Six months after third-party cookies disappeared from Chrome, the industry has split into three tiers: those who saw it coming and built durable infrastructure, those who scrambled and found adequate workarounds, and those who are still bleeding CPM. Here is what the data actually shows.
Google's deprecation of third-party cookies in Chrome completed in September 2025, following years of delays that allowed most sophisticated players to prepare while allowing others to postpone the inevitable. Safari and Firefox had blocked third-party cookies since 2020, so this represented the final closure of the door rather than a sudden shock. For publishers primarily serving Chrome audiences, though, the impact was significant.
The initial industry panic proved overblown in some areas and understated in others. CPMs did not collapse industry-wide as some feared. But the distribution of impact was severe: publishers and advertisers who relied on third-party data for audience targeting and attribution saw meaningful performance degradation, while those with first-party data infrastructure largely transitioned without revenue impact.
The cookie deprecation did not destroy the programmatic ecosystem. It redistributed value toward publishers and advertisers who had invested in first-party data. The redistribution was significant.
The clearest winners are publishers with strong logged-in user bases and mature first-party data programmes. News publishers with subscription products, gaming platforms with user accounts, and e-commerce adjacent content sites all reported flat or improving CPMs six months after deprecation. Their audiences were addressable through authenticated identifiers, and demand followed.
Commerce media networks have been the standout performers. Retailers with transaction data can offer deterministic audience targeting that outperforms the probabilistic cookie-based targeting it replaced. Retail media CPMs have increased 25 to 40 percent year-over-year as brand budgets shift toward environments where attribution is clean and addressability is strong.
CTV publishers were structurally insulated from cookie deprecation (the format never relied on third-party cookies) and have absorbed a portion of the budgets displaced from cookie-dependent web environments. CTV ad spend grew 38 percent year-over-year in Q1 2026, accelerated in part by cookieless headwinds in open web display.
Publishers who operated open web content without a meaningful authentication layer are experiencing the impact most acutely. For unaddressed inventory (impressions where no authenticated identifier is available), CPMs have dropped 18 to 28 percent compared to the pre-deprecation baseline. This is not a universal decline but a segmentation of the addressable and unaddressable inventory pools, with the unaddressable pool now commanding a significant discount.
Independent DSPs and data management platforms built primarily around third-party cookie data have faced existential pressure. Several have pivoted to contextual or cohort-based approaches with mixed results. The platforms that had invested in alternative identity resolution (UID2, ID5, LiveRamp integrations) before deprecation are faring better, but the transition has not been seamless.
Mid-tier advertisers who lacked the resources to build first-party data programmes and did not have strong relationships with data clean room providers are seeing campaign performance decline without a clear path to recovery. Their DSP partners have not fully bridged the identity gap, and the alternative measurement solutions require operational investment that many have not yet made.
Google's Privacy Sandbox APIs, particularly the Protected Audience API (formerly FLEDGE) and the Attribution Reporting API, have seen adoption but not at the scale or performance level that Google projected. Publishers report that Protected Audience auctions are clearing at CPMs 30 to 45 percent below equivalent cookie-based auctions. The computational overhead and latency of on-device auctions remain unresolved for many ad tech vendors.
Attribution Reporting API adoption has been slower than expected. The noisy reporting mechanism, designed to prevent cross-site tracking, introduces measurement uncertainty that advertisers have been reluctant to accept without independent validation. Independent measurement providers are working to calibrate their models against the privacy-preserving signals, but the process is ongoing.
Three solutions are emerging as the structural foundation for a stable post-cookie ecosystem. First, authenticated identity graphs built on email-based universal identifiers (UID2, ID5) provide deterministic addressability for publishers and advertisers with meaningful CRM overlap. Second, contextual intelligence has returned as a first-class targeting method, with ML-powered contextual classification now delivering performance that approaches cookie-based audience targeting in brand-safe environments. Third, data clean rooms are enabling privacy-preserving audience activation between publishers and advertisers without requiring cookie-level individual tracking.
The publishers and advertisers who will dominate the next 24 months are building across all three legs of this stool simultaneously. Relying on any single solution creates fragility. The hybrid approach, combining authenticated audiences where available with contextual fallback and clean room collaboration for high-value activation, produces durable performance across the full inventory pool.
The transition is not over. But the path is clearer than it was six months ago. The question for every publisher and advertiser is whether they are building toward the stable endpoint or waiting for someone else to solve the problem for them.
Monthly analysis on programmatic trends, publisher strategies, and advertiser playbooks. No fluff. Just data and insight from the team building at the frontier of adtech.
No spam. Unsubscribe anytime. Monthly cadence.