The ways out¶

Nothing is broken into. The data leaves through actions a person takes on purpose: opening a page, carrying a phone, paying for something, signing in. Each of these layers is a place where an ordinary and wanted action doubles as a disclosure, which is why none of it arrives as a moment to refuse. The leak is folded into the use.

The browser¶

A click is not needed; opening the page is already the event. Third-party cookies still set an identifier that follows a person between sites. Tracking pixels, single transparent images embedded in pages and emails, report that a given person opened a given thing at a given time. Fingerprinting assembles a near-unique signature from settings that look harmless one at a time: fonts installed, screen size, time zone, the quirks of how a browser draws a hidden image. And the request that puts the page’s advertising slot up for auction carries a description of the reader out to every bidder at once. By the time the page has finished rendering, several firms already have a record of the visit.

The phone¶

The advertising identifier is a stable label the operating system hands to apps, and it ties a person’s app life together the way a cookie ties their browsing. Around it sit the embedded kits: analytics, advertising, and location code bundled inside apps that ship data onward under the app’s name. Permissions widen the opening, since an app granted location or contacts for one honest reason keeps the access for every other. Background collection continues while the phone sits in a pocket, and the store and the operating system add their own telemetry beneath all of it.

The transaction¶

Paying is itself a disclosure. A loyalty card trades a small discount for a complete record of what a person buys and when, which is the actual bargain on offer. Card-linked marketing lets purchase data gathered by banks and card networks be aggregated and sold on. E-receipts and the email or phone number given at a checkout serve as match keys, tying an in-store purchase to the same profile the browser and the phone have been feeding. The trolley becomes another stream.

The identity¶

The login is where scattered sessions are stitched into one person. Signing in with an existing account, the “log in with Google” button, carries an identity from site to site. Newsletter sign-ups, competitions, and web forms hand over the email address that serves as the market’s join key, and once a business holds it, it can upload its customer list to be matched against the wider market and enriched with attributes it never collected. The email is the universal key precisely because a person reuses it everywhere by design.

The network¶

Below the site and the app sits the pipe. An internet provider or mobile carrier sees which domains are requested and, historically, some have sold subscriber data derived from it. Public wireless networks add their own vantage point. The industry’s shift to server-side collection, moving tracking off the browser and onto the advertiser’s own machines, runs straight through the network in a form a browser’s defences never see and cannot block. What the pipe carries, the pipe can read.

The onward flow¶

Collection is only the first hop. From there data moves again, through licensing deals and data-sharing arrangements, through the clean rooms where two firms match their sets without quite handing them over, and through enrichment services that append bought attributes to a company’s own records. Breaches and leaks release the same profiles into wider and less governed circulation, where they are recombined and resold. A person’s exposure keeps growing after the last thing they did, along paths they will never see and could not audit.

Riding a wanted action¶

The common thread is that each vector travels inside something the person had every reason to do. A break-in offers a door to bolt; browsing, paying, and signing in offer none, because refusing them means refusing the ordinary use they came wrapped in. Reducing exposure works less by blocking a single entrance than by giving away less at each ordinary step.

Last reviewed: 2026-07-17.