In This Edition of Privacy Theater, Google's Cookie Monster
Contrary to Google's statements yesterday, the company's new policy for issuing cookies won't meaningfully help protect users' privacy.
Shorter cookie life-spans can help limit a site's ability to track you, but Google's change doesn't amount to any practical difference. Rather than expiring in 2038, Google cookies will be set to expire 2 years from your last visit to the site. However, cookies will auto-renew whenever you visit Google, pushing out the expiration date; in other words, your cookie can essentially last forever on the installment plan. Only if you stop visiting Google -- in which case they can't track you anyway -- will your cookie eventually expire.
To its credit, Google did decide in March to delete key identifying information in its search logs, including cookie ID numbers, after 18 months. As we said at the time, this is a good first step towards protecting users' privacy, but more is needed. Unfortunately, Google's new policy for issuing cookies doesn't move the ball forward.
If you actually want to limit how Google and other search engines can be track you via cookies and other means, check out our white paper, Six Tips to Protect Your Online Search Privacy.