{"id":"https://openalex.org/W4405513851","doi":"https://doi.org/10.1145/3708515","title":"Crumbled Cookies: Exploring E-commerce Websites\u2019 Cookie Policies with Data Protection Regulations","display_name":"Crumbled Cookies: Exploring E-commerce Websites\u2019 Cookie Policies with Data Protection Regulations","publication_year":2024,"publication_date":"2024-12-17","ids":{"openalex":"https://openalex.org/W4405513851","doi":"https://doi.org/10.1145/3708515"},"language":"en","primary_location":{"id":"doi:10.1145/3708515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708515","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3708515","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101591935","display_name":"Nivedita Singh","orcid":"https://orcid.org/0000-0001-6225-3669"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Nivedita Singh","raw_affiliation_strings":["Department of Software, Sungkyunkwan University - Natural Sciences Campus, Suwon, Korea (the Republic of)"],"raw_orcid":"https://orcid.org/0000-0001-6225-3669","affiliations":[{"raw_affiliation_string":"Department of Software, Sungkyunkwan University - Natural Sciences Campus, Suwon, Korea (the Republic of)","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076472419","display_name":"Yejin Do","orcid":"https://orcid.org/0009-0001-4924-4896"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yejin Do","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)"],"raw_orcid":"https://orcid.org/0009-0001-4924-4896","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042312034","display_name":"Yinglei Yu","orcid":"https://orcid.org/0009-0004-6790-6488"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yongsang Yu","raw_affiliation_strings":["Department of Semiconductor and Display Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)"],"raw_orcid":"https://orcid.org/0009-0004-6790-6488","affiliations":[{"raw_affiliation_string":"Department of Semiconductor and Display Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050034637","display_name":"Imane Fouad","orcid":"https://orcid.org/0009-0006-7613-0428"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2279609970","display_name":"Universit\u00e9 de Lille","ror":"https://ror.org/02kzqn938","country_code":"FR","type":"education","lineage":["https://openalex.org/I2279609970"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Imane Fouad","raw_affiliation_strings":["Inria, Univ. Lille, CNRS, UMR CRIStAL, Lille, France"],"raw_orcid":"https://orcid.org/0009-0006-7613-0428","affiliations":[{"raw_affiliation_string":"Inria, Univ. Lille, CNRS, UMR CRIStAL, Lille, France","institution_ids":["https://openalex.org/I2279609970","https://openalex.org/I1294671590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084281731","display_name":"Jungrae Kim","orcid":"https://orcid.org/0000-0003-1587-0677"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jungrae Kim","raw_affiliation_strings":["Department of Semiconductor Systems Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)"],"raw_orcid":"https://orcid.org/0000-0003-1587-0677","affiliations":[{"raw_affiliation_string":"Department of Semiconductor Systems Engineering, Sungkyunkwan University - Suwon Campus, Suwon, Korea (the Republic of)","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016563574","display_name":"Hyoungshick Kim","orcid":"https://orcid.org/0000-0002-1605-3866"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyoungshick Kim","raw_affiliation_strings":["Department of Software, Sungkyunkwan University - Natural Sciences Campus, Suwon, Korea (the Republic of)"],"raw_orcid":"https://orcid.org/0000-0002-1605-3866","affiliations":[{"raw_affiliation_string":"Department of Software, Sungkyunkwan University - Natural Sciences Campus, Suwon, Korea (the Republic of)","institution_ids":["https://openalex.org/I848706"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.8109,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.97627025,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"19","issue":"1","first_page":"1","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9818000197410583,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.98089998960495,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6072570085525513},{"id":"https://openalex.org/keywords/e-commerce","display_name":"E-commerce","score":0.47431254386901855},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4694720506668091},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.4142838716506958},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.401032030582428},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.39144548773765564},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3566403090953827},{"id":"https://openalex.org/keywords/advertising","display_name":"Advertising","score":0.3512491285800934},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3179124593734741}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6072570085525513},{"id":"https://openalex.org/C78597825","wikidata":"https://www.wikidata.org/wiki/Q484847","display_name":"E-commerce","level":2,"score":0.47431254386901855