If the inline PDF is not rendering correctly, you can download the PDF file here.
 Graph API: Changelog Version 3.0. https://developers.facebook.com/docs/graph-api/changelog/version3.0.
 A. Andreou G. Venkatadri O. Goga K. P. Gummadi P. Loiseau and A. Mislove. Investigating Ad Transparency Mechanisms in Social Media: A Case Study of Facebook’s Explanations. NDSS 2018.
 About Customer Match. https://support.google.com/adwords/answer/6379332?hl=en.
 About Potential Reach. https://www.facebook.com/business/help/1665333080167380?helpref=faq_content.
 Accessing Your Facebook Data. https://www.facebook.com/help/405183566203254.
 Best practices for unique identifiers. https://developer.android.com/training/articles/user-data-ids.
 C. Cadwalladr and E. Graham-Harrison. Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach. https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election.
 A. Datta M. C. Tschantz and A. Datta. Automated Experiments on Ad Privacy Settings: A Tale of Opacity Choice and Discrimination. PETS 2015.
 Facebook Data Policy. https://www.facebook.com/about/privacy/update.
 Facebook Enabled Advertisers to Reach ‘Jew Haters’. https://www.propublica.org/article/facebook-enabled-advertisers-to-reach-jew-haters.
 Facebook Leaks Usernames User IDs and Personal Details to Advertisers. http://www.benedelman.org/news/052010-1.html.
 Facebook Lets Advertisers Exclude Users by Race. https://www.propublica.org/article/facebook-lets-advertisers-exclude-users-by-race/.
 Facebook Messenger Chatbots Can Leak Your Private Information. https://www.techworm.net/2016/09/facebook-messenger-chatbots-can-leak-private-information.html.
 Facebook Response to Questions from Committee on Commerce Science and Transportation. https://www.commerce.senate.gov/public/_cache/files/9d8e069d-2670-4530-bcdcd3a63a8831c4/7C8DE61421D13E86FC6855CC2EA7AEA7.senate-commerce-committee-combined-qfrs-06.11.2018.pdf.
 Facebook Turned Its Two-Factor Security ‘Feature’ Into the Worst Kind of Spam. https://gizmodo.com/facebook-turned-its-two-factor-security-feature-into-th-1823006334.
 Facebook adds human reviewers after ‘Jew haters’ ad scandal. http://www.bbc.com/news/technology-41342642.
 Facebook plans crackdown on ad targeting by email without consent. https://techcrunch.com/2018/03/31/custom-audiences-certification/.
 Facebook: About the delivery system: Ad auctions. https://www.facebook.com/business/help/430291176997542.
 How Facebook Figures Out Everyone You’ve Ever Met. https://gizmodo.com/how-facebook-figures-out-everyone-youve-ever-met-1819822691.
 How Trump Conquered Facebookâ•flWithout Russian Ads. https://www.wired.com/story/how-trump-conquered-facebookwithout-russian-ads/.
 Improving Enforcement and Promoting Diversity: Updates to Ads Policies and Tools. http://newsroom.fb.com/news/2017/02/improving-enforcement-and-promoting-diversity-updates-to-ads-policies-and-tools/.
 A. Korolova. Privacy Violations Using Microtargeted Ads: A Case Study. Journal of Privacy and Confidentiality 3(1) 2011.
 B. Krishnamurthy K. Naryshkin and C. E. Wills. Privacy leakage vs. Protection measures: the growing disconnect. IEEE W2SP 2011.
 M. Lecuyer G. Ducoffe F. Lan A. Papancea T. Petsios R. Spahn A. Chaintreau and R. Geambasu. XRay: Enhancing the Web’s Transparency with Differential Correlation. USENIX Security 2014.
 M. Lecuyer R. Spahn Y. Spiliopolous A. Chaintreau R. Geambasu and D. Hsu. Sunlight: Fine-grained Targeting Detection at Scale with Statistical Confidence. CCS 2015.
 G. Marvin. Exclusive: Facebook will no longer show audience reach estimates for Custom Audiences after vulnerability detected. 2018. https://marketingland.com/exclusive-facebook-will-no-longer-show-audience-reach-estimates-for-custom-audiences-after-vulnerability-detected-236923/.
 J. Parra-Arnau J. P. Achara and C. Castelluccia. MyAd-Choices: Bringing Transparency and Control to Online Advertising. ACM TWEB 11 2017.
 Protecting Privacy with Referrers. Facebook Engineering’s Notes. http://www.facebook.com/notes/facebook-engineering/protecting-privacy-with-referrers/392382738919.
 M. Schroepfer. An Update on Our Plans to Restrict Data Access on Facebook. 2018. https://newsroom.fb.com/news/2018/04/restricting-data-access/.
 T. Speicher M. Ali G. Venkatadri F. N. Ribeiro G. Arvanitakis F. Benevenuto K. P. Gummadi P. Loiseau and A. Mislove. On the Potential for Discrimination in Online Targeted Advertising. FAT* 2018.
 C. E. Tucker. Social Networks Personalized Advertising and Privacy Controls. Journal of Marketing Research 2014.
 Target Custom Groups of Twitter Users. https://business.twitter.com/en/targeting/tailored-audiences.html.
 The Facebook Business Tools. https://www.facebook.com/help/331509497253087.
 The Facebook Companies. https://www.facebook.com/help/111814505650678.
 G. Venkatadri Y. Liu A. Andreou O. Goga P. Loiseau A. Mislove and K. P. Gummadi. Privacy Risks with Facebook’s PII-based Targeting: Auditing a Data Broker’s Advertising Interface. IEEE S&P 2018.
 C. E. Wills and C. Tatar. Understanding What They Do with What They Know. WPES 2012.
 What are the Facebook Products? https://www.facebook.com/help/1561485474074139.
 What’s a Custom Audience from a Customer List? https://www.facebook.com/business/help/341425252616329/.