How This Briefing Works
This dossier opens with key findings, then maps the gap between what LiveIntent Ad Management discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection evidence underneath. BLACKOUT observes runtime browser behavior and cites the regulations that address each pattern — legal determinations are your counsel's call.
At a Glance
across 39 sites
vendor fires before consent
Briefing
LiveIntent Ad Management monetizes email opens through embedded advertising units that leverage universal ID infrastructure. Their platform inserts competitor ads into marketing emails through dynamic content blocks, creating direct CAC subsidization while maintaining persistent cross-publisher tracking.
What This Means For You
Marketing teams discover competitor ads appearing in their own email campaigns. Brand teams inherit reputation damage from competing offers in owned channels. Legal faces GDPR exposure from advertising processing without consent. CFO pays email sending costs while LiveIntent captures advertising revenue and subsidizes competitor CAC.
Risk Channel Breakdown
Distorts attribution data
Perfect 100/100 CAC subsidization as LiveIntent sells advertising inventory in YOUR emails to competing brands. Recipients see competitor offers while you pay sending costs.
Expands attack surface
95/100 legal exposure from consent bypass (C09) and cross-domain sync (C08). GDPR Article 6 violations compounded by advertising processing without separate consent.
Threat Indicators
Runtime-observed (BTI-C)
Identity stitching
Ignoring CMP signals
Long-lived identifiers
PII deanonymization
Container/loader (neutral)
Per-code narrative explanations of what each detected behavior means for your organization
Per-code evidence with full attribution chain, severity rankings, and consequence narratives See pricing →
Claims vs. Reality
BLACKOUT analyzed LiveIntent Ad Management's public claims against observed runtime behavior and identified 1 contradiction.
Full claim-vs-reality gap analysis with claim text, observed behavior, severity, regulatory citations (GDPR, CCPA, ePrivacy), and evidence pointers per gap See pricing →
What To Do
3 for current users · 3 for evaluators
contractual leverage points
Role-specific actions (security / legal / marketing / procurement), full negotiation brief with contractual language, and BTI-code-specific consequences See pricing →
Supply Chain & Pairings
googletagmanager, liveintent, googleanalytics4…
Full supply-chain mapping (loads / loaded-by lists with vendor identities) and the undisclosed-subprocessor list with observation evidence See pricing →