Tracking sex: The implications of widespread sexual data leakage and tracking on porn websites

Abstract

This article explores tracking and privacy risks on pornography websites. Our analysis of 22,484 pornography websites indicated that 93% leak user data to a third-party. Tracking on these sites is highly concentrated by a handful of major companies, which we identify. We successfully extracted privacy policies for 3856 sites, 17% of the total. The policies were written such that one might need a 2-year college education to understand them. Our content analysis of the sample’s domains indicated 44.97% of them expose or suggest a specific gender/sexual identity or interest likely to be linked to the user. We identify three core implications of the quantitative results: (1) the unique/elevated risks of porn data leakage versus other types of data, (2) the particular risks/impact for “vulnerable” populations, and (3) the complications of providing consent for porn site users and the need for affirmative consent in these online sexual interactions.

Keywords

Consent data pornography privacy privacy policies sexuality surveillance third-party request tracking vulnerable populations

Get full access to this article

View all access options for this article.

References

Alexa (2018a) How are Alexa’s traffic rankings determined? Available at: https://support.alexa.com/hc/en-us/articles/200449744-%20How-are-Alexa-s-traffic-rankings-determined-

Alexa (2018b) The top 500 sites on the web. Available at: https://www.alexa.com/topsites

Banet-Weiser

Miltner

(2016) #MasculinitySoFragile: culture, structure, and networked misogyny. Feminist Media Studies 16(1): 171–174.

Baraniuk

(2015) Ashley Madison: “suicides” over website hack. BBC News, 24 August. Available at: https://www.bbc.com/news/technology-34044506

Barker

(2014) The “problem” of sexual fantasies. Porn Studies 1(1–2): 143–160.

Barth

de Jong

MDT

(2017) The privacy paradox—investigating discrepancies between expressed privacy concerns and actual online behavior—a systematic literature review. Telematics and Informatics 34: 1038–1058.

Baruh

Popescu

(2017) Big data analytics and the limits of privacy self-management. New Media & Society 19(4): 579–596.

BBC News (2012) Porn site breached in hack attack. Available at: https://www.bbc.com/news/technology-17339508

Binns

Lyngs

Van Kleek

, et al. (2018) Third party tracking in the mobile ecosystem. In: Websci ’18: 10th ACM conference on web science Amsterdam. Available at: https://arxiv.org/pdf/1804.03603.pdf

10.

Butler

(1993) Bodies That Matter. New York: Routledge.

11.

Campbell

Carlson

(2002) Panopticon.com: online surveillance and the commodification of privacy. Journal of Broadcasting & Electronic Media 46(4): 586–606.

12.

Chun

Friedland

(2015) Habits of leaking: of sluts and network cards. Differences 26(2): 1–28.

13.

Citron

(2019) Sexual privacy. The Yale Law Journal 128: 1870–1960.

14.

Cox

(2016) Another day, another hack: is your fisting site updating its forum software? Motherboard, 10 May. Available at: https://motherboard.vice.com/en_us/article/qkjj4p/rosebuttboard-ip-board

15.

Cox

(2018) Thousands of bestiality website users exposed in hack. Motherboard, 29 March. Available at: https://motherboard.vice.com/en_us/article/evqvpz/bestiality-website-hacked-troy-hunt-have-i-been-pwned

16.

Cranor

Reagle

Ackerman

(2000) Beyond concern: understanding net users’ attitudes about online privacy. In: The Internet upheaval: raising questions, seeking answers in communications policy, pp. 47–70. Available at: https://arxiv.org/html/cs/9904010/report.htm

17.

Crenshaw

(1989) Demarginalizing the intersection of race and sex: a Black feminist critique of antidiscrimination doctrine, feminist theory and antiracist politics. University of Chicago Legal Forum: 1(8): 139–167.

18.

Custers

(2016) Click here to consent forever: expiry dates for informed consent. Big Data & Society 3(1): 1–6.

19.

Custers

van der Hof

Schermer

(2014) Privacy expectations of social media users: the role of informed consent in privacy policies. Policy & Internet 6(3): 258–295.

20.

Delamater

(2015) What “yes means yes” means for New York schools: the positive effects of New York’s efforts to combat campus sexual assault through affirmative consent. Albany Law Review 792: 591.

21.

