Content customization with security for client preferences

A system comprising:

• one or more processors;
• one or more memories configured with executable instructions that, when executed, cause the one or more processors to perform operations comprising:
• obtaining preferences of a user from interactions by the user with a trusted entity, explicit user indications, and implicit user indications;
• obtaining content, by the trusted entity, from a content provider in response to a query received from the user;
• obtaining permissible customizations from the content provider, wherein the permissible customizations include a framework having at least one location to which specific content must be attached and having at least one location for which options are provided for attachment of the specific content;
• modifying the content according to the permissible customizations, wherein a conflict between the permissible customizations and modifications to the content indicated by the preferences regarding attaching content at the at least one location to which specific content must be attached is resolved in favor of the permissible customizations;
• outputting, to a computer operated by the user, a page of query results, the query results comprising pairs of URL links, each pair comprising a first URL link to the content and a second URL link to modified content;
• and
• upon receipt of user selection of the second URL link, outputting to the computer operated by the user with the modified content according to the preferences of the user as limited by the permissible customizations from the content provider.

A device comprising:

• one or more processors;
• one or more memories configured with executable instructions that, when executed, cause the one or more processors to perform operations comprising:
• obtaining preferences of a user from interactions by the user with a trusted entity, explicit user indications, and implicit user indications;
• obtaining content from a content provider in response to a query received from the user;
• obtaining permissible customizations from the content provider, wherein the permissible customizations include a framework having at least one location to which specific content must be attached and having at least one location for which options are provided for attachment of the specific content;
• modifying the content according to the permissible customizations, wherein a conflict between the permissible customizations and modifications to the content indicated by the preferences regarding attaching content at the at least one location to which specific content must be attached is resolved in favor of the permissible customizations;
• outputting, to a computer operated by the user, a page of query results, the query results comprising pairs of URL links, each pair comprising a first URL link to the content and a second URL link to modified content;
• and
• upon receipt of user selection of the second URL link, outputting to the computer operated by the user with the modified content according to the preferences of the user as limited by the permissible customizations from the content provider.