Privacy management across multiple devices

1. A computer-implemented method for managing privacy rights of a user related to delivery of content, the computer-implemented method comprising:

creating a global privacy policy for the user, the global privacy policy including a mapping of a plurality of anonymous identifiers associated with the user, each anonymous identifier in the plurality of anonymous identifiers associated with the user being associated with a requesting source having been used by the user to access content, wherein each anonymous identifier in the plurality of anonymous identifiers associated with the user includes an identifier, session information and any enumerated preferences of the user, either inferred or explicitly defined, the enumerated preferences of the user being used to determine content to be delivered to the user in response to received requests from the user, wherein creating the global privacy policy includes aggregating privacy policy information from each anonymous identifier in the plurality of anonymous identifiers associated with the user to form the global privacy policy, wherein creating the global privacy policy further includes resolving a name for the requesting source associated with a respective identifier, and wherein identifiers associated with the user are linked using a secret key derived from a seed that is unique to the user;

providing a global privacy management interface that:

presents a selection tool that displays privacy options and interests to the user to review, the privacy options and interests including controls for presenting a list of inferred interests that are associated with the user and an indicator for one or more devices having been used by the user to access content or perform actions that gave rise to the list of inferred interests; and

presents a de-selection tool that displays individual interests from the list of inferred interests that are associated with the user to de-select on a per-device or global basis, wherein the global privacy management interface presents the name for requesting source when presenting privacy selections associated with at least an anonymous identifier in the plurality of anonymous identifiers associated with the user; and

determining, in a server system, content to deliver to the user in view of the privacy options and interests, and the individual interests from the list of inferred interests.

2. The method of claim 1 , further comprising:

providing a single content item privacy management interface that presents a selection tool to the user to manage privacy settings for a session and related to one or more particular content items that are presented to the user; and

wherein determining content to deliver to the user further includes determining content to deliver to the user in view of the privacy settings.

3. The method of claim 1 , wherein the privacy options and interests include individual categories of content that are associated with the user based on past user behavior, each category being associated with, and being presented along with a designator for a requesting source that is associated with an explicitly received or inferred interest and wherein the global privacy management interface further includes controls to approve or disapprove any of the categories.

4. The method of claim 3 , wherein the controls to approve or disapprove any of the categories further include a control to opt in or opt out of any category or a use of any information associated with a category.

5. The method of claim 3 , wherein the controls to approve or disapprove any of the categories further include controls for adding additional categories to be used in a selection of content to be delivered to the user.

6. The method of claim 1 , wherein a serving system serves advertisements to the user based on the privacy options and interests.

7. The method of claim 1 , further comprising:

receiving, from the user, a selection of a privacy selection in association with a session;

storing the privacy selection in association with the global privacy policy for the user; and

presenting, to the user, all privacy selections received in various sessions with the user that are in effect in determining content to be delivered to the user by a serving system.

8. The method of claim 1 , further comprising:

presenting a control to the user to un-link individual interests in a user's account, thereby allowing the user to isolate interests on a per requesting source or group of requesting sources basis.

9. The method of claim 1 , wherein the identifiers are linked using a Diffie-Hellman key protocol.

10. The method of claim 1 , wherein the list of inferred interests that are associated with the user are derived using anonymous identifiers from different devices, different browsers or different applications.

11. A non-transitory computer-readable medium storing instructions, that when executed, cause one or more processors to perform operations including:

creating a global privacy policy for the user, the global privacy policy including a mapping of a plurality of anonymous identifiers associated with the user, each anonymous identifier in the plurality of anonymous identifiers associated with the user being associated with a requesting source having been used by the user to access content, wherein each anonymous identifier in the plurality of anonymous identifiers associated with the user includes an identifier, session information and any enumerated preferences of the user, either inferred or explicitly defined, the enumerated preferences of the user being used to determine content to be delivered to the user in response to received requests from the user, wherein creating the global privacy policy includes aggregating privacy policy information from each anonymous identifier in the plurality of anonymous identifiers associated with the user to form the global privacy policy, wherein creating the global privacy policy further includes resolving a name for the requesting source associated with a respective identifier, and wherein identifiers associated with the user are linked using a secret key derived from a seed that is unique to the user;

