{
  "docId": "019dd923-622c-750b-8b97-b61650b69e06",
  "docSlug": "6c16913ce6b9",
  "documentTitle": "AppLovin (APP)",
  "authorId": "51_Muddy_Waters",
  "authorName": "Muddy Waters Research",
  "documentKindSlug": "activist-deck",
  "documentKindLabel": "Activist deck",
  "sourceTypeSlug": "short_seller",
  "sourceTypeLabel": "Short seller",
  "presentationDate": "2025-05-07 00:00:00",
  "orientation": "landscape",
  "aspectRatio": 1.7777778,
  "pageNumber": 10,
  "pageCount": 16,
  "prevPage": 9,
  "nextPage": 11,
  "slideType": "expose_contradiction",
  "function": "expose_contradiction",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "The slide uses a 'Breaking the Sandbox' diagram to illustrate the data flow between a game, a webview, and a browser.",
  "elementsJson": [
    "headline_text",
    "paragraph",
    "process_diagram",
    "icon_grid"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-622c-750b-8b97-b61650b69e06/10",
  "deckHref": "/decks/019dd923-622c-750b-8b97-b61650b69e06",
  "deckJsonHref": "/decks/019dd923-622c-750b-8b97-b61650b69e06.json",
  "deckAnchorHref": "/decks/019dd923-622c-750b-8b97-b61650b69e06#slide-10",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "To circumvent this sandbox, APP inserts the CRT into the “webview” where ads run. This makes the CRT available to user click events or other interactions which point to the Shopify site; thereby making the CRT accessible to the web browser.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd953-0936-7173-ab18-71143da8b14f",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.45,
        "w": 0.94,
        "x": 0.03,
        "y": 0.42
      },
      "kind": "image",
      "text": "Diagram showing the 'No Login' process and the 'Breaking the Sandbox' mechanism.",
      "attrs": null,
      "subkind": "illustration",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "38aca1c7-dd66-4f7e-923e-5b6569a43419",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.15,
        "w": 0.94,
        "x": 0.03,
        "y": 0.18
      },
      "kind": "paragraph",
      "text": "The Max SDK “webview” and the mobile web browser on the Shopify site run on the same mobile device. To ensure user privacy, Safari and Zynga are sandboxed away from each other. This is designed to prevent the sharing of information, cookies, or trackers. To circumvent this sandbox, APP inserts the CRT into the “webview” where ads run. This makes the CRT available to user click events or other interactions which point to the Shopify site; thereby making the CRT accessible to the web browser.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "e9f20baa-8394-4aa0-b439-76ae018b2dba",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.1,
        "w": 0.7,
        "x": 0.03,
        "y": 0.04
      },
      "kind": "title",
      "text": "How Does APP Break the Privacy Sandbox? Creating, Relabeling and Passing the Persistent ID",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "43cce22a-c322-4eac-aecd-97788f30a435",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [
    {
      "name": "fraud-exposure",
      "slug": null,
      "matchId": "28e798c5-b222-4bde-add6-d5833f250b47",
      "evidence": "The slide explicitly details a mechanism to circumvent privacy protections, framing it as a deceptive practice.",
      "confidence": 0.9
    }
  ],
  "arcBeats": [
    {
      "to": 11,
      "from": 7,
      "beatId": "d8fc7000-740c-49e7-955e-8358b56459ea",
      "arcName": "Overcoming the Monster",
      "arcSlug": "overcoming-monster",
      "beatName": "The Struggle",
      "beatSlug": "overcoming-monster-the-struggle",
      "evidence": "Slides 7-11 present evidence of AppLovin's alleged misuse of persistent identifiers.",
      "position": 1,
      "confidence": 0.8,
      "parentBeatName": "Development",
      "parentBeatSlug": "development"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}