User Rights and Opt Out
Last updated June 30, 2023
This page provides information about, and access to exercise, various user rights that may be available to you under applicable law and/or industry self-regulatory standards in relation to data processed by our Advertising Technology Platform. If you would like information about exercising your rights over data processed in our corporate functions, such as HR and recruiting, or business-to-business marketing, please go view our Corporate Privacy Policy.
Opt out
You are able to make choices about how data about you or your devices is collected and used. To learn more about how our Services collect and use data, see our Platform Privacy Notice
Note that opting out does not mean you will not get ads. It only affects the type of data that is collected and used in relation to digital advertising, and in fact, after you opt out you may see less relevant and/or more repetitive ads.
Opting out depends on your browser or device.
Web browsers:
For browsers we offer a cookie-based opt-out. When you opt out in a web browser, an opt-out cookie will be stored in your browser. Later, when our Services see this cookie, the system will know the choice you have made.
Once the opt-out is set, the opt-out is retained, but data previously stored in our Services ages out after about 30 days.
Some things to keep in mind when using the web-based opt-out:
- If you use more than one browser, or browser profile, you will need to opt out on each browser.
- If you clear your cookies, and the opt-out cookie is deleted, you will need to reset the opt-out.
- The opt-out may not function in browsers, such as Safari, that block or delete cookies.
- Even after opting out, you may continue to receive advertising through our services, but those ads may be repetitive or less relevant.
- After you opt out, data we have collected about your browser will be disassociated from your device.
- Please note that if you delete, block or otherwise restrict cookies, or if you use a different computer or Internet browser, you should renew your opt-out choice.
You may also opt out from other companies that are involved in digital advertising and may also be collecting or processing data on digital content you access. Many of those companies opt-outs are collected together on industry opt out pages. The US-based opt out pages are www.aboutads.info/choices and www.networkadvertising.org/choices. The European based page is www.youronlinechoices.com. In Canada, use youradchoices.ca/choices.
You can opt-out of receiving ads that are personalized by our clients and partners using our technology by using the opt-out tool below. Once you opt-out, we will no longer use any information from your device and as a result, our clients will not be able to serve you ads that are targeted to your interests using our technology.
The opt-out operates by placing a cookie on your device that identifies the device as opted out. If you change browsers or computers, or delete the cookies on your computer, you will need to opt-out again. You also can set your browser to notify you when a cookie is being set and to block most cookies, including ours.
Mobile:
Mobile device system software such as Apple iOS or Google Play Services provide mechanisms that allow users to opt out of the use of information about their activity in mobile apps to deliver targeted ads to their mobile device. For more information, or to opt out using these mechanisms, consult your device settings (“Opt out of Personalized Ads” on Android devices and “Limit Ad Tracking” on iOS devices). Or, you might also find helpful information on the NAI’s Mobile Choices page (though, we are not responsible for the content of that page). We are not able to directly access the Mobile opt-out on devices that offer it, but when our Services receive the mobile opt-out signals, we act on them.
TVs and other devices
Your internet connected device (e.g. a smart TV or a set-top box) may give you the ability to opt out of the use of information for advertising purposes. To determine if your Internet connected device has these options, please visit your device’s settings menu. Because consumer choice mechanisms on internet connected devices differ depending on the device and the service or app you use, we may still receive data after you opt out on your device, and we may or may not receive your opt-out signal. Nevertheless, if we receive data with an opt-out signal, we will act on it according to our understanding of what the opt-out should mean.
You may find the NAI’s Internet Connected TV Choices educational page, offers additional helpful information (though, we are not responsible for the content of that page).
Location Data
Many devices, such as mobile phones, allow you to control access to and use of precise geographic information from your device. For more information, or to opt out using these mechanisms, consult your device settings. Note that when location services have not been enabled in any of your apps, we will still infer data about your imprecise location based on your IP address.
California Do Not Sell or Share My Personal Information
When you visit one of our digital content customers, they may offer a “Do Not Sell” or “Do Not Share” option. When you exercise that option, the digital content provider should, depending on the nature of its business, either not send us personal information at all, or send it to us in association with a signal that indicates your Do Not Sell or Do Not Share choice. When we receive data with such a signal, we act on it according to the law and industry standards.
Additionally, you can opt out as described on this page.
Note that because these opt-outs are specific to the device or browser on which they are exercised, you will need to opt out on each browser and device.
You can exercise these rights related to your mobile device and internet connected device (e.g. a smart TV or a set-top box) by using the mechanisms available through the mobile device system software such as Apple iOS or Google Play Services or, if available, the internet connected device.
If we receive an opt-out preference signal such as the Global Privacy Control, our systems will apply it based on the relevant interaction (e.g., if we receive it in the browser, it will be applied to your browser), and we will not disclose your personal information
Access and Deletion Rights
In general, our ability to respond to an access request is limited because we cannot match identified individuals to data that is in our Platform and therefore cannot verify individuals’ identities. As explained in our Advertising Technology Platform Privacy Policy, that is because we use pseudonymous data that does not directly identify individuals.
Instead, it only collects certain digital identifiers that enable us to recognize your Internet browser or device (each, a “Digital Identifier”).
