://www.appsflyer.com/product/mobile-ecosystem](https://www.appsflyer.com/product/mobile-ecosystem)  
* _AppsFlyer, 06_. [https://www.appsflyer.com/product/marketing-analytics](https://www.appsflyer.com/product/marketing-analytics)  
* _AppsFlyer, 07_. [https://www.appsflyer.com/product/overview](https://www.appsflyer.com/product/overview)
* _CrunchBase, 01_. [https://www.crunchbase.com/funding_round/appsflyer-seed--4b06b119](https://www.crunchbase.com/funding_round/appsflyer-seed--4b06b119)  
* _Google, 01_. [https://adwords.googleblog.com/2015/05/new-media-partnerships-and-ad-solutions.html](https://adwords.googleblog.com/2015/05/new-media-partnerships-and-ad-solutions.html)  
* _TechCrunch, 02_. [https://techcrunch.com/2015/05/28/google-expands-its-app-promotion-business-with-universal-app-campaigns-and-new-media-partnerships](https://techcrunch.com/2015/05/28/google-expands-its-app-promotion-business-with-universal-app-campaigns-and-new-media-partnerships)
* _VentureBeat, 01_. [https://venturebeat.com/2017/05/25/appsflyer-helps-mobile-advertisers-beat-back-ad-fraud-via-machine-learning](https://venturebeat.com/2017/05/25/appsflyer-helps-mobile-advertisers-beat-back-ad-fraud-via-machine-learning)

## External Links
* _Wikipedia (AppsFlyer)_: [https://en.wikipedia.org/wiki/AppsFlyer](https://en.wikipedia.org/wiki/AppsFlyer)
* _AppBrain_: [https://www.appbrain.com/app/appsflyer-sdk-integration-test/com.appsflyer.referrerSender](https://archive.is/ufCAR)

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Auditude.md
================================================
# Tracker Name
Auditude

# In εxodus?
No

## Website
https://www.adobe.com/privacy/policies/auditude.html

## About
The Adobe® Auditude® platform is used by companies that want to provide relevant content and advertisements in videos you watch on the web.


## Category
Advertising, Location, Identity, Tracking

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `auditude.com`
*   Code signature: `com.auditude.ads`

## Repositories
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xxx`

## Gradle
`xxx`

## Additional links
http://ad.auditude.com/adserver/e?type=playererror , theplatform.com 

## Notes
Legacy, superceded by Adobe Primetime

================================================
FILE: trackers/Axwave.md
================================================
# Tracker Name
Axwave

# In εxodus?
No

## Website
http://www.axwave.com/

## About
Axwave's portable ACR technology  monitors content occurrences across Live TV, DVR, On Demand, OTT, Radio and TV Ads. The world-class ACR algorithms use single small digital fingerprints to identify media in a nimbly way, both in and out of home, against a proprietary content database (the largest in the industry):


## Category
Location, Tracking, Audio, Advertising

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `axwave.com`
*   Code signature: `com.axwave`

## Repositories
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xxx`

## Gradle
`xxx`

## Additional links
https://api-sdk.axwave.in/ - PORT = 21
https://sdk-panelist.axwave.com

## Notes


================================================
FILE: trackers/BeatgridMedia.md
================================================
# Tracker Name
Beatgrid Media

# In εxodus?
No

## Website
http://www.beatgridmedia.com/

## About
Broadcast monitoring and person-based cross-media audience data at scale, through a new Automatic Content Recognition technology. Our apps measure actual TV, video, radio, OOH reach and campaign effectiveness to increase ROI.


## Category
Location, Tracking, Audio

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `beatgrid.net`
*   Code signature: `com.beatgridmedia`

## Repositories
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xxx`

## Gradle
`xxx`

## Additional links
location services provider: bluedot.com.au
https://www.mediarewards.co/
https://panelsync2.beatgrid.net
(https://panelsync2-%s.beatgrid.net", new Object[]{Locale.getDefault().getCountry().toLowerCase())

## Notes


================================================
FILE: trackers/BlueConic.md
================================================
# BlueConic

## About

BlueConic, Inc. is a privately-held e-marketing company that sells targeted advertising through marketing management systems, or CDPs (Customer Data Platforms).  The company has 50-100 employees and is headquartered in Boston, MA with a European office in Nijmegen, The Netherlands. [For more information, see OpenCorporates.](https://opencorporates.com/companies/us_ma/001126438)

BlueConic's customers include the Boston Globe, Hearst Newspapers, Moen, T-Mobile, ING, America's Test Kitchen, and the American Kennel Club.  [Source: website](https://www.blueconic.com/about/)

## Ownership

BlueConic was founded by Bart Heilbron and Martjin van Berkum in 2010. [Source: website](https://www.blueconic.com/about/)

## [Exodus Detection Rules](https://exodus-privacy.eu.org)

* Code detection rule: com.blueconic
* Network detection rule: NC

## What it does

* Behavioral Analytics
* Customer Data Platform (CDP) Marketing Management Systems
* Targeted Advertising/Personalization

## Privacy Policy

[Policy as of 1/11/2018, last updated 1/11/2017:](https://www.blueconic.com/privacy-policy/)

* BlueConic's privacy policy applies to both its website and its services platform. It is not clear to what extent end users have rights under the policy separate from clients.

