Opting out of Google’s FLoC

Internet

News has been moving fast about Google’s FLoC system. If you don’t know what it is, look at where it’s coming from and you can probably guess. Last Thursday blog posts were recommending the addition of this line to your web server software, which I did:

Permissions-Policy: interest-cohort=()

Rohan Kumar elaborated that while this is technically correct, it’s not always necessary, nor the best way to do it:

If your website does not include JS that calls document.interestCohort(), it will not leverage Google’s FLoC. Explicitly opting out will not change this.

He recommends not using third-party scripts, and implementing a Content Security Policy header to block execution. I’ve been doing this for years; it’s good advice in general.

Author bio and support

Me!

Ruben Schade is a technical writer and IaaS engineer in Sydney, Australia who refers to himself in the third person in bios. Wait, not BIOS… my brain should be EFI by now.

The site is powered by Hugo, FreeBSD, and OpenZFS on OrionVM, everyone’s favourite cloud infrastructure provider.

You can leave me a comment by contacting me, and I might publish your thoughts. Please read the FAQs first though.

If you found this post helpful or entertaining, you can shout me a coffee or buy some silly merch. Thanks!