Taboola

Overview

Taboola is a content discovery and native advertising platform that monetizes publisher inventory by serving sponsored content recommendation widgets — typically displayed below editorial articles under labels like "Recommended For You" or "Around the Web." Taboola is one of the two dominant players in the content recommendation ad space (alongside Outbrain) and operates a network of thousands of premium publishers including major news sites.

What This Script Does

Taboola's script loads from cdn.taboola.com and renders a feed widget containing paid content links on the host publisher page. It performs:

Ad widget rendering

• Loads a widget container at a defined placement on the publisher page (typically below article content)
• Fetches sponsored content recommendations from Taboola's ad servers (trc.taboola.com) based on page context, URL, and visitor profile
• Renders paid content tiles with headlines, thumbnails, and advertiser attribution
• Fires impression tracking events when tiles become visible in the viewport
• Fires click tracking events and redirects through Taboola's click-tracking URL when a user clicks a recommendation

Cross-site behavioral profiling

• Sets the taboola_session_id first-party cookie and t_gid third-party cookie to identify the visitor across Taboola's publisher network
• The t_gid cookie (persistent, up to 1 year) enables cross-site tracking across all publisher sites running Taboola, building a behavioral profile of content interests
• Tracks content consumption patterns — articles read, topics engaged with, time on page — to personalize which sponsored content appears
• Collects page metadata (URL, title, category, keywords) to enable contextual and behavioral ad targeting

Advertiser tracking on click

• Taboola's click URL passes through trc.taboola.com before delivering the visitor to the advertiser landing page
• Advertisers may also deploy Taboola's conversion pixel on landing pages to complete attribution

Consent & Compliance

• Category: Marketing
• GDPR: Requires consent. Taboola sets persistent cross-site tracking cookies and builds behavioral advertising profiles across its publisher network. IAB TCF purposes: Purpose 1 (Store/access information), Purpose 2 (Basic ads), Purpose 3 (Create personalised ads profile), Purpose 4 (Select personalised ads), Purpose 5 (Create personalised content profile), Purpose 6 (Select personalised content), Purpose 7 (Measure ad performance), Purpose 8 (Measure content performance).
• IAB TCF: Taboola is a registered IAB TCF vendor. Taboola's vendor ID is 42. Publishers using IAB TCF-compliant CMPs can pass consent signals to Taboola for personalized vs. non-personalized ad serving.
• Data transfers: Taboola is a US company headquartered in New York. Data is processed in the US and Israel. EU-US Data Privacy Framework applies.
• Cookies set: taboola_session_id (1st party, session), t_gid (3rd party, ~1 year), t_pt (3rd party, persistent)

Should You Block This Without Consent?

Yes — with marketing consent only. Taboola's content recommendation widget builds cross-site behavioral profiles for advertising. It requires explicit marketing consent before the script loads. Without consent, the script must not fire — do not attempt to load Taboola in a "contextual-only" mode unless formally confirmed with Taboola that the non-consented mode avoids setting persistent identifiers. For IAB TCF publishers, gate Taboola on valid consent signals for Vendor ID 42.