* Personal data is not defined in the policy.  It may be used by  third party affiliates in the ordinary course of business, however, "the use of information collected through BlueConic Services Platform shall be limited to the purpose of providing the service for which the Client has engaged BlueConic."

* Infomation gathered may include "Internet Protocol (IP) addresses, browser type and language, Internet service provider (ISP), referring and exit pages, operating system, date/time stamp, and other data", including "social networking pages."  

* BlueConic may "share or publish aggregate information that doesn’t specifically identify you, such as statistical information about visitors to our Websites or statistical information about how customers use our applications."

* The policy states that BlueConic will "follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received, including requiring our suppliers to meet such standards to protect your personal data from unauthorized access, use, and disclosure. If you have questions about the security of your personal data, you can contact us at info@blueconic.com. "

* BlueConic has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework.  

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Braze (Appboy).md
================================================
# Appboy (Braze)

## Primary Location
United States (New York City) [Crunchbase, 01](https://www.crunchbase.com/organization/braze)

## Website
[https://www.braze.com](https://www.braze.com)

## About
Braze is a mobile marketing company that offers CRM solutions and mobile marketing automation software for mobile applications.

## Ownership
Braze

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
* `appboy\.com`

## Documentation
[https://www.braze.com/documentation/Android](https://www.braze.com/documentation/Android)

## Products and Services
_Cross-Channel Personalization:_ Target customers based on personal interests, location, past purchases, and more [Braze, 02](https://www.braze.com/product/cross-channel-personalization)

_Identification and Analytics:_ Profile users, segment audiences, and utilize analytics for targeted advertisements [Braze, 02](https://www.braze.com/product/cross-channel-personalization); [Braze, 02](https://www.braze.com/product/cross-channel-personalization); [Braze, 01](https://www.braze.com); [Braze, 02](https://www.braze.com/product/cross-channel-personalization); [Braze, 03](https://www.slideshare.net/Appboy/appboy-urban-outfitters-placeiq-case-study)

### Advertising Networks
* Data sharing (vague) [Braze, 07](https://www.braze.com/product/integrations)

## Privacy Policy
_Data Collection:_ Braze collects data through the use of Developer apps. This includes:

* Device information (OS version, IP address, carrier information, country code) and a unique Braze-generated ID
* Application usage
* Personally identifiable information: Braze "may collect personally identifiable information shared with Developer Applications. We may also collect personally identifiable information from third parties used for authentication, such as when a user logs in to a Developer Application using a Facebook account, and from third party partners such as Facebook, Twitter, and Klout. Personally identifiable information collected may include information like name, email address, location, gender, interests, device, app usage, user ID, and contact information".

_Location Information:_ Braze "may collect device location information if location services are enabled for any Developer Applications on the device. We use location information to provide Developers with information about the use of their Developer Applications".

_Information Use:_ Braze can "use information we collect to provide partner Developers with information about usage of Developer Applications that integrate the Braze Service."

_Data Sharing:_ Data is shared with app Developers "in the form of aggregated, anonymous data about the way Developer Applications are used so that Developers can improve their respective Developer Applications." Braze may disclose information to third parties as required by law; to trusted service providers working on their behalf; to protect their rights, the safety of others, or in response to a government request; and in conjunction with a merger, acquisition, or sale of Braze.

_Automatic Data Collection:_ Braze will "automatically collect information about how Developer Applications are used, such as the frequency and duration of usage. This includes details about mobile devices, such as a unique Braze-generated ID for the mobile device. We share anonymous information about use of their respective Developer Applications with Developers, including which Developer Applications users have downloaded and the way those Developer Applications are used, which facilitates improvements to Developer Applications."

_Opt-Out:_ End users may opt out of location collection by turning off location services for Developer apps in their mobile device. They can opt out of personally identifiable information by not providing that information to the Developer apps, and in the case of third parties, not providing that information to the third parties. Braze states, "You can prevent collection of all information by uninstalling Developer Applications that integrate the Braze Service."

_Data retention:_ Braze "will retain information collected throughout the life of each user’s use of Developer Applications except where prohibited by law." Users can email privacy@braze.com to request data deletion. Braze "will keep anonymous information and may need to retain some identifying information to ensure that your request continues to be honored. Your information will be deleted from our active database but may remain in our archives. If we are required to maintain certain information about you, we will comply with your deletion request after fulfilling any legal requirements."

_International Law:_ Braze complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework.

_Consent:_ Braze states, "By using a Developer Application, you are consenting to our collection and processing of information as set forth in this Privacy Policy now and as amended by us. 'Processing' means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information, all of which activities will take place in the United States. If you reside outside the U.S. your information will be transferred to the U.S., and processed and stored there under U.S. privacy standards. By using the Application and providinginformation to us, you consent to such transfer to, and processing in, the U.S." [Braze, 11](https://www.braze.com/privacy).

