Our tracker protection lists power Microsoft Edge, Mozilla Firefox, other partners, and our own award-winning privacy products.
pixel.example-analytics.net ADDAcme Data Corp
AdvertisingCross-site advertising pixel with persistent user identifiers. Sets long-lived cookies with unique device IDs and deploys canvas fingerprinting as a fallback identification mechanism across 1,200+ publisher sites.
cdn.trackify-demo.io MOVEDataFlow Systems
Fingerprinting — InvasiveMoving from Content to Fingerprinting (Invasive). Uses canvas and audio API abuse to generate device fingerprints, combined with navigator enumeration and WebRTC local IP detection across 890+ publisher sites.
t.metrix-example.com ADDMetrix Analytics Inc
AnalyticsHigh-prevalence analytics SDK present on 3,400+ sites including government domains. Sets 730-day persistent cookies with unique visitor IDs and builds cross-site behavioral profiles for cohort-based audience segmentation.
These are fictional examples for illustration purposes only.
Tracking is the collection of data regarding a particular user's or device's activity across multiple websites or applications that aren't owned by the data collector, and the retention, use or sharing of that data. We will also classify as trackers domains which collect, share, retain, or use data to enable tracking by other services.
Our definition focuses on third-party data collection AND retention. So, for example, our tracker definition doesn't apply to sites that log an IP address but don't save that information in a database. And the collection must be across context, so our tracker definition also doesn't apply to cases where there is solely a first-party relationship with the user, for example the site only collects and retains information on site visitors. Finally, our definition also focuses on particular users and devices, so data that is immediately aggregated doesn't apply.
We may include domains on our lists that are technically in a position to easily track users and fall into one of our defined tracker categories below, even if we cannot confirm tracking, as defined above, with technical or other evidence.
Our lists of trackers are categorized according to the following definitions.
A tracker which also displays or enables ads or marketing offers. These types of ads can track your personal information and expose you to malware, even if you don't interact with them.
A tracker which collects your information and may build a profile based on your online activity that can be connected with your real name or other unique identifier.
A tracker may be classified as anti-fraud if its explicit purpose is to prevent or detect fraud and does not utilize data collected in a third-party context (including IP addresses and user identifiers) for any purpose not directly related to fraud detection or prevention, including the use and sharing of such data to enable tracking of particular users or devices by other services.
A tracker may be classified as a Consent Manager if its explicit and primary purpose is to manage consent preferences and does not utilize data collected in a third-party context (including IP addresses and user identifiers) for any purpose not directly related to managing consent preferences, including the use and sharing of such data to enable tracking of particular users or devices by other services.
A domain may be classified as cryptomining if it can cause the user's browser to mine cryptocurrencies without explicit user opt-in.
A tracker which commonly appears in emails. In addition to the main Email category, we will maintain a sub-category called Email Aggressive. This sub-category includes additional email tracker domains which serve images or links that when blocked may alter expected functionality. Determinations about whether a domain is moved to the Email Aggressive category seek to balance usability with privacy harm and will be based on error reporting, internal testing, and user experiments as described in the Content portion of our list below.
A tracker may be classified as a fingerprinter if it identifies particular users or devices based on the properties of the browser, device, network, or any other properties of the computing environment, without using client-side storage of cookies or other data.
General fingerprinting
A tracker may be classified as a general fingerprinter if it uses browser or device features or properties in unintended ways to identify and track a particular user or device.
Invasive fingerprinting
A tracker may be classified as an invasive fingerprinter if it uses an API to extract information about a particular user's computing environment when the API was not designed to expose such information.
A tracker which records all actions a user takes on a webpage in order to recreate the user's session may be classified as a replay script.
A tracker may be classified as social if it uses tracking techniques that allow a social networking service to track your web browsing activities even when you are not on the social network's website or app.
Every domain on our lists goes through a structured evaluation that combines automated detection with expert review. Our process analyzes multiple dimensions of tracking behavior and compatibility testing to determine whether a domain meets our definition and how it should be classified.
We measure how many websites and apps load a domain as a third party, identifying its reach across the web including its presence on specific categories of websites.
We analyze the types of requests a domain makes and inspect URLs for tracking parameters, campaign IDs, and high-entropy identifiers.
We examine cookie names, durations, scopes, and values. Long-lived cross-site cookies with unique identifiers are strong indicators of tracking.
We detect JavaScript API abuse including canvas fingerprinting, audio context fingerprinting, WebRTC local IP extraction, and excessive collection of browser and device properties.
We trace domain ownership through web research, DNS records, WHOIS data, corporate registrations, and subsidiary relationships to map the full network of domains operated by each tracking entity.
We evaluate whether blocking a domain causes site or app breakage by reviewing compatibility reports, automated and manual testing, and checking whether the domain serves functional content alongside tracking.
"Trackers" are those services that we've identified and determined meet the definition of tracking above.
Disconnect compiles several lists of trackers for browsers, apps, full device, and network based protection. Our Services list powers our browser extensions and are utilized by Mozilla's Firefox, Microsoft's Edge, and other browsers to block certain tracking domains. Our Services_Relay list is intended to be used to mask a user's IP address transmitted to the domains listed, but not block those domains. Both our Services and Services_Relay lists can be found here along with a change log and notes.
Disconnect strives to find the balance between privacy, security, usability and promoting a better Internet for everyone. These concerns drive our decisions in regards to trackers we block and don't block. We do not accept payment for unblocking or unlisting trackers.
We unblock or unlist trackers to provide a better user experience, based on the three types of evidence listed below. The impact of blocking a tracking domain altogether and masking an IP address transmitted to a tracking domain may be different, so the domains included in our Services blocklist and our Relay IP masking lists also differ. Unblocked tracker domains will appear in what we call the Content portion of our Services list. For some of our products, users can choose to block this Content portion of the list as well.
We also generally unblock, and place into our Content category, tracking domains that are in a position to track, but make a public, legally binding commitment not to track as we define that term.
Although we support sites that commit to respect users' Do Not Track (DNT) preferences and agree to comply with DNT as defined by the Electronic Frontier Foundation (https://www.eff.org/dnt-policy) such compliance is not grounds for unblocking at this time due to disparities and technical inability to persist DNT headers across browsers and products.
All of the trackers we've identified but don't block in our Services list, along with a change log and notes, can be found here.
Recent changes to our tracker protection lists. Our lists are continuously updated and improved.
Updates Flipp, Amazon, Wingify entities
Sync tracking protection lists from internal-lists
Sync tracking protection lists from internal-lists (#404)
Entity updates.
Removals
List updates
Removes `moikrug.ru` from `Yandex`
Moves `score.juicyscore.com` to `Anti-fraud`
List updates.
List updates.
Update copyright year
List updates.
List updates.
List updates.
List updates.
Entity updates.
List updates.
Entity updates.
List updates.
List updates.
List update.
Entity updates.
Entity updates.
Fixes dupe domains in entities from prev commit.
Adds and removes domains, entity updates
Adds and removes domains.
Entity updates
Entity updates
Adds and removes trackers, entity updates
Recategorize Didomi domain.