摘要 |
An analytics system receives segment definitions, each associated with an account identifier. The account identifier identifies an analytics tracking account for a publisher. Each segment definition defines a segment of visitors to a network property and, for each visitor in the first segment, includes a visitor identifier identifying a device used by a visitor to visit the network property and which is issued by the analytics system. The publisher selects the visitor identifiers based on customer identifiers that are issued by the publisher, and neither the customer identifiers, nor any personally identifiable information, is provided to the analytics system. The analytics system determines whether the segment definitions present a personal information exposure risk for one or more of the visitors, and processes the segment definitions only in response to determining that the segment definitions do not present a personal information exposure risk for one or more of the visitors. |