The average website loads 48 third-party trackers per visit, according to NordVPN's 2025 analysis of the top 100 websites across 25 countries. That is the most-cited answer to the question, but it is not the only one: a stricter, domain-level count from WhoTracks.Me puts the same question's answer at 7, and both numbers are correct for what they measure.
The gap between 48 and 7 is not a data error, and it is the real story behind "how many trackers." Below is what each counting method actually measures, how that count splits by device and site category, and which companies show up most often once you start counting.
How many trackers does the average website actually have?
NordVPN's Cybersecurity Research Lab visited the top 100 websites in 25 countries during 2025, using three separate tracker-detection tools (Brave, Privacy Badger, and uBlock Origin) without logging in, and found 48 trackers per site on average. That figure counts every individual tracking request and script a page fires, not just the number of distinct companies behind them, which is why it reads higher than counts built from a different method.
Figure 1: The same question, two defensible answers, depending on what counts as "a tracker." Sources: NordVPN Cybersecurity Research Lab (2025), WhoTracks.Me/Ghostery (2025 dataset).
Treat 48 as the realistic count of tracking activity an ordinary visitor's browser actually performs on a commercial website, and treat 7 as the more conservative count of distinct companies involved. Both numbers describe the same underlying page.
Why do tracker-count studies disagree so much?
Every published "average trackers per site" figure depends on one design choice: does a study count individual tracking requests, or does it count distinct third-party domains contacted? NordVPN's browser-extension test logs every script, pixel, and beacon a page fires, so a single ad-tech company running five separate scripts on one page adds five to the count. WhoTracks.Me, the Ghostery-maintained tracking observatory, counts domains instead, so that same company adds one.
| Source | Method | Sites covered | Average trackers |
|---|---|---|---|
| NordVPN Cybersecurity Research Lab (2025) | Browser-extension request count | Top 100 sites, 25 countries | 48 |
| NordVPN Cybersecurity Research Lab (2025) | Browser-extension request count, social platforms only | Social media subset | 160 |
| WhoTracks.Me / Ghostery (2025) | Domain-level crawl | Top 10,000 sites | 7 |
Figure 2: The methodology choice, not the website, decides whether "average trackers" reads as 48 or 7. Source: NordVPN Cybersecurity Research Lab (2025) and WhoTracks.Me/Ghostery methodology notes (2025).
Neither number is wrong. A site owner auditing their own page for disclosure purposes needs the request-level count, since every script that sets a cookie or collects an identifier needs a line in a privacy policy; a researcher comparing tracking prevalence across the whole web needs the domain-level count, since it is not skewed by how many scripts one company happens to load.
How is that tracker count distributed across desktop and mobile pages?
75% of desktop websites and 74% of mobile websites carry at least one third-party tracker, according to the HTTP Archive's 2025 Web Almanac, published in January 2026 from a crawl of millions of pages. That yes/no figure understates how concentrated tracking gets once a page carries any trackers at all: on desktop specifically, 55% of pages carry two or more trackers, and 39% carry three or more.
Figure 3: Most tracked pages are not carrying just one tracker. Source: HTTP Archive, 2025 Web Almanac (published January 2026).
A quarter of the web carrying zero third-party trackers sounds like a meaningful privacy-respecting minority, but once a page has one tracker, the odds it has three or more sit above 50%. Tracking on the open web tends to arrive in clusters, not single scripts.
How many trackers does a social media or news-heavy site carry compared to an average page?
NordVPN's same 2025 research split its results by category, and social media sites stood out sharply: they average roughly 160 trackers each, more than triple the 48-tracker all-site average and over 20 times WhoTracks.Me's 7-tracker domain-level figure. Ad-supported, engagement-driven platforms load far more tracking infrastructure than an ordinary commercial or informational site, because each additional ad network, engagement pixel, and analytics partner adds its own set of scripts.
The gap holds regardless of which counting method a reader prefers: 160 sits well above 48 using NordVPN's own request-level method, and it would sit well above 7 under a domain-level count too, since social platforms run more distinct companies' code, not just more requests from the same handful of companies. If your own site embeds a social share widget, an embedded feed, or a login-with-social button, each of those typically brings its own tracker along with it, not just the social network's core script.
Sites that add social widgets should expect their own tracker count to climb toward the higher end of this range, not stay near the 48-tracker baseline.
Which companies run the most trackers across the web?
A small number of companies account for most of the web's tracking footprint. Google-owned properties appear on 61% of all webpages measured by the 2025 Web Almanac, with Google Analytics alone present on 53% of pages and Google AdSense on 6.18%. Facebook trails at 22% of pages by entity, with the Facebook Pixel specifically embedded on 16%.