## Relationships
ABC News / Citi / GAP / Axel Springer / Dominos / Delivery Hero / Hearst / KFC / Microsoft / Nascar / iHeartMedia / RTR / Postmates / OKCupid / Urban Outfitters [Braze, 01](https://www.braze.com) / American Cancer Society / Dots / ibotta / 1-800-Flowers.com / Momondo [Braze, 02](https://www.braze.com/customers)

## Details
_Financial details:_ Braze was founded in 2011 and has raised over $95 million from funders. Braze changed its name from Appboy in 2017 [Crunchbase, 01](https://www.crunchbase.com/organization/braze).

### Methods
* Targeted advertisments [Braze, 01](https://www.braze.com) 
* Location-based targeting [Braze, 07](https://www.braze.com/product/integrations)
* Real-world location targeting (including real-time targeting) [Braze, 02](https://www.braze.com/product/cross-channel-personalization) [Braze, 03](https://www.slideshare.net/Appboy/appboy-urban-outfitters-placeiq-case-study); [Braze, 07](https://www.braze.com/product/integrations); [Braze, 08](https://www.braze.com/academy/User_Targeting); [Braze, 09](https://www.braze.com/blog/appboy-location-targeting-tool); [Braze, 10](http://www.prweb.com/releases/2013/10/prweb11275487.htm)
* Targeted advertising based on consumer actions [Braze, 02](https://www.braze.com/product/cross-channel-personalization)
* Timed advertisements [Braze, 02](https://www.braze.com/product/cross-channel-personalization)
* Targeting across devices and channels [Braze, 02](https://www.braze.com/product/cross-channel-personalization)
* Real-time services [Braze, 04](https://www.braze.com/customers/postmates); [Braze, 05](https://www.braze.com/product/lifecycle-engagement-orchestration)
* Artificial intelligence for analytics [Braze, 06](https://www.braze.com/product/optimization-ai)
* Reports for clients [Braze, 06](https://www.braze.com/product/optimization-ai)

## References
* _Braze, 01._ [https://www.braze.com](https://www.braze.com)
* _Braze, 02._ [https://www.braze.com/product/cross-channel-personalization](https://www.braze.com/product/cross-channel-personalization)
* _Braze, 03._ [https://www.slideshare.net/Appboy/appboy-urban-outfitters-placeiq-case-study](https://www.slideshare.net/Appboy/appboy-urban-outfitters-placeiq-case-study) 
[Braze, 04._ [https://www.braze.com/customers/postmates](https://www.braze.com/customers/postmates)
* _Braze, 05._ [https://www.braze.com/product/lifecycle-engagement-orchestration](https://www.braze.com/product/lifecycle-engagement-orchestration)
* _Braze, 06._ [https://www.braze.com/product/optimization-ai](https://www.braze.com/product/optimization-ai)
* _Braze, 07._ [https://www.braze.com/product/integrations](https://www.braze.com/product/integrations)
* _Braze, 08._ [https://www.braze.com/academy/User_Targeting](https://www.braze.com/academy/User_Targeting)
* _Braze, 09._ [https://www.braze.com/blog/appboy-location-targeting-tool](https://www.braze.com/blog/appboy-location-targeting-tool)
* _Braze, 10._ [http://www.prweb.com/releases/2013/10/prweb11275487.htm](http://www.prweb.com/releases/2013/10/prweb11275487.htm)
* _Braze, 11._ [https://www.braze.com/privacy](https://www.braze.com/privacy)
* _Crunchbase, 01._ [https://www.crunchbase.com/organization/braze](https://www.crunchbase.com/organization/braze)

## External Links
* _Crunchbase (Braze):_ [https://www.crunchbase.com/organization/braze](https://www.crunchbase.com/organization/braze)

# Questions or concerns about this document?
Please contact Privacy Lab: https://privacylab.yale.edu/directory


================================================
FILE: trackers/Brightcove.md
================================================
# Tracker Name
Brightcove

## Website
https://www.brightcove.com

## About
Identify your best content and uncover actionable audience behaviors with comprehensive analytics and reporting. Dive into your viewer’s engagement data at an individual level with Brightcove’s advanced profile analytics.

## Category
Analytics, Identity, Location

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: ``metrics.brightcove.com/v2/tracker`
*   Code signature: `com.brightcove`

## Repositories
*   Maven: `http://repo.brightcove.com/releases`
*   Artifact ID: `xxx`
*   Group ID: `xxx`

## Gradle
`xxx`

## Additional links
https://www.brightcove.com/en/online-video-platform/analytics https://www.brightcove.com/en/partners?pages=2 https://support.brightcove.com/ https://github.com/BrightcoveOS/android-player-samples

## Notes
Video delivery, DRM, Video Streaming, Monetization, partner integration


================================================
FILE: trackers/Cifrasoft.md
================================================
# Tracker Name
Cifrasoft

# In εxodus?
No

## Website
http://cifrasoft.com

## About
Cifrasoft is a technological company developing ground-breaking solutions for acoustic connectivity, acoustic watermarking, audio fingerprinting and audio/video classification. Cifrasoft’s innovative solutions simplify user experience and bring interactivity to mobile e-commerce, mobile advertisement, second screen and social TV applications. Our technology has been successfully deployed in millions of smartphones, tablets, and other mobile devices. Cifrasoft’s growing IP portfolio and vast expertise in digital signal processing delivers competitive advantage to our customers and R&D partners.

