Ghostery blocks HTTP requests and redirects according to their source address in several ways:
Blocking third-party tracking scripts that are used by websites to collect data on user behavior for advertising, marketing, site optimization, and security purposes. These scripts, also known as "tags" or "trackers", are the underlying technology that places tracking cookies on consumers' browsers.
Continuously curating a "script library" that identifies when new tracking scripts are encountered on the Internet and automatically blocking them.
Creating "Whitelists" of websites where third-party script blocking is disabled and other advanced functionality for users to configure and personalize their experience.
When a tracker is blocked, any cookie that the tracker has placed is not accessible to anyone but the user and thus cannot be read when called upon.
Reporting
Ghostery reports all tracking packages detected, and whether Ghostery has blocked them or not, in a "findings window" accessible from clicking on the Ghostery Icon in the browser. When configured, Ghostery also displays the list of trackers present on the page in a temporary purple overlay box.
History and use
Originally developed by David Cancel, Ghostery was acquired by Evidon in January 2010. Ghostery is among the most popular browser extensions for privacy protection. In 2014, Edward Snowden suggested consumers use Ghostery along with other tools to protect their online privacy. Ghostery, Inc. made their software source code open for review in 2010, but did not release further versions of the source code after that. On February 22, 2016, the company released the EULA for Ghostery browser extension, as a proprietary closed-source product. Cliqz GmbH acquired Ghostery from Evidon Inc. in February 2017. Cliqz is a German company majority-owned by Hubert Burda Media. Ghostery no longer shares data of any kind with Evidon. On March 8, 2018, Ghostery shifted back to an open source development model and published their source code on GitHub, saying that this would allow third-party contributions as well as make the software more transparent in its operations. The company said that Evidon's business model "was hard to understand and lent itself to conspiracy theories", and that its new monetization strategy would involve affiliate marketing and the sale of ad analytics data. In May 2018, in the distribution of an email promoting changes to Ghostery's practices to comply with General Data Protection Regulation, hundreds of user email addresses were accidentally leaked by listing them as recipients. Ghostery apologized for the incident, stating that they stopped the distribution of the email when they noticed the error, and reported that this was caused by a new in-house email system that accidentally sent the message as a single email to many recipients, rather than sending it individually to each user.
Criticism
Under its former owner Evidon, Ghostery had an opt-in feature called GhostRank. GhostRank could be enabled to "support" its privacy function. GhostRank took note of ads encountered and blocked, then sent that information back to advertisers so they could better formulate their ads to avoid being blocked. Though Ghostery claims that the data is anonymized, patterns of web page visits cannot truly be anonymized. Not everyone sees Evidon's business model as conflict-free. Jonathan Mayer, a Stanford graduate student and privacy advocate, has said: "Evidon has a financial incentive to encourage the program's adoption and discourage alternatives like Do Not Track and cookie blocking as well as to maintain positive relationships with intrusive advertising companies". Since July 2018, with version 8.2, Ghostery shows advertisements of its own to users. Burda claims that the advertisements do not send personal data back to their servers and that they do not create a personal profile.