Hacker News Reader

Comment by delish | Hacker News Reader

I pay for Youtube Premium, which uses third-party cookies to not show ads on embedded videos.

https://privacysandbox.com talks about advertising, but not "logged in elsewhere" functionality. Does Youtube or Google have something ready, or will all Youtube Premium subscribers see ads on embedded videos?

View on HN

There is also a Federated Credential Management (FedCN) API coming in, that should help somewhat.

https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API

Thank you! Will look!

> Youtube Premium, which uses third-party cookies to not show ads on embedded videos

The third party cookies don't control ads in embedded videos, there are currently no ads in embedded videos whether you have paid for premium or not.

I have a bookmarklet that converts a youtube page to an embed for this reason, for when I get sick of seeing the same couple of adverts on a loop.

I see ads in YouTube embeds all the time.

I can't say I remember doing so, unless you count sponsor segments and other inline ads like those at the end of most clips.

I certainly don't when using the inline-from-youtube-itself-via-bookmarklet trick.

It's whitelisted based on the embedding domain.

https://support.google.com/youtube/answer/132596

>Ads appear on brand safe sites: YouTube works diligently so that our advertisers' brands appear on sites that reflect our respective core values. Our systems closely evaluate websites and their content against various factors when finding out whether to turn on In-stream ads on YouTube embeds. These factors include a strict set of guidelines on content like adult imagery, violence, inappropriate and hateful language, and sites that promote infringement.

The recommended solution for embedded content is the Storage Access API, which has broad browser support. (I don't know that YouTube has implemented it yet, but I'd be surprised if it's not there soon.)

https://developer.mozilla.org/en-US/docs/Web/API/Storage_Acc...

https://developers.google.com/privacy-sandbox/3pcd/storage-a...

The Storage Access API is an unmitigated pile of garbage. Google's page on it admits as much (https://developers.google.com/privacy-sandbox/3pcd/storage-a...).

From Google's own page: "Work is continuing to resolve all remaining blocking issues, before standardizing the API."

Oh, that's worrisome. I'm trying to implement it in our embedded content soon, because some of our customers got caught up in Chrome's third party cookie blocking 1% trial that started a week or two ago.

Any specific problems you ran into that you could share?

Perhaps they should switch to first party cookies?

How would that work on embedded videos on sites outside of YouTube/Google, which is what the parent comment is talking about?

Aren't those just iframes, which is effectively just youtube loading inside an existing web page instead of its own tab. I would assume first party cookies would work just fine for this.

Nope, an iframe on an unrelated site is exactly what turns it into a third party cookie. (The user and the site they're visiting are the first two parties; the embedded site is the third party.)

Put another way, an ad iframe loading a tracking (identity) cookie is indistinguishable from a YouTube iframe loading a login (identity) cookie.

i still don't follow. i guess my point is, when an embedded video loads for me, youtube still knows that it's me. it gives me the same recommended videos i'd get if i were on youtube.com directly. so i assume since i pay for premium, it'd also skip ads on embedded videos too. i wouldnt know because i use ublock.

> when an embedded video loads for me, youtube still knows that it's me

If/when third party cookie blocking is fully deployed, this won't be true. Your browser won't send YouTube's session cookie to YouTube when it's loaded in an iframe on an unrelated site, so YouTube won't know you're a premium user.

i appreciate the explanation! thanks!

Reply on news.ycombinator.com