## Category
Advertising, Location, Identity, ACR 

## [Exodus Detection Rules](https://exodus-privacy.eu.org)
*   Network signature: `*.tele.fm`
*   Code signature: `com.cirasoft`

## Repositories
*   Maven: `xxx`
*   Artifact ID: `xxx`
*   Group ID: `xx`

## Gradle
`xxx`

## Additional links
http://cifrasoft.com/secondscreen.html , https://addons.mozil
Download .txt
gitextract_wzt87a0e/

├── LICENSE
├── README.md
├── guides/
│   ├── Acronyms.md
│   ├── BasicTrackerTemplate.md
│   ├── Glossary.md
│   ├── Permissions.md
│   └── mozilla_presentation.md
└── trackers/
    ├── AccountKit.md
    ├── Actv8.md
    ├── Ad4Screen.md
    ├── Amplitude.md
    ├── AppNexus.md
    ├── Appodeal.md
    ├── AppsFlyer.md
    ├── Auditude.md
    ├── Axwave.md
    ├── BeatgridMedia.md
    ├── BlueConic.md
    ├── Braze (Appboy).md
    ├── Brightcove.md
    ├── Cifrasoft.md
    ├── CopSonic.md
    ├── Crashlytics (Google).md
    ├── Cuebiq.md
    ├── Demdex (Adobe).md
    ├── Disney.md
    ├── DoubleClick (Google).md
    ├── Dov-e.md
    ├── Embee.md
    ├── Estimote.md
    ├── Eulerian.md
    ├── Fabric.md
    ├── Facebook.md
    ├── Fidzup.md
    ├── Flurry (Yahoo).md
    ├── Gimbal.md
    ├── HockeyApp (Microsoft).md
    ├── Houndify.md
    ├── InMobi.md
    ├── IndoorAtlas.md
    ├── Inmarket.md
    ├── Instreamatic.md
    ├── Intrasonics.md
    ├── Kochava.md
    ├── Krux (SalesForce DMP).mkd
    ├── Leanplum.md
    ├── Lenddo.md
    ├── Localytics.md
    ├── Millenial Media.md
    ├── MixPanel.md
    ├── MoPub.md
    ├── Moca.md
    ├── Moodmedia.md
    ├── Mufin.md
    ├── Nexage (AOL).md
    ├── Omniture.md
    ├── Ooyala.md
    ├── OpenX.md
    ├── Opentracker.md
    ├── OtherLevels.md
    ├── Pilgrim.md
    ├── Pointinside.md
    ├── Proximi.md
    ├── Pushwoosh.md
    ├── SafeGraph.md
    ├── ScorecardResearch.md
    ├── Sift.md
    ├── Smart.md
    ├── TUNE.md
    ├── TVSquared.md
    ├── Taplytics.md
    ├── Tealium.md
    ├── Teemo.md
    ├── Tinder.md
    ├── Trillbit.md
    ├── Umeng Analytics.md
    ├── Umeng Feedback.md
    ├── Weborama.md
    ├── Xfinity.md
    ├── Xiti.md
    ├── YandexAd.md
    ├── YinzcamSobek.md
    ├── Zapr.md
    ├── ironSource.md
    └── mParticle.md
Condensed preview — 85 files, each showing path, character count, and a content snippet. Download the .json file or copy for the full structured content (553K chars).
[
  {
    "path": "LICENSE",
    "chars": 34520,
    "preview": "                    GNU AFFERO GENERAL PUBLIC LICENSE\n                       Version 3, 19 November 2007\n\n Copyright (C)"
  },
  {
    "path": "README.md",
    "chars": 2196,
    "preview": "# Yale Privacy Lab - Tracker Profiles\n\nThis repository contains research profiles on Android app trackers hidden in popu"
  },
  {
    "path": "guides/Acronyms.md",
    "chars": 4208,
    "preview": "## Acronyms\n\n**AdX:** Double-Click Ad Exchange\n\n**AMP:** Accelerated Mobile Pages (Google project)\n\n**API:** Application"
  },
  {
    "path": "guides/BasicTrackerTemplate.md",
    "chars": 456,
    "preview": "# Tracker Name\nxxx\n\n# In εxodus?\nYes|No\n\n# Website\nxxx\n\n# Short Description\nxxx\n\n# [Exodus Detection Rules](https://exod"
  },
  {
    "path": "guides/Glossary.md",
    "chars": 28332,
    "preview": "# Glossary of Terms\n\n## Identifiers\n\n**AAID (Google Advertising ID for Android Devices)** AAID is \"A user-specific, uniq"
  },
  {
    "path": "guides/Permissions.md",
    "chars": 64421,
    "preview": "## Android Permissions\n\nThis is a list of standard Android permissions.  AOSP and Google default permissions belong in t"
  },
  {
    "path": "guides/mozilla_presentation.md",
    "chars": 10949,
    "preview": "# Tracking Mobile Trackers\n#### A [Yale Privacy Lab]( https://privacylab.yale.edu) Tech Primer [Guide]\n\n###### Share: [p"
  },
  {
    "path": "trackers/AccountKit.md",
    "chars": 2022,
    "preview": "# AccountKit\n\n## About\n\nAccountKit is a product of Facebook lets users quickly register/login to apps by using just thei"
  },
  {
    "path": "trackers/Actv8.md",
    "chars": 727,
