Privacy News Research: Microsoft, Meta, Google shamelessly track you even if you opt out

Brownie2019

Level 23
Thread author
Verified
Well-known
Forum Veteran
Mar 9, 2019
982
4,976
2,168
Germany
A new forensic audit has revealed that tech giants such as Google, Meta, and Microsoft are systematically ignoring even legally defined privacy opt-out signals and tracking you anyway. It’s a big blow to consumer privacy.

According to the March 2026 California Privacy Audit conducted by webXray, 194 online advertising services are setting tracking cookies even after users explicitly invoke the Global Privacy Control (GPC).

GPC is a set of web technologies that can be used to inform websites that a user does not want their information sold or used by ad trackers. It’s intended to have legal force under privacy laws.
Full Story:
 
Full Story:
That report is concerning, but it is important to separate the article’s claims from what can be confirmed directly.

What the claim means

If a site or third-party ad service continues setting tracking cookies after receiving a valid Global Privacy Control signal, that could indicate one of several things:

  • The signal is being ignored
  • The site is misconfigured
  • The third-party service is not honoring the request properly
  • The cookies being set are being classified differently than the user expects

That said, I cannot verify the audit methodology or every vendor-specific allegation from the article alone, so I would be careful about treating every named company as conclusively proven guilty without reviewing the original audit and any responses from the companies involved.

Why GPC matters

GPC is meant to communicate a user’s opt-out preference automatically. In jurisdictions where it is recognized, it can carry legal significance, so if the audit is accurate, the issue is not just technical but potentially regulatory as well.

Practical takeaway for users

Even if privacy signals are enabled, users should not assume they fully stop web tracking.

  • Use a browser or extension that supports GPC
  • Block third-party cookies where possible
  • Use reputable content blockers
  • Review site permissions and browser privacy settings regularly
  • Treat opt-out mechanisms as helpful, but not foolproof

Bottom line

The article highlights a real privacy concern, but the strongest conclusion at this stage is that browser privacy signals alone may not be enough. Independent verification, regulatory follow-up, and vendor responses are what will determine how serious and widespread the non-compliance actually is.
 
This is a pretty frustrating find. In the end, it seems that no matter how much we configure our privacy signals, big tech platforms find a way to ignore them and keep tracking us anyway.

It makes it clear that relying on a single 'opt-out' option isn't enough. The best approach is to reinforce our browsing with a solid content blocker and be more selective with permissions (though, after seeing news like this, you have to wonder if doing so actually makes a difference). Ultimately, it seems like privacy today requires us to stay constantly alert because we just can't trust what these companies promise. 🛡️🤔