providing a global privacy management interface that:

presents a selection tool that displays privacy options and interests to the user to review, the privacy options and interests including controls for presenting a list of inferred interests that are associated with the user and an indicator for one or more devices having been used by the user to access content or perform actions that gave rise to the list of inferred interests; and

presents a de-selection tool that displays individual interests from the list of inferred interests that are associated with the user to de-select on a per-device or global basis, wherein the global privacy management interface presents the name for requesting source when presenting privacy selections associated with at least an anonymous identifier in the plurality of anonymous identifiers associated with the user; and

determining, in a server system, content to deliver to the user in view of the privacy options and interests, and the individual interests from the list of inferred interests.

12. The non-transitory computer-readable medium of claim 11 , wherein the instructions cause the one or more processors to perform operations further comprising:

providing a single content item privacy management interface that presents a selection tool to the user to manage privacy settings for a session and related to one or more particular content items that are presented to the user; and

wherein determining content to deliver to the user further includes determining content to deliver to the user in view of the privacy settings.

13. The non-transitory computer-readable medium of claim 11 , wherein the privacy options and interests include individual categories of content that are associated with the user based on past user behavior, each category being associated with, and being presented along with a designator for a requesting source that is associated with an explicitly received or inferred interest and wherein the global privacy management interface further includes controls to approve or disapprove any of the categories.

14. The non-transitory computer-readable medium of claim 13 , wherein the controls to approve or disapprove any of the categories further include a control to opt in or opt out of any category or a use of any information associated with a category.

15. The non-transitory computer-readable medium of claim 13 , wherein the controls to approve or disapprove any of the categories further include controls for adding additional categories to be used in a selection of content to be delivered to the user.

16. A system comprising:

one or more processors; and

one or more memory elements including instructions that, when executed, cause the one or more processors to perform operations comprising:

creating a global privacy policy for the user, the global privacy policy including a mapping of a plurality of anonymous identifiers associated with the user, each anonymous identifier in the plurality of anonymous identifiers associated with the user being associated with a requesting source having been used by the user to access content, wherein each anonymous identifier in the plurality of anonymous identifiers associated with the user includes an identifier, session information and any enumerated preferences of the user, either inferred or explicitly defined, the enumerated preferences of the user being used to determine content to be delivered to the user in response to received requests from the user, wherein creating the global privacy policy includes aggregating privacy policy information from each anonymous identifier in the plurality of anonymous identifiers associated with the user to form the global privacy policy, wherein creating the global privacy policy further includes resolving a name for the requesting source associated with a respective identifier, and wherein identifiers associated with the user are linked using a secret key derived from a seed that is unique to the user;

providing a global privacy management interface that:

presents a selection tool that displays privacy options and interests to the user to review, the privacy options and interests including controls for presenting a list of inferred interests that are associated with the user and an indicator for one or more devices having been used by the user to access content or perform actions that gave rise to the list of inferred interests; and

presents a de-selection tool that displays individual interests from the list of inferred interests that are associated with the user to de-select on a per-device or global basis, wherein the global privacy management interface presents the name for requesting source when presenting privacy selections associated with at least an anonymous identifier in the plurality of anonymous identifiers associated with the user; and

determining, in a server system, content to deliver to the user in view of the privacy options and interests, and the individual interests from the list of inferred interests.

17. The system of claim 16 , wherein the instructions cause the one or more processors to perform operations further comprising:

providing a single content item privacy management interface that presents a selection tool to the user to manage privacy settings for a session and related to one or more particular content items that are presented to the user; and

wherein determining content to deliver to the user further includes determining content to deliver to the user in view of the privacy settings.

18. The system of claim 16 , wherein the privacy options and interests include individual categories of content that are associated with the user based on past user behavior, each category being associated with, and being presented along with a designator for a requesting source that is associated with an explicitly received or inferred interest and wherein the global privacy management interface further includes controls to approve or disapprove any of the categories.

19. The system of claim 18 , wherein the controls to approve or disapprove any of the categories further include a control to opt in or opt out of any category or a use of any information associated with a category.

20. The system of claim 18 , wherein the controls to approve or disapprove any of the categories further include controls for adding additional categories to be used in a selection of content to be delivered to the user.