The Death of the Third-Party Cookie: What Marketers Need to Know

What do marketers and Sesame Street monsters have in common? They LOVE cookies.

For years, we've been using them to track our website visitors, improve the user experience, and collect data that helps us target ads to the right audiences. We also use them to learn about what our visitors are checking out online when they aren't on our websites.

But the way we use cookies could change dramatically with Google's announcement that it will phase out the third-party cookie on Chrome browsers by 2022.

A Google blog post announcing the phaseout explains, "Users are demanding greater privacy--including transparency, choice, and control over how their data is used--and it’s clear the web ecosystem needs to evolve to meet these increasing demands."

Although Firefox and Safari have already phased out the third-party cookie, Google's post says that its changes will happen over the course of two years as the tech company works with advertisers to ensure that this pivot doesn't destroy the online advertising business.

"Some browsers have reacted to these concerns by blocking third-party cookies, but we believe this has unintended consequences that can negatively impact both users and the web ecosystem," the blog post notes. "By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques such as fingerprinting (an invasive workaround to replace cookies), which can actually reduce user privacy and control. We believe that we as a community can, and must, do better."

Although Chrome isn't the first browser to phase out the third-party cookie, it's the biggest. In late 2019, Google Chrome made up more than 56% of the web browser market. Chrome also accounts for more than half of all global web traffic.

Most used website browsers.

Source: Statista

Meanwhile, Safari and Firefox, which have blocked third-party cookies since 2013, come in a distant second and third place, respectively.

Because Chrome, Safari, and Firefox will all no longer support this type of data tracking by 2022, publications like Digiday are calling Google's phase-out the "death of the third-party cookie."

As with any major shift involving privacy, data, and advertising, business experts and publications have been frantically buzzing about how this will change the way we do business online.

But, do we really need to panic?

The truth is, Google Chrome's third-party cookie phase-out could heavily impact some areas of the marketing and advertising space, while other tactics will still stay pretty much the same.

If you're an advertiser or a marketer who's thrived on third-party data for pinpointed online audience targeting strategies, you might be worried about how you'll navigate this pivot.

Although some big changes might be underway, new data-driven alternatives could also emerge following this news.

To help you prepare for a world without third-party cookies, here are four things you should keep in mind about the latest cookie phase-out.

4 Things to Know About Google's Cookie Phase-Out

1. Google isn't banning all cookies.

If you're thinking that all your cookie-fueled marketing strategies will soon be rendered obsolete, take a breath.

So far, Google says its only planning to phase out the third-party cookie on its browsers. However, first-party cookies that track basic data about your own website's visitors are still safe -- for now. This means that any first-party data you gain from your website's visitors on all browsers will still remain in-tact.

Still not sure about the difference between first-party and third-party cookies? Here's a quick breakdown.

First-Party Cookies

A first-party cookie is a code that gets generated and stored on your website visitor's computer by default when they visit your site. This cookie is often used for user experience as it is responsible for remembering passwords, basic data about the visitor, and other preferences.

With a first-party cookie, you can learn about what a user did while visiting your website, see how often they visit it, and gain other basic analytics that can help you develop or automate an effective marketing strategy around them. However, you can't see data related to your visitor's behavior on other websites that aren't affiliated with your domain.

Ever wonder how Amazon always remembers your login information, the language you speak, the items in your cart, and other key things that make your user experience so smooth? This is because Amazon uses first-party cookies to remember these basic details.

On the other hand, if you're a marketer running a website on a CMS, you'll have access to analytics dashboards that track first-party cookie data. For example, you'll usually be able to see basic analytics, such as the number of web sessions on a page, the number of pages people click on during a visit, basic browser types, geographical demographics, or even referring websites where visitors clicked a link to your site's URL. However, this data doesn't inform you of everything your visitors do online.

Third-Party Cookies

Third-party cookies are tracking codes that are placed on a web visitor's computer after being generated by another website other than your own. When a web visitor visits your site and others, the third-party cookie tracks this information and sends it to the third-party who created the cookie -- which might be an advertiser.

