PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Apple to Advertisers: Follow Safari Web-Tracking Rules or Else

'If a party attempts to circumvent our tracking prevention methods, we may add additional restrictions without prior notice,' Apple's new anti-tracking policy for WebKit says.

 & Michael Kan Principal Reporter

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Apple is warning online advertisers and web developers it'll consider blocking them if they're ever caught covertly tracking user activities via the Safari browser.

Cupertino issued the warning in a new policy for WebKit—Safari's browser engine—which outlines the online web tracking Apple wants to prevent. Essentially, the company is forbidding any kind of tracking without the user's consent or knowledge.

"If a party attempts to circumvent our tracking prevention methods, we may add additional restrictions without prior notice," the policy says. "These restrictions may apply universally; to algorithmically classified targets; or to specific parties engaging in circumvention."

No exceptions will be given to specific parties either. "We treat circumvention of shipping anti-tracking measures with the same seriousness as exploitation of security vulnerabilities," the policy adds.

Two years ago, Apple took a harder line against web trackers by adding a privacy capability in Safari designed to prevent "cross-site" tracking, which is used across the ad industry to learn what sites your computer is visiting. Online marketing firms and tech companies such as Facebook can pull this off because their tracking scripts are embedded across thousands of websites through plugins or ads, which can identify and tag your machine with internet cookies.

Although the tracking can help companies personalize ads, it also means they can build a profile of your browsing habits without your consent. In response, Apple began restricting certain first-party cookies from tracking users beyond a 24-hour window. A year later, the company took aim at Facebook's tracking scripts by adding a Safari feature that can shut them down when encountered on a website.

"WebKit will do its best to prevent all covert tracking, and all cross-site tracking (even when it's not covert)," Apple's new policy adds. "If a particular tracking technique cannot be completely prevented without undue user harm, WebKit will limit the capability of using the technique. For example, limiting the time window for tracking."

The policy goes on to state the company will prioritize user privacy over preserving current industry practices that can help website owners measure user traffic, create personalized ads, and detect fraud or bots.

"However, we will try to limit unintended impact. We may alter tracking prevention methods to permit certain use cases, particularly when greater strictness would harm the user experience," the company said. "In other cases, we will design and implement new web technologies to re-enable these practices without reintroducing tracking capabilities."

Apple's move was inspired by Mozilla's anti-tracking policy, it said.

About Our Expert

Michael Kan

Michael Kan

Principal Reporter

My Experience

I've been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I'm currently based in San Francisco, but previously spent over five years in China, covering the country's technology sector.

Since 2020, I've covered the launch and explosive growth of SpaceX's Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I've combed through FCC filings for the latest news and driven to remote corners of California to test Starlink's cellular service.

I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.

I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I'm now following how the AI-driven memory shortage is impacting the entire consumer electronics market. I'm always eager to learn more, so please jump in the comments with feedback and send me tips.

The Best Tech I've Had:

  • My first video game console: a Nintendo Famicom
  • I loved my Sega Saturn despite PlayStation's popularity.
  • The iPod Video I received as a gift in college
  • Xbox 360 FTW
  • The Galaxy Nexus was the first smartphone I was proud to own.
  • The PC desktop I built in 2013, which still works to this day.

Read full bio