Google Said Fingerprinting Was Wrong—Now It Lets Advertisers Track 94% of Browsers

In 2019, Google called browser fingerprinting a practice that "subverts user choice and is wrong." Six years later, the company reversed course entirely—and artificial intelligence has turned the technique into something far more powerful than cookies ever were.

What Changed

On December 19, 2024, Google quietly announced that organizations using its advertising products could deploy fingerprinting techniques starting February 16, 2025. The company that once championed user privacy on this issue did a complete about face, opening the door for advertisers to build persistent profiles of users who thought they were browsing anonymously.

The timing was no accident. With third party cookies finally being phased out, Google needed to offer advertisers an alternative tracking mechanism. Fingerprinting—the very technique Google had previously condemned—became that alternative.

How Fingerprinting Actually Works

Traditional cookies are files stored on your device that you can delete. Fingerprinting is fundamentally different. It builds a unique identifier from the technical signals your browser already broadcasts to every website you visit.

These signals include your operating system and browser version, installed plugins and extensions, screen resolution and color depth, timezone and language settings, canvas rendering patterns, WebGL signatures, and audio context processing characteristics.

Individually, these data points seem harmless. Combined, they create a profile so specific that research from the Electronic Frontier Foundation found 83.6% of browsers have a fingerprint unique enough for tracking. More recent studies push that number to 94% or higher.

Enter AI: The Tracking Multiplier

What makes 2026 different is artificial intelligence. Earlier fingerprinting was relatively static—if you changed your browser or updated your OS, the fingerprint broke. AI changed that equation.

Machine learning models now analyze massive volumes of fingerprint data across sites and sessions, correlating subtle behavioral cues that go far beyond hardware specs. Your mouse movement patterns. Your typing speed. How you scroll. The latency between interactions. AI links these behavioral biometrics to your identity even when the technical parameters change.

The result: a system that can re identify users who switch browsers, clear their cache, use incognito mode, or connect through a VPN. Research shows that combining browser and device fingerprints achieves a 99.24% unique identification rate.

The Regulator Response

The UK's Information Commissioner's Office called Google's reversal "irresponsible," warning it "removes user choice and control over personal data collection." The ICO has said it will take enforcement action against organizations that deploy fingerprinting without meeting legal requirements.

Under GDPR, fingerprinting data qualifies as personally identifiable information, requiring explicit consent before collection. Maximum penalties reach €20 million or 4% of global annual revenue. The European Data Protection Board reinforces these consent requirements under the ePrivacy Directive.

But enforcement is the problem. Unlike cookies, which leave visible traces and can be audited, fingerprinting operates silently. Users cannot see it happening, cannot delete their fingerprint, and often cannot opt out. Regulators are now developing automated auditing tools to detect noncompliant fingerprinting—but the technology is evolving faster than oversight.

Real World Consequences

Fingerprinting is not just about ads. Researchers have documented algorithmic price discrimination based on device profiles. Mac users have been shown higher travel fares than Windows users visiting the same booking sites. Your browser's fingerprint can influence what prices you see, what content appears, and how companies assess your value as a customer.

For journalists and activists in authoritarian regimes, the stakes are higher. Unique browser fingerprints allow governments to track dissidents despite their use of VPNs or private browsing—undermining tools designed specifically for safety.

What You Can Do

Standard privacy measures offer limited protection against fingerprinting, but some tools help:

• Brave randomizes fingerprinting signals by default
• Firefox offers Enhanced Tracking Protection that blocks known fingerprinting scripts
• Tor Browser standardizes all browser characteristics to make every user look identical
• uBlock Origin and CanvasBlocker can disrupt specific fingerprinting techniques

The most effective defense is reducing your browser's uniqueness. Using default settings, avoiding unusual plugins, and choosing browsers with built in fingerprint protection all help. But until regulations catch up with enforcement, the uncomfortable truth remains: the company that controls 65% of the browser market just told advertisers they can fingerprint every one of its users.