3 minute read

Have you ever wondered why the same ads appear on your phone and your computer? You searched for running shoes once, on one device, and now every screen you own is selling you running shoes.

Or worse: the surprise anniversary trip your significant other was quietly researching shows up as hotel ads in your browser — surprise ruined by an ad network.

Then there are the stranger cases. Health supplements for a condition you only searched about once, late at night. Hair-growth treatments arriving on cue, as if the internet noticed before you said anything to anyone. These moments feel like being watched, because functionally, you are.

None of this is coincidence, and none of it requires anyone to “listen through your microphone.” It is cheaper and easier than that. Here is the actual machinery.

How they connect your devices

Advertising systems tie your screens together in three main ways, usually in combination:

1. Logged-in identity. If you use the same account — email, browser account, social login — on your phone and your laptop, the connection is trivial. You told them it’s you. Everything you do while signed in feeds one profile, and ads bought against that profile follow it to every device it appears on.

2. Shared context. Devices on the same home Wi-Fi appear to the outside world with the same network address. Ad systems treat “these devices are always together, evenings and weekends” as a household — which is exactly how your partner’s vacation research becomes your ad. The profile isn’t just you; it’s everyone you live with, blurred together and sold as a unit.

3. Fingerprinting — the glue when you’re not logged in. Even with no account, no cookies, and private mode, your browser reveals dozens of characteristics: hardware quirks, fonts, screen, timezone, rendering details. Combined, they form a fingerprint unique enough to recognize you across sites and sessions — we’ve written a deep dive on how that works. Fingerprinting is what lets trackers keep the thread when the easy identifiers are missing, and it happens silently, without consent, beyond the reach of cookie banners.

Why this is more than an annoyance

Spooky ads are the visible symptom. The profile behind them is the real issue.

It infers things you never disclosed. The hair-growth ad isn’t responding to what you said — it’s responding to what your behavior implies: your searches, the pages you lingered on, your demographic cluster. The same inference machinery classifies people by health worries, financial stress, relationship status, and beliefs. You never filled in a form; the profile filled itself in.

It leaks inside your household. The vacation example is funny until it’s a medical condition, a job search, or a divorce lawyer. Household-level targeting means one person’s private research can surface on another person’s screen.

It sets your prices. Profiles aren’t only used to pick which ad you see — they help decide what price you see. We’ve collected documented cases of exactly this in Are You Paying More Because Your Digital Fingerprint Says So?

It follows your work. For journalists, lawyers, and researchers, the same tracking connects your research trail across sessions — which sites, which topics, how often. What is a marketing profile for most people is an intelligence leak for professionals.

What you can actually do

Be honest about the mechanisms and the fixes follow:

  • Logged-in tracking: only you can address this — separate accounts, fewer always-signed-in sessions, and knowing that while signed in, you are the identifier.
  • Network-level correlation: a VPN changes what network you appear from, which blunts household-level and location-based correlation. A VPN is complementary to what we do — genuinely useful, but not enough on its own: your fingerprint stays exactly the same when your IP changes, so a fingerprinting site can reconnect the thread the moment you arrive. New IP, same you.
  • The fingerprinting layer: this is where CloakID works. CloakID is a browser extension paired with a secure EU processing gateway that presents supported sites with a common, consistent persona instead of your unique fingerprint — you blend into a crowd instead of standing out. Protection is explicit and per-site, and the extension always shows you its real state: protected, partially protected, or not protected. No tool makes you untraceable, and we won’t claim otherwise — but removing the fingerprint from the equation takes away the glue that keeps profiles connected when everything else is cleared.

CloakID is currently in a private design-partner pilot — a small, invited group shaping it in daily use. If the scenarios in this post are the reason you care about privacy, we’d like to hear from you.