11 ms·

I pay for Youtube Premium, which uses third-party cookies to not show ads on embedded videos. https://privacysandbox.com https://privacysandbox.com talks about

by delish 2y ago

I pay for Youtube Premium, which uses third-party cookies to not show ads on embedded videos. https://privacysandbox.com https://privacysandbox.com talks about advertising, but not "logged in elsewhere" functionality. Does Youtube or Google have something ready, or will all Youtube Premium subscribers see ads on embedded videos?

janpieterz 2y ago
There is also a Federated Credential Management (FedCN) API coming in, that should help somewhat. https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API
- delish 2y ago
  Thank you! Will look!
wlll 2y ago
Perhaps they should switch to first party cookies?
- bitvoid 2y ago
  How would that work on embedded videos on sites outside of YouTube/Google, which is what the parent comment is talking about?
  - deleted 2y ago
    [deleted]
  - 93po 2y ago
    Aren't those just iframes, which is effectively just youtube loading inside an existing web page instead of its own tab. I would assume first party cookies would work just fine for this.
    - medmunds 2y ago
      Nope, an iframe on an unrelated site is exactly what turns it into a third party cookie. (The user and the site they're visiting are the first two parties; the embedded site is the third party.) Put another way, an ad iframe loading a tracking (identity) cookie is indistinguishable from a YouTube iframe loading a login (identity) cookie.
      - 93po 2y ago
        i still don't follow. i guess my point is, when an embedded video loads for me, youtube still knows that it's me. it gives me the same recommended videos i'd get if i were on youtube.com directly. so i assume since i pay for premium, it'd also skip ads on embedded videos too. i wouldnt know because i use ublock.
        medmunds 2y ago
        > when an embedded video loads for me, youtube still knows that it's me If/when third party cookie blocking is fully deployed, this won't be true. Your browser won't send YouTube's session cookie to YouTube when it's loaded in an iframe on an unrelated site, so YouTube won't know you're a premium user.
        93po 2y ago
        i appreciate the explanation! thanks!
dspillett 2y ago
> Youtube Premium, which uses third-party cookies to not show ads on embedded videos The third party cookies don't control ads in embedded videos, there are currently no ads in embedded videos whether you have paid for premium or not. I have a bookmarklet that converts a youtube page to an embed for this reason, for when I get sick of seeing the same couple of adverts on a loop.
- semiquaver 2y ago
  I see ads in YouTube embeds all the time.
  - dspillett 2y ago
    I can't say I remember doing so, unless you count sponsor segments and other inline ads like those at the end of most clips. I certainly don't when using the inline-from-youtube-itself-via-bookmarklet trick.
- nenaoki 2y ago
  It's whitelisted based on the embedding domain. https://support.google.com/youtube/answer/132596 https://support.google.com/youtube/answer/132596 >Ads appear on brand safe sites: YouTube works diligently so that our advertisers' brands appear on sites that reflect our respective core values. Our systems closely evaluate websites and their content against various factors when finding out whether to turn on In-stream ads on YouTube embeds. These factors include a strict set of guidelines on content like adult imagery, violence, inappropriate and hateful language, and sites that promote infringement.
medmunds 2y ago
The recommended solution for embedded content is the Storage Access API, which has broad browser support. (I don't know that YouTube has implemented it yet, but I'd be surprised if it's not there soon.) https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API https://developer.mozilla.org/en-US/docs/Web/API/Storage_Acc... https://developers.google.com/privacy-sandbox/3pcd/storage-access-api https://developers.google.com/privacy-sandbox/3pcd/storage-a...
- lordofmoria 2y ago
  The Storage Access API is an unmitigated pile of garbage. Google's page on it admits as much (https://developers.google.com/privacy-sandbox/3pcd/storage-access-api https://developers.google.com/privacy-sandbox/3pcd/storage-a...). From Google's own page: "Work is continuing to resolve all remaining blocking issues, before standardizing the API."
  - medmunds 2y ago
    Oh, that's worrisome. I'm trying to implement it in our embedded content soon, because some of our customers got caught up in Chrome's third party cookie blocking 1% trial that started a week or two ago. Any specific problems you ran into that you could share?

