Google is not removing third-party cookies from Chrome. It spent six years building the replacement, confirmed in 2025 that Chrome will keep the cookies instead, and has spent 2026 retiring the very APIs it built to replace them. Two more changes moved the ground under marketing measurement this year: Meta redefined what counts as a click, and a new wave of state privacy law started treating the ad pixel as a data-sharing tool.
Chrome keeps the cookies, retires what was built to replace them
Google spent six years building Privacy Sandbox, a set of browser APIs meant to replace third-party cookies for targeting and measurement without cross-site tracking. That project is over. In an April 2025 update, Google confirmed Chrome would not add the planned cookie consent prompt and would keep supporting third-party cookies as they currently work (Google Privacy Sandbox blog, 2025). Later that year, Google said it would retire the remaining Privacy Sandbox technologies, including the Attribution Reporting API, Topics and Protected Audience, for both Chrome and Android (Privacy Sandbox status page, Google, 2025). The Chromium team has scheduled the deprecation for Chrome 144, which shipped in January 2026, with full removal targeted for Chrome 150 in July 2026 (Chromium blink-dev group, 2026).
The reversal followed thin adoption. Advertisers largely kept using cookies through the Privacy Sandbox trial period rather than migrating, while regulators, including the UK Competition and Markets Authority, kept pressing Google over whether the new APIs disadvantaged rivals (Digiday, 2025).
Any attribution model built around the Attribution Reporting API over the past two years needs to be unwound before Chrome 150 removes it in July. Teams that paused cookie-based tracking in anticipation of deprecation can stop waiting. The planning question has shifted from measuring without cookies to measuring a browser that kept its cookies while the ad platforms layered on top of it kept changing anyway.
Meta redefines what counts as a click
Meta removed the 7-day view and 28-day view attribution windows from Ads Manager and the Ads Insights API on January 12, 2026, leaving 1-day view and 7-day click as the only options (ppc.land, 2026). Advertisers running awareness and video campaigns, where a user sees an ad and converts later without clicking, reported conversion counts dropping between 15 and 40 percent overnight with no change to budgets or targeting (ppc.land, 2026).
Meta followed on March 3, 2026 with a second change. Click-through attribution now requires an actual link click. Likes, shares, saves, comments and profile taps no longer count; they moved into a new engage-through category with a one-day window, and video views inside that category now count at a five-second threshold instead of ten (Search Engine Land, 2026).
A reported drop in Meta conversions this year is not automatically a drop in performance. It may be a definition change. Any team still comparing 2026 Meta numbers against a 2025 baseline without adjusting for both changes is comparing two different metrics and will draw the wrong conclusion about which campaigns are working.
States start treating the pixel as a data-sharing tool
Three state privacy laws took effect January 1, 2026: the Indiana Consumer Data Protection Act, the Kentucky Consumer Data Protection Act and the Rhode Island Data Transparency and Privacy Protection Act (Koley Jessen, 2026). All three grant consumers opt-out rights over targeted advertising, the sale of personal data and certain profiling, and Indiana and Kentucky largely track the earlier Virginia Consumer Data Protection Act model. A second wave of amendments to existing laws in Connecticut, Arkansas and Utah took effect July 1, 2026 (MultiState, 2026).
The practical shift is in how "sale" and "sharing" get defined. Privacy compliance vendor Secure Privacy notes that under the newer laws, sending customer data to an ad platform to build a lookalike audience or improve targeting can count as sharing even without money changing hands. That brings pixel-based tags such as the Meta Pixel, the TikTok Pixel and the LinkedIn Insight Tag inside the opt-out requirement (Secure Privacy, 2026, vendor analysis).
Marketing teams that rely on pixel-based tags should audit which ones fire before consent is captured in any state with an opt-out requirement for targeted advertising, not only California. A consent management setup tuned to CCPA and GDPR is not automatically tuned to Indiana, Kentucky, Rhode Island or the amended Connecticut and Utah laws.
What to watch next
Chrome 150 ships in July 2026 with the remaining Privacy Sandbox APIs fully removed. Any team still dependent on the Attribution Reporting API has roughly nine months from today to finish moving off it. A further round of state privacy laws is scheduled to take effect January 1, 2027, and the drafts released so far extend the definition of data sharing further into ad tech data flows, not less.
Sources
Google. "Next steps for Privacy Sandbox and tracking protections in Chrome." Privacy Sandbox blog. 2025. https://privacysandbox.google.com/blog/privacy-sandbox-next-steps
Google. "Privacy Sandbox feature status." 2025. https://privacysandbox.google.com/overview/status
Digiday. "Google Chrome will now continue to use third-party cookies." 2025. https://digiday.com/media/google-chrome-will-now-continue-to-use-third-party-cookies/
Chromium blink-dev group. "Intent to Deprecate and Remove: Attribution Reporting API." 2026. https://groups.google.com/a/chromium.org/g/blink-dev/c/4K2RRt6VYCQ/m/xt3TXi3WBQAJ
ppc.land. "Meta restricts attribution windows and data retention in Ads Insights API." 2026. https://ppc.land/meta-restricts-attribution-windows-and-data-retention-in-ads-insights-api/
Search Engine Land. "Meta introduces click and engage-through attribution updates." 2026. https://searchengineland.com/meta-introduces-click-and-engage-through-attribution-updates-470629
Koley Jessen. "New State Privacy Laws Effective January 1, 2026: Indiana, Kentucky, and Rhode Island." 2026. https://www.koleyjessen.com/insights/publications/new-state-privacy-laws-effective-january-1-2026-indiana-kentucky-and-rhode-island
MultiState. "20 State Privacy Laws in Effect in 2026: Key Dates & Changes." 2026. https://www.multistate.us/insider/2026/2/4/all-of-the-comprehensive-privacy-laws-that-take-effect-in-2026
Secure Privacy. "US State Privacy Laws 2026: What Marketing Teams Must Know." 2026 (vendor analysis, disclosed). https://secureprivacy.ai/blog/us-state-privacy-laws-2026-marketing