Cookies: expiring sooner to improve privacy

Filed under: Official Google Blog — Wrote by Lees on Monday, December 10th, 2007 @ 12:55 am

Posted by Peter Fleischer, Global
Privacy Counsel

We are committed to an ongoing process to improve our privacy
practices, and have recently taken a closer look at the question of
cookie privacy. How long should a web site "remember"
cookie information in its logs after a user's visit? And when
should a cookie expire on your computer? Cookie privacy is both a
server and a client issue.

On the server side, we href="http://googleblog.blogspot.com/2007/03/taking-steps-to-further-improve-our.html" >
recently announced that we will anonymize our search server
logs — including IP addresses and cookie ID numbers — after 18
months.

Now, we're asking the question about cookie lifetime: when
should a cookie expire on your computer? For background: a href="http://www.google.com/privacy_faq.html#cookie" >cookie is
a very small file which gets stored on your computer All search
engines and most websites use cookies. Why? Cookies remind us of
your preferences from the last time you visited our site. For
example, Google uses our so-called "PREF cookie" to
remember our users’ basic preferences, such as the fact that a user
wants search results in English, no more than 10 results on a given
page, or a SafeSearch setting to filter out explicit sexual
content. When we originally designed the PREF cookie, we set the
expiration far into the future — in 2038, to be exact — because the
primary purpose of the cookie was to preserve preferences, not to
let them be forgotten. We were mindful of the fact that users can
always go to their browsers to change their cookie management
settings, e.g. to delete all cookies, delete specific cookies, or
accept certain types of cookies (like first-party cookies) but
reject others (like third-party cookies).

After listening to feedback from our users and from privacy
advocates, we've concluded that it would be a good thing for
privacy to significantly shorten the lifetime of our cookies — as
long as we could find a way to do so without artificially forcing
users to re-enter their basic preferences at arbitrary points in
time. And this is why we’re announcing a new cookie policy.

In the coming months, Google will start issuing our users cookies
that will be set to auto-expire after 2 years, while auto-renewing
the cookies of active users during this time period. In other
words, users who do not return to Google will have their cookies
auto-expire after 2 years. Regular Google users will have their
cookies auto-renew, so that their preferences are not lost. And, as
always, all users will still be able to control their cookies at
any time via their browsers.

Together, these steps — logs anonymization and cookie lifetime
reduction — are part of our ongoing plan to continue innovating in
the area of privacy to protect our users. height="1" width="1" />

Tags: , , , , , , ,

Calling for federal consumer privacy protection

Filed under: Official Google Blog — Wrote by Lees on Monday, December 3rd, 2007 @ 10:12 pm

Posted by Nicole Wong, Associate
General Counsel

Google is committed to protecting your privacy and to supporting an
Internet environment that also respects individual privacy. Today,
we're joining a group of notable U.S. companies href="http://www.cdt.org/privacy/20060620cplstatement.pdf" >calling
for federal consumer privacy legislation.

Here in the U.S., we have a growing patchwork quilt of state
privacy laws, disparate industry-specific privacy laws (for
example, different laws covering health-related data, financial
data and children's online data), and a similarly-mixed bag of
data security laws. This matrix of laws is complex, incomplete, and
sometimes contradictory. For consumers, the result is a set of
privacy protections that are uneven at best.

On an Internet beset with spyware, malware, phishing,
identity-theft, and other privacy threats, enforcement of privacy
protections has become an industry-wide challenge, and highlights
the lack of a coherent regulatory structure. Google strongly
supports the adoption of a federal consumer privacy law. It would
be good for our users, and would contribute to consumer trust on
the Internet as a platform for communication, expression,
e-commerce, and so forth. Americans care about their privacy, and
so does Google. A baseline U.S. federal consumer privacy law will
help protect all of us online.

Tags: , , , , , , ,

Copyright © 2007 Google Adsense College.
Powered by GoogleSchool. All Rights Reserved.