search

GoogleChromeLabs / ps-analysis-tool

Privacy Sandbox Analysis Chrome Extension and CLI for analysis and understanding of cookie usage on web pages, and new privacy-preserving Chrome APIs
https://www.privacysandbox.com
Apache License 2.0
101 stars 23 forks source link

Ecosystem review of existing Cookie Analysis Tools #14

Closed amedina closed 1 year ago

amedina commented 1 year ago

Task

Description: Do a review of what is available out there in terms of tools for cookie analysis and classification, and deliver a summary of the state of the art and capabilities that should be accounted for in this tool.

This review shall be made with the target audience of the tool in mind, pin pointing existing tools and gaps applicable to relevant 3PCD user journeys.

Steps to Complete:

Check:

amedina commented 1 year ago

@rahul286 FYI as discussed.

pradeep910 commented 1 year ago

There are many chrome extensions available to edit, delete, list, import and export cookies. The list of cookies are editable within the same table.

Here are some examples:

  1. Cookie Manager | Github
  2. Edit This Cookie | Github
  3. Cookie Editor | Github
amedina commented 1 year ago

@pradeep910 @maitreyie-chavan The outcome of this issue is the summary report we discussed. How is the progress on that?

Issue #22 is related and should be combined with this one.

amedina commented 1 year ago

Some of the capabilities we have identified so far include:

  1. Cookie Functional Classification: Identify and categorize cookies according to their purpose: 'Essential', 'Performance', 'Analytics', 'Advertising', 'Third Party', etc.
  2. Cookie "origin" classification: 1P vs. 3P, which 3P providers.
  3. Cookie Lifespan: Provide information about the lifespan of each cookie — when does it expire, or is it a session cookie that expires when the browser is closed?
  4. Consent Management: Determine which cookies are set before obtaining user consent, and which cookies are set afterwards.
  5. Domain Relationships: visualize the relationships between a given site/domain and third-party domains using cookies?
  6. Alerts: for when new cookies are stored in the browser, or when existing cookies change their behavior or properties.
maitreyie-chavan commented 1 year ago

@amedina It's coming along well. We'll have more findings to discuss with you by ~next week.

amedina commented 1 year ago

Another source to assess: https://cookiepedia.co.uk/

pradeep910 commented 1 year ago
Tools Description
Cookie Editor (Github) Shows a list of cookies by domains and also allows users to enable the following attributes on cookies, along with updates to other cookie details of the same site: Host Only, Session, Secure, and HTTP Only. It does not show third-party cookies.
Edit This Cookie (Github) The extension opens a settings page in a new tab that shows a table of cookies, similar to DevTools. By default, the extension lists 1P cookies only and does not show 3P cookies.
Ghostery (Github) The extension has a simple popup view and a detailed popup view. It also provides the following features: cookie scanning, tracking and adblocking, and detailed analytics of trackers on a site.
Privacy Badger & Cover Your Tracks by EFF.org Privacy Badger is a browser extension that automatically learns to block invisible trackers. Cover Your Tracks (formerly Panopticlick) is a tool that tests your browser to see how well you are protected from tracking and fingerprinting.
Cookie Script This service offers a Consent Management WordPress plugin, a cookie policy and privacy policy generator, and Cookie Auto-Blocking, which automatically scans and blocks third-party scripts (such as Google Analytics and Facebook Pixel) until the user consents. It helps websites comply with the latest privacy regulations, such as the GDPR, CCPA, LGPD, and CNIL.
Cookieyes This service is also similar to Cookie-Script in that it offers granular cookie control, historical consent logs, automatic script blocking, cookie consent solutions, and advanced website scanning to check compliance with privacy regulations.
CookieSearch CookieSearch is an extensive open-source database of cookies, powered by CookieYes. It has over 100,000 entries and counting. Cookies can be categorized into pre-defined categories, such as Necessary, Analytics, Advertisement, Functional, Performance, and Others. The initiative provides open access to comprehensive information about web cookies, and they are open to public submissions to maintain the exhaustive database.
CookieDatabase Cookiedatabase.org is a free and open-source website that provides comprehensive information about cookies, Local Storage, pixels, and other tracking technologies. The website's database of over 100,000 cookies can be used to lookup specific cookie information, including its purpose, function, and how it can be used to track users.
CookiePro The service offers tools that help you comply with cookie regulations, manage consent, and scan your websites and apps for third-party trackers. These tools include a cookie consent banner creator, a website scanner, a mobile app scanner, a privacy policy manager, a consent rate optimizer, and a cookie compliance monitor for GDPR, CCPA, and LGPD.
Awesome Cookie Manager This tool displays a simple list of all cookies in an icon popup, regardless of the tab that is open. You can filter the list by typing the domain name in the text field. However, the tool does not display a list of cookies per tab, so it will not display any third-party (3P) cookies for a single tab.
CookieServe CookieServe, a product of Cookieyes.com, provides a report of the cookies being used on a site, including their classification. This information can be used to help businesses comply with cookie regulations and protect the privacy of their users.
SiteChecker SiteChecker is a comprehensive site audit tool that highlights cookies that can be manipulated via JavaScript and whether the site has any defense mechanisms in place.
Iubenda iubenda displays the cookies compliance rate of a site. Here is an example report. It also has a consent database, privacy and cookie policy generator.
Swap My Cookies Swap My Cookies is a cookie management tool that allows you to log in to any website with several different accounts. You can create different profiles, and each profile can have its own individual cookies.
Cookiepedia Cookiepedia is an open knowledge base about cookies. It is powered by a database of over 11 million cookies, which have been used across some 300,000 websites. Cookiepedia also offers an online website scanner that shows a list of all cookies, along with their purpose and classification.
Am I Unique (Extension) This is an online tool that shows how identifiable you are on the internet. It provides a complete analysis of browser fingerprinting properties. The browser extension can also help track fingerprinting timelines.
uBlockOrigin The extension has settings to enable or disable various levels of privacy, such as blocking ads, tracking, and malicious URLs. It uses a database to find malicious URLs and EasyPrivacy checks. It also blocks third-party cookies.
CookieMetrix The tool checks compliance with EU laws by analyzing third-party session cookies, third-party stored cookies, and third-party domains that install cookies. Here is an example report.
pradeep910 commented 1 year ago

The analysis of cookie tools available in the ecosystem has been done, so closing this.