First party data is the information your customers gave you directly, held in systems you control. It is the only part of your measurement that no browser update, consent change or platform policy can take away, and most businesses collect far less of it than they could.
Everything else in this cluster describes something being withdrawn by somebody else. This is the part nobody can withdraw.
This is for you if the last few years of tracking changes have left you feeling like your data keeps getting smaller.
What counts as first party data
Information given to you, stored by you.
An email address typed into your enquiry form. A phone number in your CRM. A purchase history in your order system. The record of which enquiry became a customer and which did not.
What does not count is anything living inside a platform you rent. An audience built in an ad account, a segment in an analytics tool, a lookalike derived from your activity. Those are useful and they are not yours.
The test is simple and worth applying honestly. If you changed every agency and every platform tomorrow, what would you still have? That is your first party data. Everything else was access rather than ownership.
Plenty of businesses discover during an agency change that the answer is very little.
Why this became the durable answer
Because every other source has been narrowed by somebody else’s decision.
Safari and Firefox blocked third party cookies by default. Apple introduced a tracking prompt that removed a large share of app-based visibility. Consent requirements arrived and refusals take a slice regardless of browser. Platform policies changed what could be collected and matched.
Not one of those was decided by an advertiser. Each arrived as an announcement, and the accounts affected adjusted afterwards.
Chrome’s cookie decision is the exception that proves the point. Google retired most of Privacy Sandbox in October 2025 and kept third party cookies, which was a reprieve rather than a reversal, and it was equally out of anybody else’s hands.
First party data is not subject to any of that. Somebody gave you their email address and it is in your system. No policy change removes it.
The scale of what was withdrawn is documented. Research by Kraft, Skiera and Koschella, submitted to the FTC, found US trackability fell 55 percentage points, from 73% to 18% after Apple’s tracking changes, across three proprietary datasets covering billions of impressions in 19 countries.
A loss of that size, arriving by announcement, is the argument for owning what you can. Nobody sent an email removing anything from your CRM.
The thing nobody collects
Outcomes. This is the gap that matters most and it gets the least attention.
Most businesses capture the enquiry. Far fewer record, in a usable form, which enquiries became qualified conversations and which became customers.
That outcome record is what turns first party data from a mailing list into a measurement asset. It is what lets you send closed-won data back so bidding chases buyers, and it is what tells you which campaigns produce revenue rather than volume.
Two columns in whatever system already holds your enquiries. Qualified yes or no. Became a customer yes or no.
Adding those costs almost nothing and unlocks more than any tracking tool. The reason it does not happen is that the person recording enquiries and the person judging campaigns are usually different people with no shared system.
What to collect and what to leave
More is not better, and this is where enthusiasm causes problems.
Every additional form field costs you completions. Asking for company size, budget and timeline before anybody has spoken to you filters out people who would have converted on a call.
Every stored record is also a responsibility. You have to hold it securely, explain it, and delete it when asked. Collecting something because it might be interesting later is how a business acquires obligations it gains nothing from.
So collect what you will use. Email as the priority, because it is the identifier that works everywhere. Phone where your sales process needs it. The outcome always.
One qualifying question is worth more than four descriptive ones, and it should be the question your sales team asks first anyway.
What first party data actually does for advertising
Two applications, and they are frequently confused with each other.
The first is targeting and exclusion. Upload a customer list and you can target those people or, more usefully in lead generation, exclude them so you stop paying to reach people who already bought.
The second is feedback. Send outcomes back so the platform learns which clicks produced customers, and the bidding starts optimising towards buyers rather than towards form fillers.
Those are different things and the second is worth considerably more. It is also the one people skip, often because uploading a customer list feels like it already covered this.
If you take one thing from this article, take the distinction. Uploading a list tells the platform who those people are. It does not tell the platform which advert produced them.
Where it should live
Somewhere that survives changing everything else.
A CRM is the obvious answer. A database works. Even a maintained spreadsheet with the enquiry, the source, the click identifier and the outcome beats a sophisticated audience trapped inside an advertising account.
What matters is that it is exportable, that somebody owns it, and that it does not depend on a relationship you might end.
I have seen businesses lose years of accumulated audience data during an agency transition, because the asset everybody described as theirs existed only inside an account somebody else administered. That is an avoidable loss and it happens regularly.
The obligations that come with it
Worth stating plainly, because owning data is not free of responsibility.
Tell people what you collect and why, in language they would recognise. Hold it securely. Honour deletion requests properly rather than nominally. Do not use it in ways the person giving it would find surprising.
None of that is onerous at the scale most businesses operate. All of it is considerably cheaper than the alternative, and the alternative has become more expensive over the past few years.
Doing this properly is also a competitive position rather than a cost. Businesses that collect carefully and explain clearly get better completion rates than businesses that hoover up everything and say nothing.
What to change this week
Three steps.
Apply the ownership test. Write down what you would still hold if every platform and agency relationship ended tomorrow, and see whether the answer is comfortable.
Then add the two outcome columns wherever enquiries are recorded, even if nothing consumes them yet. Data you did not collect cannot be backfilled.
Then check whether your enquiry form captures the click identifier alongside the contact details, because that is what connects your owned data back to the advertising that produced it.
Sending outcomes back is what turns this into better bidding, what conversion numbers actually measure is the counting underneath, third party cookies covers what changed in the browser, and lead quality is what the outcome columns will start telling you. Getting collection right on the site is web development work as much as marketing. To review what you actually own, book a teardown.