Automated Experiments on Ad Privacy Settings: A Tale of Opacity, Choice, and Discrimination
Amit Datta, Michael Carl Tschantz, Anupam Datta
TL;DR
This work introduces AdFisher, an automated framework for conducting randomized, controlled browser experiments to study how user behavior, Google Ad Settings, and served ads interact in a black-box advertising ecosystem. By combining blocking, permutation-based significance testing, and machine-learning driven test-statistic selection, the authors demonstrate both opacity (ads change without reflecting in Ad Settings) and discrimination (gender affecting job-ad targeting), while also showing evidence of user-influenced ad choice. Across 21 experiments with ~17k agents and over 600k ads, they provide statistically rigorous evidence of these phenomena and discuss the limitations of attributing blame in such a complex system. The results motivate further scrutiny by regulators and platform operators and establish AdFisher as a scalable tool for auditing personalized advertising practices.
Abstract
To partly address people's concerns over web tracking, Google has created the Ad Settings webpage to provide information about and some choice over the profiles Google creates on users. We present AdFisher, an automated tool that explores how user behaviors, Google's ads, and Ad Settings interact. AdFisher can run browser-based experiments and analyze data using machine learning and significance tests. Our tool uses a rigorous experimental design and statistical analysis to ensure the statistical soundness of our results. We use AdFisher to find that the Ad Settings was opaque about some features of a user's profile, that it does provide some choice on ads, and that these choices can lead to seemingly discriminatory ads. In particular, we found that visiting webpages associated with substance abuse changed the ads shown but not the settings page. We also found that setting the gender to female resulted in getting fewer instances of an ad related to high paying jobs than setting it to male. We cannot determine who caused these findings due to our limited visibility into the ad ecosystem, which includes Google, advertisers, websites, and users. Nevertheless, these results can form the starting point for deeper investigations by either the companies themselves or by regulatory bodies.
