Summary reports

# Implementation status

• Participate and experiment with Attribution Reporting summary reports.
  • This API is available in the ads relevance and measurement origin trial.

# What is a summary report?

A summary report is compiled for a group of users so that it cannot be tied to any individual. Summary reports offer detailed conversion data with flexibility for click and view data. Summary reports do not rely on third-party cookies or mechanisms that can be used to identify individual users across sites.

Summary reports are created in two contexts:

• Ads measurement: ad techs can generate summary reports with Attribution Reporting, to measure when an ad click or view leads to a conversion on an advertiser site, such as a sale or a sign-up. Ad techs can also generate summary reports for FLEDGE auctions with Private Aggregation.
• General cross-site reporting: developers capture cross-site data in Shared Storage, and can report on that data with Private Aggregation. This has many uses, such as gaining insight into user demographics and capturing unique reaches for content.

Summary reports are requested differently for Attribution Reporting and Private Aggregation. Before you can learn how to generate reports, you must first understand what aggregation is and how summary reports may be used to address your measurement needs.

# Key concepts

# Design your data collection

A key principle of summary reports is early design decisions. You decide what data to collect in what categories. The output reports provide insights on your campaigns or business.

The output report offers detailed cross-site conversion data and flexibility for joining click and view data with conversion data. You can also think of the final output as an input for the tools you use to make decisions.

Ask yourself: what do I want to learn about user engagement with my content?

# Ad conversions

For example, if you generate summary reports to determine how many conversions led to some total spend value, that may help your team decide what your next ad campaign should target to generate a higher total spend.

# What information is captured in the browser?

An aggregatable report is the raw data captured from a user's browser, which includes a predetermined set of buckets (or aggregation keys). How you determine this criteria is dependent on your design decisions.

Summary reports offer a combination of aggregated data alongside detailed conversion data.

# How is data captured before aggregation?

Summary reports are made up of aggregated data from a group of individual devices. While an individual user’s actions cannot be observed and reviewed, the process of collection is the same for each person.

An individual user’s actions are encrypted and collected in an aggregatable report. These reports also include a small amount of unencrypted metadata relevant to batching.

For Attribution Reporting data, aggregatable reports are captured as such:

1. A user visits a publisher site and sees or clicks an ad, otherwise known as an attribution source event.
2. A few minutes or days later the user converts, otherwise known as an attribution trigger event. For example, a conversion can be defined as a product purchase.
3. The browser software matches the ad click or view with the conversion event. Based on this match, the browser creates an aggregatable report with specific logic created by an ad tech provider.
4. The browser encrypts this data and, after a small delay, sends it to an ad tech server for collection. The ad tech server must rely on an aggregation service to access the noised insights.

For Private Aggregation, it looks like the following:

1. A third-party decides what they want to measure and writes the data into Shared Storage to be read at a later time.
2. The user triggers an event which matches what the third-party wants to measure. For example, when the user visits a site with embedded content, the third-party can read the data in Shared Storage and use Private Aggregation to send encrypted aggregatable reports to your server for collection. .

# Batching aggregatable reports

Before the collected aggregatable reports can be processed and aggregated into a summary report, they must be batched. A batch is a strategic group of aggregatable reports.

Aggregatable reports have a small amount of unencrypted data, included as shared_info, which can be used to create batches. This includes the timestamp and reporting origin. You cannot batch based on encrypted information within the report.

Ideally, batches will contain many reports. You may decide to batch hourly, daily, weekly, or any other time frame of your choice. This strategy can change for specific events where a higher traffic is expected.

For example, when batching aggregatable reports for the Attribution Reporting API, you may decide to update your batching strategy to hourly for the day of a large sale, where you expect a larger volume of ad conversions.

With the Private Aggregation API, you may expect to change your strategy on the day of a large press release about a specific piece of content, embedded on third-party websites.

# Processing data with the aggregation service

The aggregation service decrypts and combines the batched data from the aggregatable reports, adds noise, and returns the final summary report. This service runs in a trusted execution environment (TEE), which is deployed on a cloud service that supports necessary security measures to protect this data.

# Summary reports with Attribution Reporting

For ad tech providers to retrieve a summary report, the following steps must be taken:

1. The ad tech provider collects aggregatable reports from individual users' browsers.

   The ad tech provider can only decrypt these reports in the aggregation service.

2. The ad tech provider batches the aggregatable reports and sends the batches to the aggregation service.

3. The aggregation service schedules a worker to aggregate the data.

   Before the worker can aggregate, attestation is required from the ​​coordinator. If the worker passes attestation, the decryption keys will be provided.

4. The aggregation worker decrypts and aggregates data from the aggregatable reports, along with noised data.

5. The aggregation service returns the summary report to the ad tech provider.

The ad tech can use the summary report to inform bidding and to offer reporting to its own customers. A JSON-encoded scheme is the proposed format for summary reports.

# Summary reports with Private Aggregation

1. Read the cross-site data collected by Shared Storage and generate an aggregation key to group the data.

2. Call the Private Aggregation API from a Shared Storage worklet with the aggregation key and the value that you want to accumulate. The browser generates an encrypted aggregatable report from your input and sends it to your server for collection.

3. Batch the aggregatable reports and send them to the aggregation service for processing.

4. The aggregation service processes the batched reports, then adds noise.

   Before the aggregation service can process the reports, attestation is required from the ​​coordinator. Learn more about the aggregation service.

5. The aggregation service returns the summary report to the requester.

# Engage and share feedback

Summary reports are a key piece of the Privacy Sandbox measurement proposals. Like other Privacy Sandbox proposals, this is documented and discussed publicly on GitHub.

• Discuss the Attribution Reporting API.
• Discuss the Private Aggregation API.
• Developer support: Ask questions and join discussions on the Privacy Sandbox Developer Support repo.