{"id":"https://openalex.org/W4412373357","doi":"https://doi.org/10.56553/popets-2025-0138","title":"Intractable Cookie Crumbs: Unveiling the Nexus of Stateful Banner Interaction and Tracking Cookies","display_name":"Intractable Cookie Crumbs: Unveiling the Nexus of Stateful Banner Interaction and Tracking Cookies","publication_year":2025,"publication_date":"2025-07-13","ids":{"openalex":"https://openalex.org/W4412373357","doi":"https://doi.org/10.56553/popets-2025-0138"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2025-0138","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0138","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.56553/popets-2025-0138","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003596990","display_name":"Ali Rasaii","orcid":"https://orcid.org/0009-0006-0572-7956"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Ali Rasaii","raw_affiliation_strings":["Max Planck Institute for Informatics"],"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055317235","display_name":"Ha Dao","orcid":"https://orcid.org/0000-0003-1950-8384"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ha Dao","raw_affiliation_strings":["Max Planck Institute for Informatics"],"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102877276","display_name":"Anja Feldmann","orcid":"https://orcid.org/0000-0001-5099-2448"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Anja Feldmann","raw_affiliation_strings":["Max Planck Institute for Informatics"],"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5118967829","display_name":"Mohammadmahdi Javid","orcid":null},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mohammadmahdi Javid","raw_affiliation_strings":["Max Planck Institute for Informatics"],"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043144381","display_name":"Oliver Gasser","orcid":"https://orcid.org/0000-0002-3425-9331"},"institutions":[{"id":"https://openalex.org/I4210106531","display_name":"International Planned Parenthood Federation","ror":"https://ror.org/01kbwt308","country_code":"IN","type":"nonprofit","lineage":["https://openalex.org/I4210106531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Oliver Gasser","raw_affiliation_strings":["IPinfo"],"affiliations":[{"raw_affiliation_string":"IPinfo","institution_ids":["https://openalex.org/I4210106531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067890625","display_name":"Devashish Gosain","orcid":"https://orcid.org/0009-0000-1026-8332"},"institutions":[{"id":"https://openalex.org/I162827531","display_name":"Indian Institute of Technology Bombay","ror":"https://ror.org/02qyf5152","country_code":"IN","type":"education","lineage":["https://openalex.org/I162827531"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Devashish Gosain","raw_affiliation_strings":["Indian Institute of Technology Bombay"],"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Bombay","institution_ids":["https://openalex.org/I162827531"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5003596990"],"corresponding_institution_ids":["https://openalex.org/I4210109712"],"apc_list":null,"apc_paid":null,"fwci":1.2402,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81265246,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"2025","issue":"4","first_page":"429","last_page":"445"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11349","display_name":"Music Technology and Sound Studies","score":0.7746999859809875,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11349","display_name":"Music Technology and Sound Studies","score":0.7746999859809875,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13518","display_name":"Architecture and Computational Design","score":0.6693000197410583,"subfield":{"id":"https://openalex.org/subfields/2216","display_name":"Architecture"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9012207984924316},{"id":"https://openalex.org/keywords/nexus","display_name":"Nexus (standard)","score":0.8417448997497559},{"id":"https://openalex.org/keywords/banner","display_name":"Banner","score":0.8351190686225891},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.43271690607070923},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3469042181968689},{"id":"https://openalex.org/keywords/history","display_name":"History","score":0.16229403018951416},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.07736295461654663}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9012207984924316},{"id":"https://openalex.org/C148609458","wikidata":"https://www.wikidata.org/wiki/Q7021281","display_name":"Nexus (standard)","level":2,"score":0.8417448997497559},{"id":"https://openalex.org/C157572991","wikidata":"https://www.wikidata.org/wiki/Q806880","display_name":"Banner","level":2,"score":0.8351190686225891},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.43271690607070923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3469042181968689},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.16229403018951416},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.07736295461654663},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.56553/popets-2025-0138","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0138","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:pure.mpg.de:item_3661553","is_oa":true,"landing_page_url":"https://hdl.handle.net/21.11116/0000-0011-8D0D-1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400654","display_name":"MPG.PuRe (Max Planck Society)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149899117","host_organization_name":"Max Planck Society","host_organization_lineage":["https://openalex.org/I149899117"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"The 25th Privacy Enhancing Technologies Symposium","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.56553/popets-2025-0138","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2025-0138","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2583381754","https://openalex.org/W2144255176","https://openalex.org/W2222333653","https://openalex.org/W109977192","https://openalex.org/W1970797462","https://openalex.org/W2019740326","https://openalex.org/W2047113772"],"abstract_inverted_index":{"In":[0,43,65,190],"response":[1],"to":[2,19,30,46,93,112,183,240,282],"the":[3,7,12,70,106,115,144,152,162,180,193,201,221,276,283],"ePrivacy":[4],"Directive":[5],"and":[6,26,34,72,108,157,286],"consent":[8,17,119],"requirements":[9],"introduced":[10],"by":[11,206,219,267],"GDPR,":[13],"websites":[14,100,172,224,268],"began":[15],"deploying":[16],"banners":[18,150],"obtain":[20],"user":[21,47,116],"permission":[22],"for":[23],"data":[24],"collection":[25],"processing.":[27],"However,":[28],"due":[29],"shared":[31],"third-party":[32],"services":[33],"technical":[35,71],"loopholes,":[36],"non-consensual":[37],"cross-site":[38,289,306],"tracking":[39,61,83,128,295,307],"can":[40],"still":[41,258],"occur.":[42],"fact,":[44],"contrary":[45],"expectations":[48],"of":[49,155,171,203,263,294],"seemingly":[50],"isolated":[51],"consent,":[52],"a":[53,81,211,260],"user's":[54],"decision":[55],"on":[56,63,99,120,139,208,216,231,275,305],"one":[57,176],"website":[58],"may":[59],"affect":[60],"behavior":[62],"others.":[64],"this":[66,126],"study,":[67],"we":[68,79,91,130],"investigate":[69],"behavioral":[73],"mechanisms":[74],"behind":[75],"these":[76],"discrepancies.":[77],"Specifically,":[78],"disclose":[80],"persistent":[82],"mechanism":[84],"exploiting":[85],"web":[86],"cookies.":[87,310],"These":[88],"cookies,":[89],"which":[90],"refer":[92],"as":[94,299],"intractable,":[95],"are":[96,109,280,297],"initially":[97,199],"set":[98,182,266],"with":[101,179,210,225,242,269],"accepted":[102],"banners,":[103,230,256],"persist":[104],"in":[105,151,161],"browser,":[107],"subsequently":[110],"sent":[111],"trackers":[113],"before":[114],"provides":[117],"explicit":[118],"other":[121,255],"websites.":[122],"To":[123],"meticulously":[124],"analyze":[125],"covert":[127],"behavior,":[129],"conduct":[131],"an":[132],"extensive":[133],"measurement":[134,274],"study":[135],"performing":[136],"stateful":[137],"crawls":[138],"over":[140],"20k":[141],"domains":[142,156],"from":[143],"Tranco":[145],"top":[146],"list,":[147],"strategically":[148],"accepting":[149],"first":[153],"half":[154],"measuring":[158],"intractable":[159,177,204,237,264,309],"cookies":[160,205,238,265,296],"second":[163],"half.":[164],"Our":[165,245],"findings":[166],"reveal":[167],"that":[168,249,279,291],"around":[169],"50%":[170],"send":[173,233],"at":[174],"least":[175],"cookie,":[178],"majority":[181],"expire":[184],"after":[185],"more":[186,236],"than":[187],"10":[188],"days.":[189],"addition,":[191],"enabling":[192],"Global":[194],"Privacy":[195],"Control":[196],"(GPC)":[197],"signal":[198],"reduces":[200],"number":[202,262],"30%":[207],"average,":[209,232],"further":[212,247],"32%":[213],"reduction":[214],"possible":[215],"subsequent":[217],"visits":[218],"rejecting":[220],"banners.":[222,244],"Moreover,":[223],"Consent":[226],"Management":[227],"Platform":[228],"(CMP)":[229],"6.9":[234],"times":[235],"compared":[239],"those":[241],"native":[243],"research":[246],"reveals":[248],"even":[250],"if":[251],"users":[252],"reject":[253],"all":[254],"they":[257],"receive":[259],"large":[261],"cookie":[270],"paywalls.":[271],"Additionally,":[272],"our":[273],"partitioned":[277],"cookies---cookies":[278],"restricted":[281],"top-level":[284],"site":[285],"thus":[287],"mitigate":[288],"tracking---shows":[290],"only":[292],"1.3%":[293],"marked":[298],"such,":[300],"indicating":[301],"their":[302],"minimal":[303],"impact":[304],"via":[308]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}