Identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page

1. A computer-implemented method for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page, the computer-implemented method comprising:

receiving a notification of a web request made by an external domain that loads content into a host web page, wherein the host web page is accessed through a web browser and the web request includes a header value;

hooking into the web request through an API of the web browser;

determining that the host web page is not affiliated with the external domain;

determining that the external domain is a known tracking domain;

inspecting the header value in the web request;

detecting an identifier that is contained within the header value in the web request;

obfuscating the identifier contained within the header value to create an altered web request; and

transmitting the altered web request to the web browser.

2. The method of claim 1 , wherein the hooked web request is an HTTP request and the header value is a sending header value.

3. The method of claim 2 , wherein the web request is hooked into through an onBeforeSendHeaders sending event.

4. The method of claim 1 , wherein the hooked web request is an HTTP response and the header value is a receiving header value.

5. The method of claim 4 , wherein the web request is hooked into through an onHeadersReceived receiving event.

6. The method of claim 1 , wherein detecting the identifier includes performing a zxcvbn technique.

7. The method of claim 1 , wherein detecting the identifier includes calculating an entropy of the header value.

8. The method of claim 1 , wherein the header value is a cookie.

9. The method of claim 1 , wherein the determination that the host web page is not affiliated with the external domain is based on a finding that an entity that owns the host web page is not the same as an entity that owns the external domain.

10. The method of claim 1 , further including receiving a list of known tracking domains, wherein the determination that the external domain is a known tracking domain is based on a finding that the external domain is included within the received list of known tracking domains.

11. The method of claim 1 , wherein to obfuscate the identifier, the header value is removed from the web request.

12. The method of claim 1 , wherein to obfuscate the identifier, the header value is changed to a new value that does not include the identifier.

13. The method of claim 1 , wherein the external domain provides some functionality to the host web page.

14. One or more non-transitory computer-readable media comprising one or more computer-readable instructions that, when executed by one or more processors of a privacy server, cause the privacy server to perform a method for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page, the method comprising:

receiving a notification of a web request made by an external domain that loads content into a host web page, wherein the host web page is accessed through a web browser and the web request includes a header value;

hooking into the web request through an API of the web browser;

determining that the host web page is not affiliated with the external domain;

determining that the external domain is a known tracking domain;

inspecting the header value in the web request;

detecting an identifier that is contained within the header value in the web request;

obfuscating the identifier contained within the header value to create an altered web request; and

transmitting the altered web request to the web browser.

15. The one or more non-transitory computer-readable media of claim 14 , wherein the hooked web request is an HTTP request and the header value is a sending header value.

16. The one or more non-transitory computer-readable media of claim 14 , wherein the hooked web request is an HTTP response and the header value is a receiving header value.

17. The one or more non-transitory computer-readable media of claim 14 , wherein to obfuscate the identifier, the header value is removed from the web request.

18. The one or more non-transitory computer-readable media of claim 14 , wherein to obfuscate the identifier, the header value is changed to a new value that does not include the identifier.

19. The one or more non-transitory computer-readable media of claim 14 , wherein the external domain provides some functionality to the host web page.

20. A computing device comprising:

one or more processors; and

one or more non-transitory computer-readable media comprising one or more computer-readable instructions that, when executed by the one or more processors, cause the computing device to perform a method for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page, the method comprising:

receiving a notification of a web request made by an external domain that loads content into a host web page, wherein the host web page is accessed through a web browser and the web request includes a header value;

hooking into the web request through an API of the web browser;

determining that the host web page is not affiliated with the external domain;

determining that the external domain is a known tracking domain;

inspecting the header value in the web request;

detecting an identifier that is contained within the header value in the web request;

obfuscating the identifier contained within the header value to create an altered web request; and

transmitting the altered web request to the web browser.