Xreach: Privacy-Preserving Ad Attribution

The Problem

Ad attribution requires tracking individual users across websites and apps. Central surveillance profiles violate privacy regulations (GDPR, CCPA, DMA). Cookie deprecation and ATT are breaking existing measurement infrastructure.

The $600B digital advertising industry depends on knowing which ad exposure led to which conversion. Today this requires linking user identities across publishers and advertisers -- building the surveillance profiles that regulators are now prohibiting.

The measurement gap is widening. Third-party cookie deprecation, Apple ATT, and browser privacy features are eliminating cross-site tracking. Advertisers are losing visibility into campaign effectiveness. Privacy-preserving alternatives like Google's Privacy Sandbox still require trusting a single platform.

The Old Way

The PRIVATE.ME Solution

Xreach splits conversion events into N shares using XorIDA before they leave the user's device. Independent attribution nodes aggregate shares without ever seeing individual user behavior. Only aggregate campaign metrics are reconstructable.

When a user converts (purchase, signup, app install), the conversion event is split into N shares. Each share goes to an independent attribution node. Nodes perform partial aggregation on their shares. The advertiser reconstructs aggregate metrics from K nodes -- total conversions, ROAS, channel effectiveness -- without any node seeing individual user data.

Regulation-proof by design. No individual user profile is ever constructed. No cross-site identifier exists. GDPR, CCPA, and DMA compliance is achieved through architecture, not policy.

The New Way

How It Works

Conversion events are split on-device, distributed to independent attribution nodes, aggregated in share-space, and reconstructed into campaign-level metrics. Individual user behavior is never visible to any party.

Use Cases

Integration

import { recordConversion, measureAttribution } from '@private.me/adsplit';

// Record a conversion event (split on-device)
const result = await recordConversion({
  campaignId: 'camp_abc123',
  eventType: 'purchase',
  value: 49.99,
}, { n: 3, k: 2 });

// Measure aggregate campaign performance
const metrics = await measureAttribution('camp_abc123');
if (metrics.ok) {
  // metrics.value.conversions — total count
  // metrics.value.roas — return on ad spend
}

Security Properties

Cryptographic Proof of Correctness

This ACI's computations can be cryptographically verified by xProve — so regulators, auditors, and counterparties can confirm results without re-running the computation or accessing the underlying data.

Ready to deploy Xreach?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xReach generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases