Nosniff Designation
Nosniff identifies digital services that reject commercial tracking and the exploitation of customer information.
Information is processed to operate, secure and legally administer the service. It is not turned into advertising inventory, behavioural intelligence or a separate product.
Nosniff Standard 1.0
The service does not use advertising cookies, behavioural tracking, tracking pixels, session replay, heatmaps or similar technologies to profile users or monetise their activity. Mechanisms strictly necessary for functionality, security, authentication and requested settings remain allowed.
User activity is not sent to third-party analytics or audience-measurement platforms. The service may produce its own operational statistics when they are not used for profiling, commercial audiences or tracking people across unrelated services.
Customer information is not sold, rented, licensed or disclosed for third-party advertising, profiling, data brokerage or independent commercial use. The service earns from the service, not from information entrusted to it.
Customer information is not used to create marketing profiles or to train, fine-tune, evaluate or improve AI or machine-learning models. An AI feature requested by the customer may process information only to provide that feature.
A service provider may process customer information only to deliver, secure or support the contracted service. It may not use the information for its own advertising, profiling, independent analytics, product development or AI training.
Designation
The service confirms that it meets the Nosniff commitments. The declaration date is published with the designation.
The public website is inspected with The Markup’s Blacklight service, which looks for nine known tracking techniques.
The record identifies the service, domain, declaration, inspection, designation ID, validity and later changes.
Blacklight
Blacklight visits the site with software that emulates a browser. It observes loaded scripts and network requests and looks for ad tracking, third-party cookies, browser fingerprinting, session recording, keystroke capture and tracking associated with Meta, TikTok, X and Google advertising.
Blacklight can observe technologies exposed by the public website. It cannot see internal systems, contracts or organisational practices. Those remain public commitments made by the service.
The Nosniff designation complements the service-specific privacy notice and applicable law. It does not replace them or imply regulatory approval.
