It's not time to grant people agency over their data

[ArMaP]

Nowadays the multipage litany of user 'agreements' we are legally leveraged into accepting actually codifies the abuse and indemnifies the abusers.

Even when using a private browser mode or whatever they are called by each browser maker I always take the time to chose not to accept any unnecessary cookies for the sites' "partners".
For example, CNN does not give an option to chose which cookies we accept, but CNN Portugal does, and it shows:
- 140 suppliers that want to store cookies on my device;
- 87 that want to use cookies for advertising;
- 107 for creating personalised advertising profiles;
- 104 for selecting personalised advertising profiles;
- 35 for creating personalised content distributing profiles;
- 29 for selecting personalised content profiles;
- 93 for measuring the advertising performance;
- 93 for measuring the content performance;
- 73 for understanding the audiences by combining information from different sources;
- 79 for developing the services provided;
- 19 for using limited data to select content;

All of the above are not from CNN Portugal itself, they are third party cookies.
They also have a list of those third parties and what their cookies are used for.

Most cookies store geolocation, probabilistic identifiers (identifiers based on browser, operating system, screen size, etc.), privacy options, device language settings and time zone and a cookie with an unique identifier that can be use to recognise the device on other sites.

One is Roq.ad GmbH, that presents itself as "an identity solutions provider for a post third-party cookie world". Their cookies last one year.

Another one is RTB House S.A. that "creates truly personalized marketing campaigns powered by Deep Learning technology that cut through the online noise". Their cookies last 565 days.

The amount of companies wanting our data is huge, because it is a huge business.