    "preview": "# Tracker Name\nActv8\n\n# In εxodus?\nNo\n\n## Website\nhttp://actv8me.com/\n\n## About\nDrive user engagement and inspire transa"
  },
  {
    "path": "trackers/Ad4Screen.md",
    "chars": 14806,
    "preview": "# Ad4Screen\n\n## Primary Location\nFrance (Paris). [Crunchbase, 01](https://www.crunchbase.com/organization/ad4screen)\n\n##"
  },
  {
    "path": "trackers/Amplitude.md",
    "chars": 1997,
    "preview": "# Amplitude\n\n## About\n\nAmplitude, Inc. is a product analytics and data analysis company. It serves over 26,000 companies"
  },
  {
    "path": "trackers/AppNexus.md",
    "chars": 9360,
    "preview": "# AppNexus\n\n## Primary Location\nUnited States (New York City) [Bloomberg, 01](https://www.bloomberg.com/research/stocks/"
  },
  {
    "path": "trackers/Appodeal.md",
    "chars": 633,
    "preview": "# Tracker Name\nAppodeal\n\n## Website\nhttps://www.appodeal.com/\n\n## About\nA Full Stack Ad Monetization Platform. Take full"
  },
  {
    "path": "trackers/AppsFlyer.md",
    "chars": 6637,
    "preview": "# AppsFlyer\n\n## Primary Location\nIsrael (Herzliya)\n\n## Website\n[https://www.appsflyer.com](https://www.appsflyer.com)\n\n#"
  },
  {
    "path": "trackers/Auditude.md",
    "chars": 681,
    "preview": "# Tracker Name\nAuditude\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.adobe.com/privacy/policies/auditude.html\n\n## About\nThe "
  },
  {
    "path": "trackers/Axwave.md",
    "chars": 779,
    "preview": "# Tracker Name\nAxwave\n\n# In εxodus?\nNo\n\n## Website\nhttp://www.axwave.com/\n\n## About\nAxwave's portable ACR technology  mo"
  },
  {
    "path": "trackers/BeatgridMedia.md",
    "chars": 831,
    "preview": "# Tracker Name\nBeatgrid Media\n\n# In εxodus?\nNo\n\n## Website\nhttp://www.beatgridmedia.com/\n\n## About\nBroadcast monitoring "
  },
  {
    "path": "trackers/BlueConic.md",
    "chars": 2746,
    "preview": "# BlueConic\n\n## About\n\nBlueConic, Inc. is a privately-held e-marketing company that sells targeted advertising through m"
  },
  {
    "path": "trackers/Braze (Appboy).md",
    "chars": 9062,
    "preview": "# Appboy (Braze)\n\n## Primary Location\nUnited States (New York City) [Crunchbase, 01](https://www.crunchbase.com/organiza"
  },
  {
    "path": "trackers/Brightcove.md",
    "chars": 922,
    "preview": "# Tracker Name\nBrightcove\n\n## Website\nhttps://www.brightcove.com\n\n## About\nIdentify your best content and uncover action"
  },
  {
    "path": "trackers/Cifrasoft.md",
    "chars": 1197,
    "preview": "# Tracker Name\nCifrasoft\n\n# In εxodus?\nNo\n\n## Website\nhttp://cifrasoft.com\n\n## About\nCifrasoft is a technological compan"
  },
  {
    "path": "trackers/CopSonic.md",
    "chars": 1175,
    "preview": "# CopSonic\n\n# In εxodus?\nNo\n\n## About\n\nCopSonic is a private family-owned French digital audio and technology company.  "
  },
  {
    "path": "trackers/Crashlytics (Google).md",
    "chars": 9311,
    "preview": "# Crashlytics (Google)\n\n## Primary Location\nUnited States (Boston) [Crunchbase, 01](https://www.crunchbase.com/organizat"
  },
  {
    "path": "trackers/Cuebiq.md",
    "chars": 2750,
    "preview": "# Cuebiq\n\n## About\n\n[Cuebiq](https://www.cuebiq.com/about/) is a location data intelligence and analytics company with 5"
  },
  {
    "path": "trackers/Demdex (Adobe).md",
    "chars": 21556,
    "preview": "# Demdex (Adobe)\n\n## Primary Location\nUnited States\n\n## Website\n[https://www.adobe.com/data-analytics-cloud/audience-man"
  },
  {
    "path": "trackers/Disney.md",
    "chars": 735,
    "preview": "# Tracker Name\nDisney Datg\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.disneyabcpress.com/disneyabctv/\n\n## About\nDisney|ABC"
  },
  {
    "path": "trackers/DoubleClick (Google).md",
    "chars": 10265,
    "preview": "# DoubleClick\n\n## Primary Location\nUnited States (New York City) [Crunchbase, 01](https://www.crunchbase.com/organizatio"
  },
  {
    "path": "trackers/Dov-e.md",
    "chars": 615,
    "preview": "# Tracker Name\nDov-E\n\n## Website\nhttps://www.dov-e.com/\n\n## About\nDOV-E’s patented technology utilizes these speakers an"
  },
  {
    "path": "trackers/Embee.md",
    "chars": 752,