For that reason, in order for us to honor any requests you submit, we need you to provide us with your Digital Identifiers and certain other information. This is necessary to locate any records we hold associated with your Digital Identifiers. We explain below how to do this, and use this additional information only for the purpose of processing your data protection and privacy requests.
What are your rights?
Residents of some jurisdictions (for example the European Economic Area (“EEA”), the United Kingdom (“UK”), Switzerland, and California), have certain rights available to them under the laws of those jurisdictions.
These rights may include the right to request access to, rectify, or request erasure/deletion or portability of personal information. Residents of these jurisdictions may also have a right to object to, or request that we restrict, processing of their personal information. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable data protection laws. We will also make efforts to honor such requests even in jurisdictions that do not provide for these rights
If you make a request to access the specific pieces of personal information we hold about you in accordance with applicable law (also known as an “access request“ or “right to know request”), we will provide the Digital Identifiers of your browser(s) and/or device(s) that TripleLift may store. Additionally, we may also provide you with certain other information that we may have stored and associated with your Digital Identifiers.
Please note, however, that we have a very short retention period for the data we associate with Digital Identifiers. As a result, we may not be able to provide you any records in response to an access request. In such cases, however, we will inform you that we have not been able to locate any records associated with your Digital Identifiers.
Note also, we have a responsibility to verify your identity before we respond to an access request. This is to make sure that we provide a copy of your personal information only to the person who is entitled to it – you. If you wish to make an access request, please contact us directly, with sufficient details for us to verify your identity (as explained below).
How to Exercise a data subject or consumer rights request
Please follow these steps:
Step 1: Locate Your Digital Identifiers
In order for us to locate relevant records, we will need you to provide us with your Digital Identifiers. You can find your Digital Identifiers as follows.
Web Browsing
As described in our privacy policy, our Platform operates by using text files called “cookies” that are placed on your device. Some of these cookies include a Digital Identifier. To locate these Digital Identifiers, you can search through your cookies for the cookies named “TLUID” (which are set from the 3lift.com domain). The text in each of these cookies is a separate Digital Identifier.
Different cookies are placed on each browser that you use to access the Internet. As a result, if you use multiple browsers (for example, Google Chrome and Mozilla Firefox), you will need to locate the “TLUID” cookies for each browser.
You can delete the identifier stored in the “TLUID” cookie of your browser by clicking on the deletion link below:
TripleLift Cookie Deletion Request
The identifier stored in the “TLUID” cookie in your browser will be deleted immediately. Any personal data related to the “TLUID” cookie identifier in our systems will be deleted within 30 days.
If you also plan to make a request for a copy of the personal data associated with your TLUID cookie, make sure to wait to ask for deletion until after your request for access has been processed.
Mobile Devices and other Internet Connected Devices
Additionally, certain mobile devices (for example, mobile phones or tablets using the iOS or Android operating systems) generate a persistent “Advertising Identifier” per device, which, among other things, can be used by third parties, like TripleLift, for purposes of providing you with advertising.
On iOS devices, your Advertising Identifier may be referred to as an “IDFA,” “IFA,” or an “ID for Advertising.” On Android devices, your Advertising Identifier may be referred to as an “Advertising ID.” Please follow instructions from your mobile device manufacturer on how to locate your specific Advertising Identifier.
Step 2: Verify Your Digital Identifiers
In order to make sure that we are responding to the correct person, we also will need some supporting proof to demonstrate that the devices that have the Digital Identifiers you located in Step 1 are yours and that the information you are requesting relates to you. For Digital Identifiers stored in cookies, please take a screenshot of each cookie, taking care to make sure that the screenshot shows both the name of the cookie and the full Digital Identifier. For Digital Identifiers located on a mobile device, please take a screenshot of a screen that displays the Digital Identifier.
We may also request that you respond to a few questions, so that we can appropriately verify your identity. Doing this helps us to validate that you have access to the device on which the Digital Identifiers have been placed (and that you are not an unauthorized third party attempting to “guess” Digital Identifiers).
Step 3: Submit to TripleLift
Once you have located your Digital Identifiers and can provide us with verification of those Digital Identifiers, please contact us with details of the rights you wish to exercise. The easiest way to do so would be submit the relevant information to platformprivacy((at))triplelift((dot))com and include the following information:
Your full name
The region in which you are located at the time you are making your request
The data subject or consumer rights you wish to exercise
The law(s) under which you are making your request
A full list of your Digital Identifiers
Device validation information, as set forth in Step 2
Identity certification
If you are a California resident, you can also make a data subject rights request by phone by calling TripleLift’s data subject hotline at 1-800-760-9122.
Consumer Requests Metrics:
| – | Received | Responded* | Complied with** | Denied | Mean Number of Days for Completion |
| Request to Delete | 13 | 13 | 3 | 0 | 30 |
| Request to Know | 7 | 7 | 0 | 0 | N/A |
| Request to Opt Out | 23 | 23 | 14 | 0 | 0 |
*Includes all requests to which TripleLift provided a response, including requests complied with partially or fully as well as initial responses with instructions regarding verification requirements.
**Includes all requests complied with partially or fully or where no records were found. This does not include requests where we did not receive a response to instructions regarding verification requirements.