Dougherty

(2015) Yes means yes: consent as communication. Philosophy & Public Affairs 43(3): 224–253.

22.

Englehardt

Narayanan

(2016) Online tracking: a 1-million-site measurement and analysis. In: Proceedings of the 2016 ACM SIGSAC conference on computer and communications security, pp. 1388–1401. Available at: https://www.cs.princeton.edu/~arvindn/publications/OpenWPM_1_million_site_tracking_measurement.pdf

23.

Felten

Schneider

(2000) Timing attacks on web privacy. In: Proceedings of the 7th ACM conference on computer and communications security, pp. 25–32. Available at: http://www.cs.jhu.edu/~fabian/courses/CS600.424/course_papers/webtiming.pdf

24.

Fox

Pettersson

Mackintosh

(2019) Where being gay is illegal around the world. CNN, 8 April. Available at: https://edition.cnn.com/2019/04/03/world/same-sex-laws-map-intl/index.html

25.

Franks

(2017) Democratic surveillance. Harvard Journal of Law & Technology 30(2): 425–489.

26.

Geuss

(2012) Porn site Digital Playground hacked, hackers say “too enticing to resist.” Ars Technica. Available at: https://arstechnica.com/information-technology/2012/03/porn-site-digital-playground-hacked-hackers-say-too-enticing-to-resist/

27.

Greene

Shilton

(2018) Platform privacies: governance, collaboration, and the different meanings of “privacy” in iOS and Android development. New Media & Society 20(4): 1640–1657.

28.

Griffin

(2017) Pornhub hack: millions of people using adult video site could have been spied on. The Independent, 11 October. Available at: https://www.independent.co.uk/life-style/gadgets-and-tech/news/pornhub-hack-porn-youporn-video-virus-browser-safe-watch-free-pornographic-a7994686.html

29.

Gross

(2001) Up from Invisibility: Lesbians, Gay Men, and the Media in America. New York: Columbia University Press.

30.

Habib

Colnago

Gopalakrishnan

, et al. (2018) Away from prying eyes: analyzing usage and understanding of private browsing. In: Proceedings of the fourteenth symposium on usable privacy and security, pp. 159–175. Available at: https://www.usenix.org/system/files/conference/soups2018/soups2018-habib-prying.pdf

31.

Holsti

(1969) Content Analysis for the Social Sciences and Humanities. Reading: Addison-Wesley.

32.

Hunt

(2018) Pwned websites. Available at: https://haveibeenpwned.com/PwnedWebsites

33.

Isidore

Goldman

(2015) Ashley Madison hackers post millions of customer names. CNN Tech, 18 August. Available at: https://money.cnn.com/2015/08/18/technology/ashley-madison-data-dump/index.html

34.

Kennedy

(2016) Post, Mine Repeat: Social Media Data Mining Becomes Ordinary. London: Palgrave.

35.

Kleinman

(2017) Porn sites get more visitors each month than Netflix, Amazon and Twitter combined. Huffington Post, 4 May. Available at: https://www.huffingtonpost.com/2013/05/03/internet-porn-stats_n_3187682.html

36.

Krippendorff

(1980) Content Analysis: An Introduction to Its Methodology. London: SAGE.

37.

Krippendorff

(2010) Krippendorff’s alpha. In: Salkind

(ed.) Encyclopedia of Research Design. Thousand Oaks, CA: SAGE, pp. 669–673.

38.

Krishnamurthy

Wills

(2006) Generating a privacy footprint on the internet. In: Proceedings of the 6th ACM SIGCOMM conference on internet measurement, pp. 65–70. Available at: http://web.cs.wpi.edu/~cew/papers/imc06.pdf

39.

LaRose

Rifon

(2006) Your privacy is assured—of being disturbed: websites with and without privacy seals. New Media & Society 8(6): 1009–1029.

40.

Lee

(2013) Top porn sites “pose growing malware risk” to users. BBC News, 12 April. Available at: https://web.archive.org/web/20141125065546/http://www.bbc.co.uk/news/technology-22093141

41.

Lenhart

Ybarra

Price-Feeney

(2016) Nonconsensual image sharing: one in 25 Americans has been a victim of “Revenge Porn.” Data & Society Research Institute. Available at: https://datasociety.net/pubs/oh/Nonconsensual_Image_Sharing_2016.pdf

42.