Figure 4: Google's tracking footprint dwarfs every other single company. Source: HTTP Archive, 2025 Web Almanac.
| Entity | Share of pages | Cookie name | Cookie prevalence |
|---|---|---|---|
| Google (all properties) | 61% | _ga (Google Analytics) | 46% of pages |
| Google Analytics specifically | 53% | _ga | 46% of pages |
| 22% | _fbp (Meta Pixel) | 14% of pages | |
| DoubleClick.net | Set on 20% of desktop sites | IDE and related ad cookies | 20% of desktop sites |
The cookie-level view confirms the entity-level one: Google Analytics' _ga cookie appears on 46% of webpages, more than triple the reach of Meta's _fbp cookie. If your own site runs Google Analytics or a Meta Pixel, both of which trigger these exact cookie names, naming them specifically is what most cookie-consent laws require, and using a privacy policy generator that lists the actual trackers your site runs closes that gap faster than editing a generic template by hand. That same concentration shows up in the broader picture in our 2026 online tracking data, which covers who is watching beyond just the count.
A handful of companies, not thousands of independent trackers, account for the majority of what gets counted in every study on this page.
Why hasn't the number of trackers gone down in 2026?
For most of the past decade, the tracking industry expected third-party cookies, the mechanism most trackers rely on, to disappear from the dominant browser. That did not happen. Google spent years signaling a full phase-out, then reversed direction twice in 2025 alone.
Figure 5: Six years of delayed deprecation ended with third-party cookies staying on by default. Source: Google Chrome policy announcements, as compiled by Usercentrics (2025).
In April 2025, Google confirmed it would not deprecate third-party cookies in Chrome and would not ship the standalone consent prompt it had spent a year designing as a replacement. Six months later, in October 2025, Google formally retired the remaining Privacy Sandbox APIs, including Attribution Reporting, Topics, and Protected Audience, on both Chrome and Android. Some visitors respond to that reversal by installing a VPN, whose 2026 adoption varies widely by country, though a VPN masks IP-based tracking signals without stopping cookie- and script-based trackers from firing on a visited page.
The practical result for 2026: third-party cookies remain a live, default-on tracking mechanism in the world's most-used browser, and the 48-tracker average is not a number that is trending down on its own.
The Bottom Line
The honest answer to "how many trackers are on the average website" depends on how you count. Using NordVPN's request-level method, it is 48, with social media sites running upward of 160. Using WhoTracks.Me's domain-level method, it is closer to 7. Both are correct, and the practical takeaway is the same either way: three in four websites run at least one third-party tracker, a small handful of companies, led by Google and Facebook, account for the majority of that footprint, and Google's 2025 decision to keep third-party cookies alive means the count is not shrinking heading into 2026. Site owners disclosing what actually runs on their pages, not a generic list, is what most cookie and privacy laws now require.
Frequently Asked Questions
How many trackers does the average website have? 48 trackers per site on average, according to NordVPN's 2025 analysis of the top 100 websites in 25 countries. A stricter domain-level count from WhoTracks.Me, covering the top 10,000 sites, puts the figure at 7, because it counts distinct tracking domains rather than every individual script and request a browser-extension test captures.
Why do tracker-count studies disagree so much? Because they count different things. NordVPN's 48-tracker figure comes from a browser-extension test that logs every individual tracking request and script fired during a page load. WhoTracks.Me's 7-tracker figure comes from a domain-level crawl that counts only distinct third-party tracking domains contacted, collapsing dozens of individual requests to the same domain into one entry.
How many trackers does a typical page carry on desktop versus mobile? 75% of desktop pages and 74% of mobile pages carry at least one third-party tracker, per the HTTP Archive's 2025 Web Almanac. On desktop specifically, 55% of pages carry two or more trackers and 39% carry three or more, so a single tracker is rarely the whole story.
Which companies operate the most trackers? Google-owned properties appear on 61% of all webpages, with Google Analytics alone present on 53%, according to the HTTP Archive's 2025 Web Almanac. Facebook trails at 22% of pages by entity, with the Facebook Pixel specifically embedded on 16%.
Where the Numbers Come From
- NordVPN Cybersecurity Research Lab. (2025). Analysis of the top 100 websites in 25 countries (approximately 2,500 sites), tested with Brave, Privacy Badger, and uBlock Origin. Found 48 trackers per site on average, 160 for social media sites.
- HTTP Archive. (2026). "2025 Web Almanac: Privacy chapter," published January 15, 2026. 75% of desktop and 74% of mobile pages carry at least one third-party tracker; Google present on 61% of pages, Google Analytics on 53%.
- WhoTracks.Me (Ghostery). Live tracking observatory covering the top 10,000 websites. Reports 7 trackers per site on average; continuously updated, checked July 2026.
- Usercentrics. (2025). "Google's changing approach to third-party cookies: impacts and solutions." Confirms Google's April 2025 decision not to deprecate third-party cookies in Chrome.
- Usercentrics. (2025). "Google Privacy Sandbox officially shuts down: What it means and what's next." Documents the October 2025 retirement of the remaining Privacy Sandbox APIs.
Note: All figures verified as of July 2026. Tracker counts are refreshed at least twice a year to track new NordVPN, HTTP Archive, and WhoTracks.Me data releases.
