Verizon Media

Overview

Verizon Media — rebranded as Yahoo in 2021 after Verizon sold the division to Apollo Global Management — is one of the largest audience data and programmatic advertising platforms in the United States. Operating under the Yahoo brand, the platform runs a demand-side platform (DSP), a supply-side platform (SSP), a data management platform (DMP), and an identity graph that spans Yahoo's owned-and-operated properties (Yahoo Mail, Yahoo Finance, Yahoo Sports, Yahoo News) and a broad third-party publisher network. Advertisers use the platform for programmatic display, native, video, and connected TV campaigns. Its scripts appear on publisher and advertiser sites across the web for conversion tracking, audience sync, and identity resolution.

What This Script Does

Identity and Cookie Syncing

The primary script loaded from s.yimg.com or uib.yahoo.com sets the B cookie (Yahoo's main cross-site identifier) with a 1-year expiry. This is a third-party persistent cookie that identifies the browser across all Yahoo-partnered sites. Additional cookies include A3 (Yahoo audience segmentation), APID (Audience Platform ID for DMP sync), and ucs (user consent state). The script fires a universal pixel request to sp.analytics.yahoo.com on page load.

Conversion Tracking

Yahoo's dot-tag pixel (s.yimg.com/rq/darla/ or analytics.yahoo.com/pb.js) fires on conversion confirmation pages and records standard events: PageView, AddToCart, Purchase, Lead. Purchase events include order value, currency, and item identifiers. Data is transmitted to analytics.yahoo.com via HTTPS GET requests with URL-encoded parameters.

Audience Sync

The script participates in cookie sync operations with third-party DSPs and DMPs by loading 1×1 pixel requests to partner platforms, passing Yahoo's B cookie value in query parameters. This links Yahoo identifiers with partner profiles to enable cross-platform audience targeting.

Identity Graph

Yahoo maintains a deterministic identity graph built from logged-in Yahoo Mail/Finance/Sports users, which is matched against device IDs, hashed emails (SHA-256), and cookie identifiers. The identityHub.js script component communicates with ups.analytics.yahoo.com to perform cross-device resolution.

Consent & Compliance

Category: Marketing

Under GDPR, Yahoo's ad tracking requires explicit opt-in consent (Article 6(1)(a)) because it involves cross-site behavioral profiling and third-party cookie setting. Yahoo participates in IAB TCF 2.2 as a registered vendor (Vendor ID 25). Relevant TCF purposes exercised: Purpose 1 (Store/access information), Purpose 3 (Create personalised ads), Purpose 4 (Select personalised ads), Purpose 7 (Measure ad performance). Yahoo also holds IAB TCF Special Feature 1 (precise geolocation).

Under CCPA/CPRA, Yahoo's data sharing across its publisher network qualifies as cross-context behavioral advertising, subject to opt-out. Yahoo is covered by the EU-US Data Privacy Framework (DPF), enabling GDPR-compliant data transfers from the EU.

The French CNIL fined Yahoo €10 million in January 2022 for failing to allow users to refuse cookies as easily as accepting them — a direct enforcement action against Yahoo's consent mechanism design.

Should You Block This Without Consent?

Yes. Yahoo/Verizon Media scripts set persistent third-party cookies, perform cross-site identity resolution, and transmit behavioral data to a large ad network. All of these activities require prior consent under GDPR and ePrivacy. The CNIL enforcement action confirms regulators' expectations. Block these scripts until explicit marketing consent is obtained.