Libert

(2015) Exposing the hidden web: an analysis of third-party HTTP requests on one million websites. International Journal of Communication 9: 3544–3561.

43.

Libert

(2018) An automated approach to auditing disclosure of third-party data collection in website privacy policies. In: Proceedings of the 2018 conference on World Wide Web, pp. 207–216. Available at: https://arxiv.org/pdf/1805.01187.pdf

44.

Libert

Nielsen

(2018) Third-Party Web Content on EU News Sites: Potential Challenges and Paths to Privacy Improvement. Oxford: Reuters Institute for the Study of Journalism, University of Oxford.

45.

McDonald

Cranor

(2008) The cost of reading privacy policies. I/S: A Journal of Law and Policy for the Information Society 4: 543.

46.

Marwick

(2017) Scandal or crime? Gendered privacy and the celebrity nude photo leaks. Ethics and Information Technology 19(3): 177–191.

47.

Mowlabocus

(2010) Porn 2.0? Technology, social practice, and the new online porn industry. In: Attwood

(ed.) Porn.com: Making Sense of Online Pornography. New York: Peter Lang, pp. 90–113.

48.

Nissenbaum

(2010) Privacy in Context: Technology, Policy, and the Integrity of Social Life. Stanford, CA: Stanford University Press.

49.

Paasonen

(2018) Many Splendored Things: Thinking Sex and Play. London: Goldsmiths Press.

50.

Plummer

(2003) Intimate Citizenship: Private Decisions and Public Dialogues. Seattle, WA: University of Washington Press.

51.

Pornhub (2017) Celebrating 10 years of porn. . .and data! Available at: https://www.pornhub.com/insights/10-years

52.

Pornhub (2018) 2017 year in review. Available at: https://www.pornhub.com/insights/2017-year-in-review

53.

Ruckenstein

Pantzer

(2017) Beyond the quantified self: thematic exploration of a dataistic paradigm. New Media & Society 19(3): 401–418.

54.

Segall

(2015) Pastor outed on Ashley Madison commits suicide. CNN Tech, 8 September. Available at: https://money.cnn.com/2015/09/08/technology/ashley-madison-suicide/

55.

Sloop

(2004) Disciplining Gender: Rhetorics of Sex Identity in Contemporary U.S. Culture. Amherst: University of Massachusetts Press.

56.

Smith

(2014) Half of online Americans don’t know what a privacy policy is. Pew Research Center. Available at: http://www.pewresearch.org/fact-tank/2014/12/04/half-of-americans-dont-know-what-a-privacy-policy-is/

57.

Smith

Attwood

(2014) Anti/pro/critical porn studies. Porn Studies 1-2: 7–23.

58.

Tiidenberg

Paasonen

(2018) Littles: affects and aesthetics in sexual age-play. Sexuality & Culture 23(2): 375–393.

59.

Turow

(2012) The Daily You: How the New Advertising Industry Is Defining Your Identity and Your Worth. New Haven, CT: Yale University Press.

60.

Turow

(2017) The Aisles Have Eyes: How Retailers Track Your Shopping, Strip Your Privacy, and Define Your Power. New Haven, CT: Yale University Press.

61.

Turow

Hennessy

Draper

(2015a) The tradeoff fallacy: how marketers are misrepresenting American consumers and opening them up to exploitation. Available at: https://www.asc.upenn.edu/sites/default/files/TradeoffFallacy_1.pdf

62.

Turow

McGuigan

Maris

(2015b) Making data mining a natural part of life: physical retailing, customer surveillance and the 21st century social imaginary. European Journal of Cultural Studies 18(4–5): 464–478.

63.

Van Dijck

(2014) Datafication, dataism and dataveillance: Big Data between scientific paradigm and ideology. Surveillance & Society 12(2): 197–208.

64.

Warner

(1999) The Trouble with Normal: Sex, Politics, and the Ethics of Queer Life. Cambridge, MA: Harvard University Press.

65.

webXray (2018) webXray v 2.0 (GNU General Public License v 30). Available at: https://webxray.org

66.

Williams

(ed.) (2004) Porn Studies. Durham, NC: Duke University Press.

67.

Wimmer

Dominick

(2011) Mass Media Research: An Introduction. 9th ed. Boston, MA: Wadsworth.