Here’s a number that should make you pause: the ad you saw three seconds ago was purchased in an auction that lasted less than 100 milliseconds. Not a human choosing to reach you — a machine-to-machine bidding war over a single impression, fought with everything known about you at that exact moment. Your approximate location, your browsing history, the page you were reading, the device in your hand. Real-time bidding (RTB) turned your attention into a commodity that trades faster than most financial instruments, and it runs the moment a page starts to load. The highest bidder’s ad appears in front of you before you’ve even noticed the page finished rendering. And here’s the strange part: the entire system was built on a promise that more personal data means better ads — that relevance would feel like a gift. Instead, the more precisely an ad knows you, the more it creeps you out. And the research on that feeling is genuinely unsettling.
🧠 The Auction You Never See
In 2018, real-time bidding accounted for about $23.5 billion of US digital ad spending. By 2023, that number had grown to roughly $57 billion. Every one of those dollars moved through the same mechanical ritual: you open a webpage, the page fires a bid request carrying your profile out to an ad exchange, and multiple advertisers’ computers submit bids for the right to show you something. The winner is decided in under 100 milliseconds — a demand-side platform’s entire evaluation of who you are and what you’re worth happens in less time than it takes you to blink.
The bid request itself is the quietly terrifying part. It can include your demographics, your browsing history, your location, even the content of the page you’re on. In 2019, the UK’s Information Commissioner’s Office reported that companies in the RTB chain were collecting and trading information like race, sexuality, health status, and political affiliation — without meaningful consent from the people being profiled. In 2022, Belgium’s data protection authority ruled that the system underpinning much of European RTB violated the GDPR, a decision industry watchers described as “an atomic bomb.” The auction for your attention wasn’t just fast. It was, in regulators’ eyes, illegal.
🤔 The Creepiness Paradox
Here’s the counterintuitive twist, and it’s a good one. RTB’s entire sales pitch is personalization: we know you, so we can show you things you actually want. But a 2025/2026 study from researchers at the University of Texas at Austin, published in Psychology and Marketing, found that the opposite is often true — that the more data-driven an ad’s personalization feels, the more it triggers what they call “creepiness.”
The researchers break creepiness into a two-step appraisal. First, ambiguity: how did this ad appear? why me? Second, intrusive surveillance: are they watching me? Together, those two judgments explained about 75% of the discomfort people reported in the studies. Uneasiness then turns into reactance — the psychological pushback where you reject the message and avoid the brand altogether. In one experiment using the Nike brand, higher creepiness directly reduced purchase intention. When people feel watched, they buy less. “Consumers do not like to be watched,” the study’s co-author Wayne Hoyer put it bluntly.
And here’s the part that should worry anyone in marketing: creepiness is almost impossible to undo once triggered. The researchers tested transparency about data collection, promises of good intentions, discounts, compensation — even cute kitten images and charity donations. Almost none of it worked. Transparency and good intentions barely moved the needle. Only monetary compensation and kitten pictures helped, and only slightly. “Creepiness is robust and difficult to mitigate once triggered,” Hoyer said. Prevention beats repair, because repair doesn’t work.
🔗 The Line Between Knowing and Watching
For anyone who builds products around understanding people — and especially for anyone building a digital companion, where the whole point is to know the user — this research draws the most important line in the industry. There is a razor-thin boundary between “this product understands me” and “this product is stalking me.” Same data. Same personalization engine underneath. Completely different emotional response, decided entirely by framing, consent, and timing.
The practical lesson is that personalization has a trust budget, and it spends fast. Every time a user asks “how did it know that?” and feels delighted, you earn a little trust. Every time they ask and feel watched, you lose a lot more than you gained. The creepy ad and the thoughtful recommendation are technically siblings — the difference is whether the user feels like a partner in the exchange or a target of it. That’s not a data problem. That’s a design and ethics problem.
🎲 The Auction That Beats Your Blink
Two bonus facts to leave you with.
First, the speed: a typical human blink takes about 300 to 400 milliseconds. A real-time bidding auction closes in under 100. Meaning that in the time it takes you to blink, your attention can be evaluated, bid on, and sold roughly three times over. The market moves faster than your reflexes — by design.
Second, the regulators’ catalog: when the UK’s ICO looked inside the RTB chain, the data categories being traded without proper consent included race, sexuality, health status, and political affiliation. Four of the most sensitive things a person can have — exchanged in milliseconds between hundreds of companies, none of whom you’ve ever heard of. Next time an ad follows you around the internet with unsettling precision, remember: it’s not a brand that knows you. It’s just the highest bidder.
The creepiest thing about personalized advertising isn’t that it knows you. It’s that you never agreed to be known.