Every time you open a browser to view a Web page, that information is stored on your computer—whether you're shopping online, checking movie listings, or catching up on the latest news.
Windows operating systems store this material in temporary Internet files or "cache." Web pages may store bits of information about who you are in files called "cookies" on your computer. Your Web browser will store a list of Web sites you've visited and places you've gone in a history file in your computer—thus creating your digital footprint. Even if you're not online, programs will store histories of the files you've opened, played, or viewed.
Cookies are created to recognize users when they return to a Web site; they make it possible to offer customized content to a user. Even though cookies make Web use quicker and more convenient, they can be a threat to your privacy if they store sensitive information like your name and password on protected login pages, preferences, account information, and choices you have made on the site. So, even if you clear browser history, cookies—like a map—can show your surfing preferences, habits, passwords, and so forth.
Even if the cookies don't contain such information, they clearly show that you visited the sites from which they came.
Unfortunately, many consumers don't understand the risks of digital footprints.
The problem, as Internet privacy experts have documented, is a growing one. Mary McFadden, writing in her 2007 Pew Research report, "Digital Footprints: Online Identity Management and Search in the Age of Transparency," perfectly captured the potential for peril in online ID fraud. "Unlike footprints left in the sand at the beach, our online data trails often stick around long after the tide has gone out," she says.
Few Web users bother to cover those footprints. According to the Pew Research study, only 3% of Internet users say they make a regular practice of reviewing their Web footprint, while 22% say they search using their name "every once in a while." Even worse, the vast majority of Web users aren't even sure what personal data they're leaving behind on the Web.
- Using search engines—The typical Web engine search reveals a lot to Web detectives. Your wants, needs, interests, careers, and financial life all can be revealed by your search habits. A search for a car loan on Google, for example, reveals a great deal about your financial health, your consumer sentiments, and even your future buying decisions.
Your wants, needs, interests, careers, and financial life all can be revealed by your search habits.
- At work—Search engines and Web sites now have the technology to easily scoop up personal information based on your e-mails, browsing patterns, visits to chat rooms or blogs, even if related to your career.
- Social networks—The big Web search engines cast a wide net over who's visiting Facebook.com or MySpace.com. The same goes if you're a regular visitor to Yahoo's ubiquitous user communities or the chat room of other Web sites. These sites can tell a lot about your interests and habits—whom you chat with, what your hobbies are, and whom you talk to online.
- E-commerce— Any time you enter a credit card number or even a phone number during an online purchase, someone is storing it to build a record about your consumer habits—or worse.
- Web ads—Online advertisements are like big fishing nets, collecting your personal data like name, phone number, and e-mail address, every time you click on them.
- Web broadcast sites—You might think a trip to YouTube to watch Jay Leno's monologue from last night is pretty innocent. On the surface it is. But Google, which owns YouTube, collects a load of digital footprints from Web broadcast visits.
Here's how to lessen your digital footprint:
Too often, Web users blow past "privacy policy" tabs on the sites they visit without regard to clarity or consequence. Worse, they often provide personal information without checking a Web site's privacy policy. That's the online equivalent to leaving your front door open when you leave for a two-week vacation.
The solution, fortunately, is an easy one. Read the privacy policy of each site you visit—especially the ones where you conduct online business. Most Web sites do provide privacy policies, usually at the bottom of the site's home page. Privacy policies disclose what personal data the site uses and holds—and shares. If you don't find a privacy policy, contact the site staff and ask them to post a policy or at least provide the needed information in an e-mail back to you.
Some further digging should reveal "opt-out" clauses on most Web site privacy policies. In short, most companies give you choices about how your personal data will be used. For example, you should be able to direct a Web site, via its privacy policy, to not share your e-mail address with other Web sites or off-line businesses. Also, most Web privacy policies should give you the opportunity to correct any inaccurate information you may have left on the site.
How can you tell that a site's privacy policy is on the ball? It should include some basic protections, such as a guarantee that it won't give out your e-mail address, or basic, easy-to-understand instructions about how the site collects information based on your personal Web browsing habits. A good privacy policy also should provide some way to contact the Web site staff directly (and not the site's Web designer, as some privacy policies do).