Meta reportedly says it needs to inject the script into websites to respect privacy choices.
Fastlane founder Felix Krause has revealed that Facebook and Instagram’s in-app browsers inject JavaScript into third-party websites.
Krause originally said the in-app browsers were injecting the Meta Pixel, which Meta describes as « a snippet of JavaScript code that allows you to track visitor activity on your website, » but has since updated his report to say the social networking company’s mobile apps are injecting a script identified as « pcm.js » instead. A comment within that script explains that it was « developed to honor people’s privacy and [App Tracking Transparency] choices » while they use Facebook and Instagram.
App Tracking Transparency is a framework Apple introduced with iOS 14.5 that requires developers to request permission to collect tracking data from their users. Meta has repeatedly criticized the framework and told Facebook and Instagram users that it relies on tracking data—or at least the advertising revenues it supports—to keep its services free. Its apps still have to honor user requests not to be tracked, however, and the company says that’s why its browsers inject the « pcm.