    "preview": "# Tracker Name\nEmbee\n\n# In εxodus?\nNo\n\n## Website\nhttps://embeemobile.com/technology/\n\n## About\nEmbeeCapture is ground-b"
  },
  {
    "path": "trackers/Estimote.md",
    "chars": 2294,
    "preview": "# Estimote\n\n## About\n\nEstimote is private company that creates and sells sensor-based proximity tracking devices.  These"
  },
  {
    "path": "trackers/Eulerian.md",
    "chars": 1536,
    "preview": "# Eulerian\n\n## About\n\nEulerian Technologies is a privately-held e-marketing and web analytics company based in France. ["
  },
  {
    "path": "trackers/Fabric.md",
    "chars": 806,
    "preview": "# Tracker Name\nFabric\n\n# In εxodus?\nNo\n\n## Website\nhttps://get.fabric.io/\n\n## About\nGet insight into your users and what"
  },
  {
    "path": "trackers/Facebook.md",
    "chars": 559,
    "preview": "# Tracker Name\nFacebook\n\n# In εxodus?\nYes\n\n## Website\nhttps://facebook.com/\n\n## About\n\n\n\n## Category\nInstaller, Identity"
  },
  {
    "path": "trackers/Fidzup.md",
    "chars": 25868,
    "preview": "# Fidzup\n\n## Primary Location\nFrance (Paris) [Crunchbase, 01](https://www.crunchbase.com/organization/fidzup)\n\n## Websit"
  },
  {
    "path": "trackers/Flurry (Yahoo).md",
    "chars": 11546,
    "preview": "# Flurry\n\n## Primary Location\nUnited States\n\n## Website\n[https://developer.yahoo.com](https://developer.yahoo.com)\n\n## A"
  },
  {
    "path": "trackers/Gimbal.md",
    "chars": 770,
    "preview": "# Tracker Name\nGimbal\n\n# In εxodus?\nNo\n\n## Website\nhttps://gimbal.com/\n\n## About\nRELEVANCE REIMAGINED. Perfect your adve"
  },
  {
    "path": "trackers/HockeyApp (Microsoft).md",
    "chars": 5769,
    "preview": "# HockeyApp (Bit Stadium GmbH, acquired by Microsoft)\n\n## Primary Location\nMicrosoft: United States (Seattle) / Bit Stad"
  },
  {
    "path": "trackers/Houndify.md",
    "chars": 1243,
    "preview": "# Tracker Name\nHoundify\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.houndify.com/\n\n## About\nIntegrate voice and conversatio"
  },
  {
    "path": "trackers/InMobi.md",
    "chars": 3511,
    "preview": "# InMobi\n\n## About\n\n[InMobi](https://www.inmobi.com/) is a private, Indian-based advertising behemoth.  It has relations"
  },
  {
    "path": "trackers/IndoorAtlas.md",
    "chars": 836,
    "preview": "# Tracker Name\nIndoorAtlas\n\n## Website\nhttp://www.indooratlas.com/\n\n## About\nIndoor positioning systems (IPS) locate peo"
  },
  {
    "path": "trackers/Inmarket.md",
    "chars": 776,
    "preview": "# Tracker Name\nInmarket\n\n# In εxodus?\nNo\n\n## Website\nhttps://inmarket.com/\n\n## About\nInspire shoppers when it matters mo"
  },
  {
    "path": "trackers/Instreamatic.md",
    "chars": 897,
    "preview": "# Tracker Name\nInstreamatic\n\n# In εxodus?\nNo\n\n## Website\nhttp://instreamatic.com/\n\n## About\nVoice-enabled audio technolo"
  },
  {
    "path": "trackers/Intrasonics.md",
    "chars": 1005,
    "preview": "# Tracker Name\nIntrasonics\n\n## Website\nhttp://www.intrasonics.com/\n\n## About\nWe provide broadcast grade audio watermarki"
  },
  {
    "path": "trackers/Kochava.md",
    "chars": 2019,
    "preview": "# Kochava\n\n## About\n\nKochava is a mobile attribution and analytics platform.  It is integrated with 3,500+ networks, pub"
  },
  {
    "path": "trackers/Krux (SalesForce DMP).mkd",
    "chars": 40880,
    "preview": "# Krux (Salesforce DMP)\n\n## Primary Location\nUnited States (San Francisco) [Crunchbase, 01](https://www.crunchbase.com/o"
  },
  {
    "path": "trackers/Leanplum.md",
    "chars": 8743,
    "preview": "# Leanplum\n\n## Primary Location\nUnited States (San Francisco)\n\n## Website\n[https://www.leanplum.com](https://www.leanplu"
  },
  {
    "path": "trackers/Lenddo.md",
    "chars": 818,
    "preview": "# Tracker Name\nLenddo\n\n## Website\nhttps://www.lenddo.com/\n\n## About\nSee how Lenddo uses non-traditional data to provide "
  },
  {
    "path": "trackers/Localytics.md",
    "chars": 5569,
    "preview": "# Localytics\n\n## Primary Location\nUnited States (Boston) [Localytics, 01](https://www.localytics.com/company/about)\n\n## "
  },
  {
