Skip to content
Brief

Intelligent Tracking Prevention (ITP)

Privacy TechnologyProduct· part of Apple Inc.

Protects Safari users from cross-site tracking by restricting third-party cookies and limiting first-party cookie lifetimes, giving users greater privacy without requiring manual configuration.

Last updated Sep 26, 2026 by ATDb automated enrichment

Founded
2017
HQ
Cupertino, California, United States
Parent
Connections
1

AI-drafted from public sources4 sources cited

At a glance

Stock
AAPL
1corporate family

About

The dominant browser-native privacy enforcement mechanism for Safari, affecting a significant portion of global web traffic and setting industry standards for cookie and tracking restrictions.

Intelligent Tracking Prevention (ITP) is a privacy-focused technology feature built into Apple's Safari browser, first introduced in 2017 by Apple engineer John Wilander and the WebKit team. ITP uses machine learning to identify and restrict domains that have the ability to track users across websites, limiting the lifespan of cookies, blocking third-party cookies by default, and preventing fingerprinting techniques commonly used by advertisers and data brokers. ITP has undergone multiple iterations since its launch, with each version (ITP 1.0, 1.1, 2.0, 2.1, 2.2, 2.3, and beyond) progressively tightening restrictions on tracking mechanisms. Key capabilities include capping first-party cookie lifetimes set via JavaScript to seven days (and in some cases 24 hours), blocking all third-party cookies by default, and restricting link decoration tracking. These changes have had profound implications for the AdTech ecosystem, forcing advertisers, DSPs, DMPs, and analytics platforms to rethink attribution, audience targeting, and measurement strategies. In the AdTech ecosystem, ITP is one of the most disruptive privacy technologies alongside Firefox's Enhanced Tracking Protection and Google's Privacy Sandbox. Because Safari commands a significant share of mobile and desktop browsing — particularly among high-value demographics in the United States — ITP's restrictions have materially impacted retargeting, cross-site audience building, and conversion tracking. It has accelerated industry adoption of server-side tracking, first-party data strategies, and privacy-preserving measurement solutions.

Business model

Built-in browser feature (not a standalone company)

What they offer

  • Cross-Site Tracking Prevention

    Uses machine learning to classify and restrict domains capable of cross-site tracking, blocking their cookies in third-party contexts.

  • First-Party Cookie Lifetime Capping

    Limits JavaScript-set first-party cookies to a maximum of 7 days (or 24 hours in certain link decoration scenarios) to prevent long-term tracking.

  • Third-Party Cookie Blocking

    Blocks all third-party cookies by default in Safari, preventing advertisers from tracking users across sites via cookie syncing.

  • Link Decoration Protection

    Detects and restricts tracking parameters appended to URLs (e.g., click IDs) to prevent circumvention of cookie restrictions.

  • CNAME Cloaking Detection

    Identifies and restricts tracker domains that use CNAME DNS records to masquerade as first-party resources.

  • Storage Access API

    Provides a controlled mechanism for embedded third-party content to request access to its first-party cookies with explicit user consent.

Key features

Machine learning-based tracker classificationDefault third-party cookie blockingJavaScript cookie lifetime capping (7-day max)Link decoration and query parameter strippingCNAME cloaking detection and mitigationStorage Access API for permissioned cross-site accessBounce tracking preventionFingerprinting surface reduction

Use cases

Preventing advertisers from building cross-site user profilesLimiting retargeting capabilities for third-party ad networksRestricting cookie syncing between DSPs and DMPsBlocking fingerprinting-based tracking in SafariEnforcing user privacy without requiring browser extensions

Customer segments

Safari end users (privacy beneficiaries)AdTech vendors (impacted parties)Publishers (impacted parties)Advertisers (impacted parties)Analytics platforms (impacted parties)

Tech & specs

Technology stack

WebKit browser engineMachine learning classifier (on-device)JavaScript runtime restrictionsDNS-level CNAME detectionStorage Access API

Security & compliance

GDPR-aligned privacy principlesCCPA-aligned privacy principlesApple Privacy Policy

Deployment

Built into Safari browser (iOS, macOS, iPadOS)

API

No

Corporate history
  1. 2017 · Founded
Connection details

Explore further

2 views