Episode 196: Ads in Fortune Cookies? Yes, and A Lot More.

Full analysis

Apple just told the identity industry its web browser is a dead end, and almost nobody blinked. That's the story buried in Episode 196 of Marketecture, where Ari Paparo and Eric Franchi ran a dense news lap before interviewing OpenFortune's Carlo Palomino about ads printed in fortune cookies. The cookie business is fun. The Apple post is the thing that moves money.

Here's what actually got decided this week, and it isn't one decision. Apple confirmed in a WebKit blog post that Safari will block first-party pixels from feeding cross-site identity resolution. In plain terms: the hashed-email trick that identity vendors use to recognize the same person across different sites no longer works on Safari. That's not a proposal. That's shipped, and it's hard to undo. The rest of the cycle, Meta's earnings, Netflix's ad miss, Salesforce buying Braze, the Publicis/LiveRamp FTC clearance, are each easier to reverse or still in motion. So this briefing weighs the Apple move hardest and treats the rest as context.

The Market Analyst

The LiveRamp news is the quiet signal. Publicis buying LiveRamp got FTC clearance with a five-year consent decree: equal product access for all customers, a firewall between Publicis and LiveRamp data, audited twice a year for two years then annually. Regulators let a holding company own the industry's main identity rail, as long as the walls are watched. That tells you the market now treats identity infrastructure as owned, not neutral. Apple's post complicates the picture immediately: the asset Publicis just bought gets smaller on Safari the same week. Meanwhile Meta prints $64.6 billion, up 26%, and absorbs a $25 billion New Mexico fine as a line item on the call. One company is now big enough that a $25 billion fine is earnings-call housekeeping. That gap, between the walled gardens and everyone building workarounds, is the whole market in one episode.

For the non-specialist: the companies that know who you are without needing a cookie keep winning, and the ones who have to stitch identity together across sites keep losing ground.

The Skeptic

Paparo made the case against taking Apple at its word, and he's right to. Apple blocks cross-site tracking on the web while running the exact same kind of targeting inside its App Store, where it keeps the money. So the privacy stance is competitive positioning where it costs Apple nothing and principle is cheap. Fine. But the skeptic's harder question is for the operators cheering the server-side workaround. Paparo said server-side is the only technical path left. That means moving identity matching off the browser and onto your own servers, where Apple can't see it. Today. Apple has shipped browser change after browser change for a decade. Betting your identity roadmap on a gap Apple hasn't closed yet is betting Apple forgot to look. And then there's OpenFortune's 3% guaranteed QR scan rate "beating other media by 30 to 90x." Self-reported, no third party, sold by the man selling the cookies. Treat it as a sales sheet.

The Operator

Netflix is the operator's lesson this week. It grew ads revenue about 80% year over year and still missed, because the target it fed Wall Street was 100%, and it blamed gaps in its own ad-tech stack. Eric Franchi, citing Eric Seufert, argued Netflix sequenced it wrong: it led with high-CPM brand packages when it should have opened with performance advertising that uses conversion data to build a broad advertiser base, then layered premium on top. The result is lumpy revenue and not enough advertisers to backfill unsold inventory. For any publisher standing up an ad business: a thin advertiser base means every quarter rides on a handful of big brand deals, and when one slips, the whole number slips. Netflix also shipped a conversion pixel and a Trade Desk integration, which is the admission that going it alone on the stack was the thing that broke first.

For the non-specialist: Netflix chased the glossy brand money first, and now it doesn't have enough small advertisers to fill the seats nobody premium bought.

The CFO

Follow the spend. Salesforce paid $5.6 billion for Braze, a 50% premium at roughly 7x revenue, to defend Marketing Cloud share from a company eating into it. That's a defensive price, and Franchi read it correctly as Salesforce buying back a problem rather than buying growth. Compare that to Kevel's $52 million Series D. Kevel runs an ad-serving API for 100-plus commerce media networks, and Paparo put it "in pole position" if Google is forced to divest or open Google Ad Manager, its sell-side ad server. One of these is a holding company paying up to stop bleeding. The other is a small check on a cheap option that pays off only if the Google antitrust remedy actually opens the publisher ad-server market. For a CFO weighing where identity and ad-serving dollars go in 2027, the Apple post changes the math on both: anything priced on web identity just got a shorter runway.

Where the council splits

Two real disagreements sit underneath the week.

First, is the server-side workaround a durable plan or a stay of execution? The Operator sees a live path to keep identity working. The Skeptic sees the next thing Apple closes. Your identity roadmap depends on which one you believe, and Apple's ten-year track record of closing gaps one browser release at a time favors the Skeptic.

Second, did regulators just bless identity consolidation or quietly devalue it? The FTC cleared Publicis/LiveRamp with heavy conditions, which says identity rails are now owned by the sell-side's customers. Apple's post, same week, says the web version of that asset is shrinking. Both are true. The question is whether LiveRamp's value now lives off the open web entirely, in retail media and server-side matching, where Apple's browser rules don't reach.

What it hinges on

The whole week turns on one belief: how much of the identity business still runs through the web browser. If the answer is "a lot," Apple just repriced the category and the LiveRamp deal is worth less than the day it was signed. If the answer is "it already moved to server-side, retail media, and walled gardens," then Apple's post is noise and the real action is consolidation. Before committing a 2027 identity budget, pull your own match rates on Safari traffic today versus six months ago. That number says which world you're in.

Prediction: At least one publicly traded identity or data company among LiveRamp, Criteo, and Experian will cite Safari or browser-based identity loss as a drag on growth on an earnings call reported before 2027-04-30.

Confidence: Medium. The mechanism is shipped and public, but timing and framing on any single call is hard to pin.

Why: Apple's WebKit post this week confirmed Safari now blocks the hashed-email signal that identity vendors use to recognize users across sites, and that is live, not proposed. Safari is a large share of US mobile web traffic, so any vendor whose match rates depend on the browser will see it in the numbers within a quarter or two. These companies already disclose identity resolution as a core driver, so when it softens, they explain the miss rather than eat it silently, the same way Netflix blamed its own stack this week rather than wear the ad-revenue miss quietly. The less likely outcome is total silence, and that only holds if the business already moved fully off the web to server-side and retail media, which the LiveRamp consent decree and the server-side scramble both suggest is still in progress.

Revisit by 2027-04-30: We're right if LiveRamp, Criteo, or Experian names Safari or browser-based identity loss as a growth headwind on an earnings call reported before that date. We're wrong if all three report through that window without attributing any identity or match-rate pressure to browser changes.