    "path": "trackers/Millenial Media.md",
    "chars": 2046,
    "preview": "# Millenial Media\n\n## About\n\nMillenial Media was founded in 2006 and publicly acquired by AOL in 2015.  Oath Inc., a Ver"
  },
  {
    "path": "trackers/MixPanel.md",
    "chars": 2307,
    "preview": "# MixPanel\n\n## About\n\nMixPanel, Inc. is a privately-held marketing technology company with 250+ employees and offices in"
  },
  {
    "path": "trackers/MoPub.md",
    "chars": 8362,
    "preview": "# MoPub (Twitter)\n\n## Primary location\nUnited States\n\n## Website\n[https://www.mopub.com](https://www.mopub.com)\n\n## Abou"
  },
  {
    "path": "trackers/Moca.md",
    "chars": 862,
    "preview": "# Tracker Name\nMoca\n\n## Website\nhttps://www.mocaplatform.com/\n\n## About\nMobile marketing leaders use MOCA to drive mobil"
  },
  {
    "path": "trackers/Moodmedia.md",
    "chars": 734,
    "preview": "# Tracker Name\nMoodmedia\n\n# In εxodus?\nNo\n\n## Website\nhttps://us.moodmedia.com/\n\n## About\nIn-store Media Solutions to he"
  },
  {
    "path": "trackers/Mufin.md",
    "chars": 746,
    "preview": "# Tracker Name\nMufin\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.mufin.com/\n\n## About\nmufin is a leading expert for audio i"
  },
  {
    "path": "trackers/Nexage (AOL).md",
    "chars": 14706,
    "preview": "# Nexage (Millenial Media, part of ONE by AOL)\n\n## Primary Location\nUnited States (Boston) [Crunchbase, 01](https://www."
  },
  {
    "path": "trackers/Omniture.md",
    "chars": 1855,
    "preview": "# Omniture\n\n## About\n\nOmniture, originally a online marketing and web analytics company, was acquired by Adobe in 2009 a"
  },
  {
    "path": "trackers/Ooyala.md",
    "chars": 768,
    "preview": "# Tracker Name\nOoyala\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.ooyala.com/en\n\n## About\nOoyala Flex Media Platform: an op"
  },
  {
    "path": "trackers/OpenX.md",
    "chars": 775,
    "preview": "# Tracker Name\nOpenX\n\n## Website\nhttps://www.openx.com/\n\n## About\nCreating Quality Programmatic Advertising Markets That"
  },
  {
    "path": "trackers/Opentracker.md",
    "chars": 786,
    "preview": "# Tracker Name\nOpentracker\n\n## Website\nhttps://www.opentracker.net/\n\n## About\nOpentracker specialises in tracking and we"
  },
  {
    "path": "trackers/OtherLevels.md",
    "chars": 1013,
    "preview": "# Tracker Name\nOtherLevels\n\n## Website\nhttps://www.otherlevels.com/\n\n## About\nOtherLevels provides the platform and the "
  },
  {
    "path": "trackers/Pilgrim.md",
    "chars": 837,
    "preview": "# Tracker Name\nPilgrim\n\n# In εxodus?\nNo\n\n## Website\nhttps://enterprise.foursquare.com/products/pilgrim\n\n## About\nEmbed t"
  },
  {
    "path": "trackers/Pointinside.md",
    "chars": 601,
    "preview": "# Tracker Name\nPoint Inside\n\n## Website\nhttps://www.pointinside.com/\n\n## About\nSince 2009, Point Inside has been creatin"
  },
  {
    "path": "trackers/Proximi.md",
    "chars": 1225,
    "preview": "# Tracker Name\nProximi\n\n## Website\nhttps://proximi.io/\n\n## About\nProximi.io is a developer platform offering you all the"
  },
  {
    "path": "trackers/Pushwoosh.md",
    "chars": 5999,
    "preview": "# Pushwoosh\n\n## Primary Location\nUnited States (Washington, DC) [CrunchBase, 01](https://www.crunchbase.com/organization"
  },
  {
    "path": "trackers/SafeGraph.md",
    "chars": 10585,
    "preview": "# SafeGraph\n\n## Primary Location\nUnited States (San Francisco) [Crunchbase, 01](https://www.crunchbase.com/organization/"
  },
  {
    "path": "trackers/ScorecardResearch.md",
    "chars": 6598,
    "preview": "# ScorecardResearch\n\n## Primary Location\nNot Listed\n\n## Website\n[https://www.scorecardresearch.com](https://www.scorecar"
  },
  {
    "path": "trackers/Sift.md",
    "chars": 1313,
    "preview": "# Tracker Name\nSift\n\n# In εxodus?\nNo\n\n## Website\nhttps://sift.com\n\n## About\nMore than 16,000 signals are analyzed by a s"
  },
  {
    "path": "trackers/Smart.md",
    "chars": 15250,
    "preview": "# Smart (Smart AdServer)\n\n## Primary Location\nFrance\n\n## Website\nhttp://smartadserver.com\n\n## About\nSmart uses a \"full s"