by delish 2y ago

janpieterz 2y ago

There is also a Federated Credential Management (FedCN) API coming in, that should help somewhat. https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API

delish 2y ago
Thank you! Will look!

wlll 2y ago

Perhaps they should switch to first party cookies?

bitvoid 2y ago
How would that work on embedded videos on sites outside of YouTube/Google, which is what the parent comment is talking about?
- deleted 2y ago
  [deleted]
- 93po 2y ago
  Aren't those just iframes, which is effectively just youtube loading inside an existing web page instead of its own tab. I would assume first party cookies would work just fine for this.
  - medmunds 2y ago
    Nope, an iframe on an unrelated site is exactly what turns it into a third party cookie. (The user and the site they're visiting are the first two parties; the embedded site is the third party.) Put another way, an ad iframe loading a tracking (identity) cookie is indistinguishable from a YouTube iframe loading a login (identity) cookie.
    - 93po 2y ago
      i still don't follow. i guess my point is, when an embedded video loads for me, youtube still knows that it's me. it gives me the same recommended videos i'd get if i were on youtube.com directly. so i assume since i pay for premium, it'd also skip ads on embedded videos too. i wouldnt know because i use ublock.
      - medmunds 2y ago
        > when an embedded video loads for me, youtube still knows that it's me If/when third party cookie blocking is fully deployed, this won't be true. Your browser won't send YouTube's session cookie to YouTube when it's loaded in an iframe on an unrelated site, so YouTube won't know you're a premium user.
        93po 2y ago
        i appreciate the explanation! thanks!

dspillett 2y ago

> Youtube Premium, which uses third-party cookies to not show ads on embedded videos The third party cookies don't control ads in embedded videos, there are currently no ads in embedded videos whether you have paid for premium or not. I have a bookmarklet that converts a youtube page to an embed for this reason, for when I get sick of seeing the same couple of adverts on a loop.

semiquaver 2y ago
I see ads in YouTube embeds all the time.
- dspillett 2y ago
  I can't say I remember doing so, unless you count sponsor segments and other inline ads like those at the end of most clips. I certainly don't when using the inline-from-youtube-itself-via-bookmarklet trick.
nenaoki 2y ago
It's whitelisted based on the embedding domain. https://support.google.com/youtube/answer/132596 https://support.google.com/youtube/answer/132596 >Ads appear on brand safe sites: YouTube works diligently so that our advertisers' brands appear on sites that reflect our respective core values. Our systems closely evaluate websites and their content against various factors when finding out whether to turn on In-stream ads on YouTube embeds. These factors include a strict set of guidelines on content like adult imagery, violence, inappropriate and hateful language, and sites that promote infringement.

medmunds 2y ago

The recommended solution for embedded content is the Storage Access API, which has broad browser support. (I don't know that YouTube has implemented it yet, but I'd be surprised if it's not there soon.) https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API https://developer.mozilla.org/en-US/docs/Web/API/Storage_Acc... https://developers.google.com/privacy-sandbox/3pcd/storage-access-api https://developers.google.com/privacy-sandbox/3pcd/storage-a...

lordofmoria 2y ago
The Storage Access API is an unmitigated pile of garbage. Google's page on it admits as much (https://developers.google.com/privacy-sandbox/3pcd/storage-access-api https://developers.google.com/privacy-sandbox/3pcd/storage-a...). From Google's own page: "Work is continuing to resolve all remaining blocking issues, before standardizing the API."
- medmunds 2y ago
  Oh, that's worrisome. I'm trying to implement it in our embedded content soon, because some of our customers got caught up in Chrome's third party cookie blocking 1% trial that started a week or two ago. Any specific problems you ran into that you could share?