Guides / Paid ads

Retargeting after privacy changes: what still works for a small business

Retargeting audiences are smaller and less precise than they used to be: Apple's App Tracking Transparency requires apps to ask before tracking, Safari limits cross-site tracking, and consent choices remove more people. Chrome kept third-party cookies with user choice, and Google retired most Privacy Sandbox technologies. What still works: server-side conversion data, customer lists from people who opted in, platform-native engagement audiences, and your own email and WhatsApp flows, which don't depend on cookies at all.

By Ahmed Daoud · Updated · Prices and features checked 23 October 2026

Retargeting, showing ads to people who visited your site or engaged with your brand, used to be the easiest win in paid advertising. Several privacy changes have made audiences smaller and harder to measure. It still works, but differently.

What changed

Change Effect
Apple App Tracking Transparency (ATT) Apps must ask permission before tracking users across other companies’ apps and websites. Many people decline, so in-app signals from iPhones are reduced.
Safari and WebKit tracking prevention Limits cross-site tracking and shortens the life of some cookies, so website retargeting pools from Safari users shrink.
Consent choices Where you use a consent banner, people who decline aren’t added to audiences.
Chrome Google decided to keep its current approach of offering users third-party cookie choice, and in October 2025 announced it would retire most Privacy Sandbox technologies, including Protected Audience and Topics.

The result: smaller, less complete audiences, and more conversions that platforms model rather than observe.

What still works

1. Send better first-party data

Server-side events (Meta’s Conversions API, Google’s enhanced conversions) and customer details you’re allowed to share improve matching and measurement. See Conversions API and enhanced conversions.

2. Customer lists

Upload lists of customers or subscribers who agreed to it (Google’s Customer Match, Meta custom audiences) to:

  • Exclude existing customers from acquisition campaigns
  • Re-engage past customers with new products
  • Seed lookalike or similar audiences where available

Your privacy notice should say you do this. See UAE PDPL and marketing consent.

3. Platform engagement audiences

People who watched your videos, engaged with your Instagram or TikTok profile, or opened a lead form. These are built inside the platform and don’t depend on your website’s cookies.

4. Owned channels: the most reliable retargeting

An abandoned-cart email or WhatsApp message to someone who gave you their details reaches them far more reliably than an ad that may or may not find them. See abandoned cart recovery and your first lifecycle flows.

Capturing an email or phone number earlier (lead magnets, checkout first step, WhatsApp opt-in) is the best protection against shrinking ad audiences.

5. Broader prospecting with good creative

Automated campaigns (Advantage+, Performance Max) often find warm prospects without explicit retargeting. Meta notes Advantage+ audience isn’t recommended for strict retargeting; use defined audiences for that.

A simple retargeting setup for a small business

Audience Window Message
Viewed product / service, no enquiry 7–14 days Proof and the main objection answered
Added to cart, no purchase 3–7 days Reminder, delivery info, payment options
Engaged with videos / profile 30 days Offer or best-seller
Customers (list) Exclude from acquisition; separate cross-sell New products, refills

Keep frequency in check: seeing the same ad ten times a week annoys people.

Measuring it honestly

Retargeting often claims conversions that would have happened anyway. Compare results with a holdout (pause retargeting in one area or for one period) before increasing spend. See why platforms never agree.

Frequently asked questions

Is retargeting dead?

No, but audiences are smaller and measurement is less precise. It works best combined with email and WhatsApp to people who opted in.

No. Follow the law and your stated privacy practices. Improve first-party data and owned channels instead.

Does Chrome’s decision mean nothing changed?

Chrome still gives users choices about cookies, and other browsers restrict tracking. Plan for incomplete data either way.

If you’d like your retargeting and lifecycle flows set up to work together, that’s part of our growth funnel service.

Free download · Excel template

Retargeting audience plan

Plan your retargeting audiences by source (website, engagement, customer lists), consent basis, exclusions and message, alongside the email and WhatsApp flows that cover the same moments.

Download it

No sign-up. Opens in Excel, Google Sheets or Numbers.

Rather have it done?

This is the kind of work our growth funnel service covers. Tell us where you are today and we’ll reply with a plan and a fixed price.

Let’s talk

Sources

  1. Apple Developer: user privacy and data use (App Tracking Transparency)
  2. WebKit: tracking prevention in WebKit
  3. Privacy Sandbox: update on plans for Privacy Sandbox technologies (Oct 2025)
  4. Google Ads Help: about your data segments (remarketing, Customer Match)
  5. Meta for Developers: Conversions API

Written by

Ahmed Daoud, Business development, Jinnflow. Ahmed has worked in business development for 8 years. At Jinnflow, Ahmed leads sales, helps founders and small businesses decide what to build first and what it should cost, and writes the business and sales guides.