  },
  {
    "path": "trackers/TUNE.md",
    "chars": 11655,
    "preview": "# TUNE\n\n## Primary Location\nUnited States (Seattle) [Crunchbase, 01](https://www.crunchbase.com/organization/tune)\n\n## W"
  },
  {
    "path": "trackers/TVSquared.md",
    "chars": 956,
    "preview": "# Tracker Name\nTVsquared\n\n# In εxodus?\nNo\n\n## Website\nhttps://tvsquared.com/\n\n## About\nMore than 700 brands, agencies an"
  },
  {
    "path": "trackers/Taplytics.md",
    "chars": 733,
    "preview": "# Tracker Name\nTaplytics\n\n## Website\nhttps://taplytics.com/\n\n## About\nTaplytics is an intelligent customer experience cl"
  },
  {
    "path": "trackers/Tealium.md",
    "chars": 8512,
    "preview": "# Tealium\n\n## Primary location\nUnited States (San Diego) [Crunchbase, 01](https://www.crunchbase.com/organization/tealiu"
  },
  {
    "path": "trackers/Teemo.md",
    "chars": 12241,
    "preview": "# Teemo (ex Databerries)\n\n## Primary Location\nFrance (Paris) [Crunchbase, 01](https://www.crunchbase.com/organization/da"
  },
  {
    "path": "trackers/Tinder.md",
    "chars": 12724,
    "preview": "# Tinder Analytics\n\n## Primary Location\nUnited States\n\n## Website\n[https://www.tinder.com](https://www.tinder.com)\n\n## A"
  },
  {
    "path": "trackers/Trillbit.md",
    "chars": 934,
    "preview": "# Tracker Name\nTrillbit\n\n# In εxodus?\nNo\n\n## Website\nhttps://trillbit.com/\n\n## About\nTrillbit can convert any speaker in"
  },
  {
    "path": "trackers/Umeng Analytics.md",
    "chars": 1290,
    "preview": "# Umeng Analytics\n\n## About\n\nUmeng is a Private company founded by Fan Jiang in April 2010 and acquired by Alibaba Group"
  },
  {
    "path": "trackers/Umeng Feedback.md",
    "chars": 1282,
    "preview": "# Umeng Feedback\n\n## About\n\nUmeng is a Private company founded by Fan Jiang in April 2010 and acquired by Alibaba Group "
  },
  {
    "path": "trackers/Weborama.md",
    "chars": 18025,
    "preview": "# Weborama\n\n## Primary Location\nFrance (Paris)\n\n## About\nWeborama \"collect, organise, stock, transform and operate data "
  },
  {
    "path": "trackers/Xfinity.md",
    "chars": 880,
    "preview": "# Tracker Name\nXfinity\n\n# In εxodus?\nNo\n\n## Website\nhttps://www.xfinity.com/learn/digital-cable-tv/x1\n\n## About\nA simple"
  },
  {
    "path": "trackers/Xiti.md",
    "chars": 17266,
    "preview": "# Xiti (by AT Internet)\n\n## Primary Location\nFrance (Bordeaux) [Crunchbase, 01](https://www.crunchbase.com/organization/"
  },
  {
    "path": "trackers/YandexAd.md",
    "chars": 2456,
    "preview": "# Yandex Ad\n\n## About\n\nYandex (NASDAQ: YNDX) is a multinational corporation dealing in Internet-related products and ser"
  },
  {
    "path": "trackers/YinzcamSobek.md",
    "chars": 996,
    "preview": "# Tracker Name\nYinzcam Sobek\n\n## Website\nhttp://www.yinzcam.com/\n\n## About\nOur proprietary real-time analytics platform "
  },
  {
    "path": "trackers/Zapr.md",
    "chars": 844,
    "preview": "# Tracker Name\nZapr\n\n## Website\nhttps://www.zapr.in/\n\n## About\nUnderstand & Reach your offline audience better with our "
  },
  {
    "path": "trackers/ironSource.md",
    "chars": 977,
    "preview": "# Tracker Name\nironSource\n\n# In εxodus?\nYes\n\n## Website\nhttps://www.ironsrc.com/\n\n## About\nironSource builds technologie"
  },
  {
    "path": "trackers/mParticle.md",
    "chars": 11316,
    "preview": "# mParticle\n\n## Primary location\nUnited States (New York) [Crunchbase, 01](https://www.crunchbase.com/organization/mpart"
  }
]

About this extraction

This page contains the full source code of the YalePrivacyLab/tracker-profiles GitHub repository, extracted and formatted as plain text for AI agents and large language models (LLMs). The extraction includes 85 files (527.9 KB), approximately 125.6k tokens. Use this with OpenClaw, Claude, ChatGPT, Cursor, Windsurf, or any other AI tool that accepts text input. You can copy the full output to your clipboard or download it as a .txt file.

Extracted by GitExtract — free GitHub repo to text converter for AI. Built by Nikandr Surkov.

Copied to clipboard!