If you're an advertiser, third-party cookie data allows you to learn about your web visitor's overall online behaviors, such as websites they frequently visit, purchases, and interests that they've shown on various websites. With this detailed data, you can build robust visitor profiles. With all of this data, you can then create a retargeting list that can be used to send ads to your past visitors or people with similar web profiles.

Want to visualize how third-party cookie data might work? Say you research a particular smart TV on Amazon. Then, you go to another site later in the day and see an ad Amazon advertisement for the same exact product. If you aren't on an Amazon-owned site, it's very possible that this advertisement was triggered by third-party cookie data.

While first-party cookies are accepted automatically, visitors must be informed that they are accepting a third-party cookie due to the amount of data that companies can retain from them.

The bottom line? If you're just aiming to track your website's visitors' behaviors, preferences, and basic demographics only while they're on your website, you probably won't be deeply impacted by this change.

However, if you're a marketer that relies on robust data for online advertising, pop-up ads, or a pinpointed audience-targeting strategy, you'll need to continue to follow the news around this phase-out, and consider alternative first-party strategies, as the phase-out nears.

2. Many marketers expected this phase-out.

While the "death of the third-party cookie" might seem shocking, it certainly wasn't a surprise.

Recently, governments around the world have been investigating and cracking down on data privacy issues. For example, in an October 2019 shakeup, Europe's highest court ruled that users in the EU must actively consent to all cookies when they log on to a website. If not, the website can't receive, use, or track any of the user's cookie data.

The GDPR ruling means that instead of websites notifying new visitors that they were accepting cookies, visitors now have to press an accept button, like the one below, to accept a third-party cookie:

If your website only catered to local or domestic users outside of the affected countries, you might not have been impacted. However, international websites took a major reporting hit as numbers from Google Analytics -- which relies on cookies -- started to appear inaccurately low.

For international brands that relied on Google Analytics, this was a scary reminder that data-driven brands are vulnerable to software-related issues. It also showed us how governance and privacy regulations could dramatically impact our strategies.

Earlier, in August, Google announced it was developing a "Privacy Sandbox." Although Google didn't have a product created when they announced the move, a blog post explained that the tool that could allow marketers to continue to publish and circulate ads to the right audiences without having the same amount of user data.

"We’ve started sharing our preliminary ideas for a Privacy Sandbox -- a secure environment for personalization that also protects user privacy," wrote Justin Schuh, Director of Chrome Engineering, in the Google blog post. "Some ideas include new approaches to ensure that ads continue to be relevant for users, but user data shared with websites and advertisers would be minimized by anonymously aggregating user information, and keeping much more user information on-device only. Our goal is to create a set of standards that is more consistent with users’ expectations of privacy."

In a January 2020 interview with Digiday, Amit Kotecha, a marketing director at data management platform provider Permutive, explained the key features of the proposed Sandbox:

“The most significant item in the Privacy Sandbox is Google’s proposal to move all user data into the [Chrome] browser where it will be stored and processed,” said Kotecha. “This means that data stays on the user’s device and is privacy compliant. This is now table stakes and the gold standard for privacy.”

Between the Privacy Sandbox and GDPR rulings that impacted data tracking, it's become apparent to marketers that the third-party cookie was at risk of governance or other tech company changeups that could render it obsolete. This was so apparent that advertising software firms and publishers were already contemplating alternative solutions before the official news of Google's cookie phase-out broke.

At this point, data management firms, like Permutive, are looking at creating alternative tools for advertisers that more heavily leverage first-party cookies and lump visitor profiles into more anonymous "segments" similar to what Google's Privacy Sandbox is predicted to do.

3. Marketers aren't just concerned about data.

While the elimination of third-party cookies on Chrome will be inconvenient to some, marketers are also concerned about Google's reasoning behind the phase-out.

Without Chrome-based third-party cookie data, you'll still be able to leverage and target Google Ads, which will be powered by Google Chrome's first-party cookies and the Privacy Sandbox tools. However, some ad software and platforms that require third-party data will take a huge hit without support from Chrome.

