So the publisher, through a platform, issues a bid request to an exchange with a lot of information in it. The parameters of that bid request contain all kinds of context like the site, the browser or device, etc. Critically, it also includes the cookie. The way GDPR has been interpreted by Google (btw Google is considered to be overly conservative in its approach by the adtech world): Cookies can only be passed by publishers who get consent to collect and pass them, and they must get consent for each adtech vendor. Furthermore, Google will not pass those cookies to anyone else because it can't be sure that the vendor receiving them was given consent by the user. Other platforms haven't done that last part; and some publishers are even saying that they refuse to collect affirmative consent. This is because people interpret it differently. From my reading, Brave seems to be trying to drive for a new interpretation: it's not only a matter of cookies, which is the parameter associated with a user, it's a matter of ALL the info even when it's not related to tracking a single user. My guess is that Eich's hoping to get a court to adopt this new stricter interpretation, but if that were to happen it would mean that the regulators' guidance thus far would be moot and all of the mitigations the adtech world has gone through to prepare would be out the window.