Opt Out of Google FLOC for Site Visitors (One Line of Code)

Google has another new thing they are doing, called FLOC (Federated Learning of Cohorts). It’s used to — surprise — track user activity across websites. Opting out ideally is handled by the user, who can customize their browser settings to disable FLOC while surfing around the Web. Beyond configuring your browser to opt-out of FLOC, you can disable it on any website with a single line of code.

Contents

• Opt-out your self
• Opt-out your site
  • How to add via Apache/.htaccess
  • How to add via Nginx
  • How to add via WordPress
• Test if it’s working

Opt-out your self

For end-users, the easiest way to opt-out of FLOC data collection is to either:

• Don’t use Chrome browser
• OR use a Chrome extension that disables FLOC

Either of those methods will prevent Google FLOC from tracking your activity. If you have a website and want to opt-out of FLOC for your users, you can do it easily with one line of code.

Opt-out your site

To opt any website or web page out of the FLOC monitoring program, add the following Permissions-Policy header to your page(s):

Permissions-Policy: interest-cohort=()

You can read all of the details about this HTTP response header in the official spec. And remember, this disables Google FLOC data collection on your site only. Once the visitor leaves your site, their activity may be tracked by FLOC elsewhere on the Web (unless it is disabled via some other method).

Below are several ways to add the Permissions-Policy header: via Apache/.htaccess, Nginx, or WordPress.

How to add via Apache/.htaccess

As explained in my tutorial on adding custom HTTP headers with .htaccess, we can use Apache’s Header set directive to add the Permissions-Policy header to your entire website:

Header set Permissions-Policy "interest-cohort=()"

Add that line to your site’s public/root .htaccess file, save changes, and done. Instant relief from Google’s latest data harvesting protocol for all of your site visitors.

How to add via Nginx

Nginx users can add the Permissions-Policy header via the add_header directive:

server {
	location / {
		add_header Permissions-Policy interest-cohort=();
	}
}

Add that code to your site’s configuration file, save changes, and reload/restart the server for changes to take effect. Here is one possible way of doing it:

nginx -t && service nginx reload

That line checks the syntax of your configuration file and then reloads Nginx if no errors are found.

How to add via WordPress

If you don’t have access to server configuration files, or just want a super-easy way to opt-out your site from FLOC, you can install a free plugin. Currently there are five free plugins that can do it (that I was able to find when writing this post):

• Disable FLoC
• Disable FLoC
• Flic FLoC
• Disable FLoC Easily
• Go FLoC Away

I would recommend the first plugin in the list, as it’s from a trusted WordPress contributor. The others may also be great, just make sure to read the documentation and fine print, etc.

Test if it’s working

After implementing new headers, Google Chrome will not collect data from users while they are at your website. So your site will not be included in FLOC’s profiling of your visitor’s browsing habits. Again, the header only opts out your site. Once the user leaves your site, they are susceptible to FLOC data collection (unless they have disabled/opted-out via some other method).

You can verify proper inclusion of the header by using a free browser extension, or you can just enter your site URL in a free online header checker tool, for example:

• HTTP Header Check
• HTTP Header Checker

And the results will show you all of the headers that are returned for requests made to your site. Also there are plenty of other free header-checking services out there, take advantage.

About the Author

Jeff Starr = Web Developer. Security Specialist. WordPress Buff.