Tales from the Porn: A Comprehensive Privacy Analysis of the Web Porn Ecosystem Pelayo Vallina Álvaro Feal Julien Gamba IMDEA Networks Institute / IMDEA Networks Institute / IMDEA Networks Institute / Universidad Carlos III de Madrid Universidad Carlos III de Madrid Universidad Carlos III de Madrid
[email protected] [email protected] [email protected] Narseo Vallina-Rodriguez Antonio Fernández Anta IMDEA Networks Institute / ICSI IMDEA Networks Institute
[email protected] [email protected] ABSTRACT Modern privacy regulations like the EU General Data Pro- Pornographic websites are among the most visited web pages tection Regulation (GDPR) [29] and California’s Consumer globally. Because of the sensitive content that they offer, mod- Privacy Act (CCPA) [16] consider sexual information of an ern privacy regulations try to control user tracking activities individual as highly sensitive data. Most privacy regulations in such sites. However, little is known about the privacy risks also require organizations with an online presence to re- that users face when visiting such sites and their regulatory quest informed consent from users prior to any data col- compliance. In this paper, we present the first comprehensive lection [16, 29, 40, 42]. However, as in the case of regular and large-scale analysis of 6,843 porn websites. We provide websites, pornographic ones also integrate third-party ad- an exhaustive behavioral analysis of the use of tracking meth- vertising and analytics services with the capacity to track ods by these services, their concerning lack of encryption and users’ interaction with such services and, therefore, poten- cookie consent forms, and their lack of regulatory compli- tially infer a visitor’s sexual orientation.