Facebook Product Management Director David Baser leads a team focused on privacy and data use, including General Data Protection Regulation (GDPR) compliance and the tools people can use to control and download their information.
Q: When does Facebook get data about people from other websites and apps?
DB: Many websites and apps use Facebook services to make their content and ads more engaging and relevant. These services include:
• Social plugins, such as our Like and Share buttons, which make other sites more social and help you share content on Facebook;
• Facebook Login, which lets you use your Facebook account to log into another website or app;
• Facebook Analytics, which helps websites and apps better understand how people use their services; and Facebook ads and measurement tools, which enable websites and apps to show ads from Facebook advertisers, to run their own ads on Facebook or elsewhere, and to understand the effectiveness of their ads.
When you visit a site or app that uses our services, we receive information even if you’re logged out or don’t have a Facebook account. This is because other apps and sites don’t know who is using Facebook.
Many companies offer these types of services and, like Facebook, they also get information from the apps and sites that use them. Twitter, Pinterest and LinkedIn all have similar Like and Share buttons to help people share things on their services. Google has a popular analytics service. And Amazon, Google and Twitter all offer login features. These companies — and many others — also offer advertising services. In fact, most websites and apps send the same information to multiple companies each time you visit them.
Q:What kind of data does Facebook get from these websites and apps?
DB: Apps and websites that use our services, such as the Like button or Facebook Analytics, send us information to make their content and ads better. To understand more about how this happens, it helps to know how most websites and apps work. I’ll use websites as an example, but this generally applies to apps, too.
When you visit a site or app that uses our services, we receive information even if you’re logged out or don’t have a Facebook account. This is because other apps and sites don’t know who is using Facebook.
When you visit a website, your browser (for example Chrome, Safari or Firefox) sends a request to the site’s server. The browser shares your IP address so the website knows where on the internet to send the site content. The website also gets information about the browser and operating system (for example Android or Windows) you’re using because not all browsers and devices support the same features. It also gets cookies, which are identifiers that websites use to know if you’ve visited before. This can help with things like saving items in your shopping cart.
A website typically sends two things back to your browser: first, content from that site; and second, instructions for the browser to send your request to the other companies providing content or services on the site. So when a website uses one of our services, your browser sends the same kinds of information to Facebook as the website receives. We also get information about which website or app you’re using, which is necessary to know when to provide our tools.
This happens for any other service the site is using. For example, when you see a YouTube video on a site that’s not YouTube, it tells your browser to request the video from YouTube. YouTube then sends it to you.
Q:How does Facebook use the data it receives from other websites and apps?
DB: Our privacy policy explains in detail what we do with the information we receive — and we just updated the policy to make it easier to read. There are three main ways in which Facebook uses the information we get from other websites and apps: providing our services to these sites or apps; improving safety and security on Facebook; and enhancing our own products and services. I’ll share a little more about each of these, but first I want to be clear: We don’t sell people’s data. Period.