Glossary
Plain-language explanations for encryption, tracking, compliance, and security concepts.
Security
OS-level virtualization that packages apps and dependencies into isolated runtime units.
Web Security
Security header restricting resource loading/execution to mitigate XSS and data exfiltration.
Privacy
Privacy theory (Nissenbaum) focusing on appropriate information flows within social contexts and norms.
Privacy
Concept that privacy norms depend on context, roles, and appropriate information flow.
Tracking
HTTP state mechanism storing name/value pairs with scope and expiry attributes.
Consent
User interface for presenting cookie/storage purposes and collecting consent signals.
Consent
Permission signal for cookie/storage-based processing purposes and vendors.
Tracking
Browser privacy feature partitioning third-party state by top-level site to reduce cross-site correlation.
Tracking
Identifier matching between ad-tech parties to align user IDs across domains.
Tracking
It's like a sticky note a website leaves on your browser to remember you next time.
Privacy
US law regulating collection of personal information from children under 13.
Web Security
Cross-Origin Resource Sharing policy controlling cross-origin requests via response headers.
Threats
Automated replay of breached credentials across services.
Encryption
CA-published list of revoked certificates; freshness and size trade-offs affect practical effectiveness.
Tracking
Identity resolution across devices and platforms.
Tracking
Cross-origin user linkage across web contexts.
Security
Software or hardware for key management and transaction signing.
Encryption
Mathematical primitives and protocols for security.
Web Security
Unwanted state-changing requests via authenticated browser context.
Security
Operational security best practices that reduce exposure to common attacks.
Ui/Ux
It’s like a website hiding the cancel button so you don’t leave.
Privacy
Manipulative UI patterns that distort user choice.
Threats
Overlay networks and hidden services not indexed by standard search; frequently associated with illicit markets and leaks.
Data Management
Quality property ensuring personal data is correct, current, and fit for intended purpose.