"This move, while good for consumer privacy (in theory) is likely going to hurt most of the third-party ad platforms that utilize these cookies to generate revenue," says Matthew Barby, HubSpot's Director of Acquisition.

"The big question behind all of this for me is what's motivating Google to phase third-party cookies out? Is it to improve privacy for the end-user or is it to gain a further grip on the ad market by forcing the adoption of Chrome's own first-party cookie, which would likely result in many of those dollars being previously spent on third-party platforms to move in Google's bottom line."

Barby isn't the only marketer to voice these concerns. In fact, in a joint statement, the Association of National Advertising and the American Association of Advertising Agencies called the tech giant out for disrupting healthy competition in the advertising space.

"Google’s decision to block third-party cookies in Chrome could have major competitive impacts for digital businesses, consumer services, and technological innovation," the statement said. "It would threaten to substantially disrupt much of the infrastructure of today’s Internet without providing any viable alternative, and it may choke off the economic oxygen from advertising that startups and emerging companies need to survive."

Later in the statement, the two advertising groups urged Google to push back the third-party cookie "moratorium" until effective and meaningful opportunities were made available to advertisers.

4. This move still opens the door for innovation in advertising

While things look grim for one type of cookie, this might not be a bad thing for skilled and adaptable brands.

Although this move does cause concern, Google and other browsers have still taken a stand for user privacy. As privacy laws continue to arise, this might be a great opportunity to look at other less-vulnerable advertising alternatives just incase another governance renders one of your marketing tactics or processes as obsolete.

Why? As a marketer with an innovative mindset, you should always be asking yourself questions like, "Are we too reliant on this technology?" or "What happens if and when our strategy gets regulated?" Innovative marketers will be able to come up with more clever alternatives and ads that identify with the masses -- aside from just hyper-targeted content or annoying pop-ups.

Another area that could be innovated is the way we leverage and use data. As noted above, data management platforms are now looking to create alternative tools that help advertisers track data in a way that makes the most out of the third-party cookie. While these options might be different from your third-party cookie solutions or require some new strategizing, they would still allow you to target and learn about relevant audiences without getting intrusive.

What to Do Next

Don't panic. At this point, marketers, advertisers, and data engineers alike are actively looking for solutions to determine what will happen next. And, because the third-party cookie was already weakened by Safari and Firefox ad blocking, it likely wasn't the strongest advertising tool anymore anyway.

Right now, the best thing to do as a marketer is to continue to stay up-to-date with news related to third-party cookies and other data privacy moves that could impact your business.

If your advertising strategies rely on third-party data, start considering alternatives now. As you continue to follow the news related to the phase-out, you should also vet any software or solutions that can help you better transition away from this type of cookie.

For example, although marketers are wary of Google's move, the tech giant's Privacy Sandbox could still serve as a valuable alternative for ad targeting. You could also consider strategies or software that can better help you leverage first-party data.

Additionally, you could also revitalize older strategies, like contextual advertising. While third-party data allowed you to place ads directly in front of people who matched certain user profiles, contextual advertising allows you to circulate PPC ads on websites that rank for similar keywords as your ad. This way, if you're selling sports apparel, your PPC ad could show up on sports-oriented websites.

Lastly, to make your brand as safe as possible from future governance or monopoly-related policies, brainstorm even more basic strategies that you can still use to reach your audiences even without cookies, hyper-targeted ads, or mass amounts of data. This will allow you to be less vulnerable to technology, even when you can benefit from the latest tracking software.

Disclaimer: This blog post is not legal advice for your company to use in complying with EU data privacy laws like the GDPR. Instead, it provides background information to help you better understand the GDPR. This legal information is not the same as legal advice, where an attorney applies the law to your specific circumstances, so we insist that you consult an attorney if you’d like advice on your interpretation of this information or its accuracy.

In a nutshell, you may not rely on this as legal advice, or as a recommendation of any particular legal understanding.

Leave a Comment