Recently, I read that Facebook ads are moving towards retargeting and got interested deeper into subject. Essentially, retargeting is technique advertisers use that tracks purchase intent by putting cookies into your browser and when you visit another website within ad network you will see ad for item you “wanted to buy”.
In order this to for, both publisher and advertiser need to work together. Publisher needs add couple of lines of javascript and publisher need to be able to read this info across sites. In most cases, javascript inserts iframe from adnetwork domain. Iframe script sets cookies for both host domain and remote adnetwork domain.
However, Same Origin policy do not let iframes read/set content from parent domain. Is there something I’m missing here? Can someone explain how this technique actually works?
The javascript already calls the advertising company (through httpxml requests I guess) to serve the ads. No reason it can’t also call that company to post data to their servers about where and who it’s calling from (in fact they’ve been doing that for a long time, that’s how Google amasses their gigabytes of data about your browsing behaviour).
The calculations are all done on the server, not the browser. All the browser does is send the extra information to the server of the advertising agency, together with the ip address and whatever else it can fish out of your computer (usernames, passwords, who knows what).
2