},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4694720506668091},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.4142838716506958},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.401032030582428},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.39144548773765564},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3566403090953827},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.3512491285800934},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3179124593734741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3708515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708515","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3708515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3708515","pdf_url":null,"source":{"id":"https://openalex.org/S131231701","display_name":"ACM Transactions on the Web","issn_l":"1559-1131","issn":["1559-1131","1559-114X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on the Web","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W2339675877","https://openalex.org/W2765672799","https://openalex.org/W2795807997","https://openalex.org/W2804093830","https://openalex.org/W2889145385","https://openalex.org/W2922166134","https://openalex.org/W2965874398","https://openalex.org/W3037553460","https://openalex.org/W3153197149","https://openalex.org/W3164539510","https://openalex.org/W3169228314","https://openalex.org/W3197225896","https://openalex.org/W3206830212","https://openalex.org/W3206980850","https://openalex.org/W4206211421","https://openalex.org/W4234472883","https://openalex.org/W4242289848","https://openalex.org/W4247564058","https://openalex.org/W4288276884","https://openalex.org/W4293097428","https://openalex.org/W4310713211","https://openalex.org/W4321268340","https://openalex.org/W4324009396","https://openalex.org/W4389279178"],"related_works":["https://openalex.org/W2908364646","https://openalex.org/W584641911","https://openalex.org/W2275271759","https://openalex.org/W2014532210","https://openalex.org/W1992760298","https://openalex.org/W2767629806","https://openalex.org/W2319899002","https://openalex.org/W2953463546","https://openalex.org/W3007860371","https://openalex.org/W4205630567"],"abstract_inverted_index":{"Despite":[0],"stringent":[1],"data":[2,219],"protection":[3,220,231],"regulations,":[4],"such":[5],"as":[6,100,149,206,208],"the":[7,13,42,159,167,172,178,193,226,234,238,246],"General":[8],"Data":[9],"Protection":[10],"Regulation":[11],"(GDPR),":[12],"California":[14],"Consumer":[15],"Privacy":[16],"Act":[17],"(CCPA),":[18],"and":[19,54,82,88,181,198,204,212,232],"other":[20],"country-specific":[21,182],"laws,":[22],"numerous":[23],"websites":[24,46,73,176,203],"continue":[25],"to":[26,29,40,86,113,126,169,215,225],"use":[27],"cookies":[28,98,146],"track":[30],"user":[31,154],"activities,":[32],"raising":[33],"significant":[34],"privacy":[35,87,230],"concerns.":[36],"This":[37,222],"study":[38,165],"aims":[39],"investigate":[41],"compliance":[43,173,217],"of":[44,69,96,123,141,161,174,236],"e-commerce":[45,72,175,247],"with":[47,103,177,218],"these":[48],"regulations":[49,183],"from":[50],"a":[51,66],"cookie":[52,59,80,185,200,243],"perspective":[53],"explore":[55],"potential":[56,84,114],"variations":[57],"in":[58,245],"policies":[60,186,201],"across":[61,76,187,202],"different":[62,188],"countries.":[63],"We":[64,137],"conducted":[65],"comprehensive":[67],"analysis":[68],"360":[70],"popular":[71],"(44,323":[74],"cookies)":[75],"multiple":[77],"countries,":[78],"examining":[79],"attributes":[81],"their":[83],"links":[85],"security":[89],"breaches.":[90],"Our":[91,190],"findings":[92,191],"revealed":[93],"that":[94],"73%":[95],"third-party":[97,145],"function":[99],"tracker":[101],"cookies,":[102,143,151],"around":[104],"40%":[105],"breaching":[106],"lifecycle":[107],"regulations.":[108,221],"Additionally,":[109],"85%":[110],"are":[111],"vulnerable":[112],"cross-site":[115,132],"scripting":[116],"(XSS)":[117],"attacks,":[118],"while":[119],"only":[120],"349":[121],"out":[122],"44,323":[124],"adhere":[125],"robust":[127,209],"measures":[128],"aimed":[129],"at":[130],"combating":[131],"request":[133],"forgery":[134],"(CSRF)":[135],"attacks.":[136],"also":[138],"discovered":[139],"instances":[140],"masquerading":[142],"where":[144],"disguise":[147],"themselves":[148],"first-party":[150],"enabling":[152],"unauthorized":[153],"tracking":[155],"without":[156],"consent.":[157],"To":[158],"best":[160],"our":[162],"knowledge,":[163],"this":[164],"is":[166],"first":[168],"comprehensively":[170],"analyze":[171],"GDPR,":[179],"CCPA,":[180],"concerning":[184],"jurisdictions.":[189],"highlight":[192],"urgent":[194],"need":[195],"for":[196],"uniform":[197],"consistent":[199],"jurisdictions,":[205],"well":[207],"enforcement":[210],"mechanisms":[211],"increased":[213],"transparency":[214],"ensure":[216],"research":[223],"contributes":[224],"ongoing":[227],"discourse":[228],"on":[229],"underscores":[233],"importance":[235],"addressing":[237],"challenges":[239],"posed":[240],"by":[241],"insecure":[242],"practices":[244],"sector.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}