User Rights and Opt Out
Last updated December 1, 2022
This page provides information about, and access to exercise, various user rights that may be available to you under applicable law and/or industry self-regulatory standards in relation to data processed by our Advertising Technology Platform. If you would like information about exercising your rights over data processed in our corporate functions, such as HR and recruiting, or business-to-business marketing, please go here.
Note that opting out does not mean you will not get ads. It only affects the type of data that is collected and used in relation to digital advertising, and in fact, after you opt out you may see less relevant and/or more repetitive ads.
Opting out depends on your browser or device.
For browsers we offer a cookie-based opt-out. When you opt out in a web browser, an opt-out cookie will be stored in your browser. Later, when our Services see this cookie, the system will know the choice you have made.
Once the opt-out is set, the opt-out is retained, but data previously stored in our Services ages out after about 30 days.
Some things to keep in mind when using the web-based opt-out:
- If you use more than one browser, or browser profile, you will need to opt out on each browser.
- If you clear your cookies, and the opt-out cookie is deleted, you will need to reset the opt-out.
- The opt-out may not function in browsers, such as Safari, that block or delete cookies.
- Even after opting out, you may continue to receive advertising through our services, but those ads may be repetitive or less relevant.
- After you opt out, data we have collected about your browser will be disassociated from your device.
- Please note that if you delete, block or otherwise restrict cookies, or if you use a different computer or Internet browser, you should renew your opt-out choice.
You may also opt out from other companies that are involved in digital advertising and may also be collecting or processing data on digital content you access. Many of those companies opt-outs are collected together on industry opt out pages. The US-based opt out pages are www.aboutads.info/choices and www.networkadvertising.org/choices. The European based page is www.youronlinechoices.com. In Canada, use youradchoices.ca/choices.
You can opt-out of receiving ads that are personalized by our clients and partners using our technology by using the opt-out tool below. Once you opt-out, we will no longer use any information from your device and as a result, our clients will not be able to serve you ads that are targeted to your interests using our technology.
The opt-out operates by placing a cookie on your device that identifies the device as opted out. If you change browsers or computers, or delete the cookies on your computer, you will need to opt-out again. You also can set your browser to notify you when a cookie is being set and to block most cookies, including ours.
Mobile device system software such as Apple iOS or Google Play Services provide mechanisms that allow users to opt out of the use of information about their activity in mobile apps to deliver targeted ads to their mobile device. For more information, or to opt out using these mechanisms, consult your device settings (“Opt out of Personalized Ads” on Android devices and “Limit Ad Tracking” on iOS devices). Or, you might also find helpful information on the NAI’s Mobile Choices page linked here (though, we are not responsible for the content of that page). We are not able to directly access the Mobile opt-out on devices that offer it, but when our Services receive the mobile opt-out signals, we act on them.
TVs and other devices
Your internet connected device (e.g. a smart TV or a set-top box) may give you the ability to opt out of the use of information for advertising purposes. To determine if your Internet connected device has these options, please visit your device’s settings menu. Because consumer choice mechanisms on internet connected devices differ depending on the device and the service or app you use, we may still receive data after you opt out on your device, and we may or may not receive your opt-out signal. Nevertheless, if we receive data with an opt-out signal, we will act on it according to our understanding of what the opt-out should mean.
You may find the NAI’s Internet Connected TV Choices educational page, here, offers additional helpful information (though, we are not responsible for the content of that page).
Many devices, such as mobile phones, allow you to control access to and use of precise geographic information from your device. For more information, or to opt out using these mechanisms, consult your device settings. Note that when location services have not been enabled in any of your apps, we will still infer data about your imprecise location based on your IP address.
California Do Not Sell My Personal Information
TripleLift does not sell personal information that is collected or used in our Services. However, our customers and partners may use our technology to buy or sell personal information as defined by California law.
When you visit one of our digital content customers, they may offer a “Do Not Sell” option. When you exercise that option, the digital content provider should, depending on the nature of its business, either not send us personal information at all, or send it to us in association with a signal that indicates your Do Not Sell choice. When we receive data with such a signal, we act on it according to the law and industry standards.
Additionally, you can opt out as described on this page.
Note that because these opt-outs are specific to the device or browser on which they are exercised, you will need to opt out on each browser and device.
Access and Deletion Rights
Instead, it only collects certain digital identifiers that enable us to recognize your Internet browser or device (each, a “Digital Identifier”).
For that reason, in order for us to honor any requests you submit, we need you to provide us with your Digital Identifiers and certain other information. This is necessary to locate any records we hold associated with your Digital Identifiers. We explain below how to do this, and use this additional information only for the purpose of processing your data protection and privacy requests.
What are your rights?
Residents of some jurisdictions (for example the European Economic Area (“EEA”), the United Kingdom (“UK”), Switzerland, and California), have certain rights available to them under the laws of those jurisdictions.
These rights may include the right to request access to, rectify, or request erasure/deletion or portability of, personal information. Residents of these jurisdictions may also have a right to object to, or request that we restrict, processing of their personal information. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable data protection laws. We will also make efforts to honor such requests even in jurisdictions that do not provide for these rights
If you make a request to access the specific pieces of personal information we hold about you in accordance with applicable law (also known as an “access request“), we will provide the Digital Identifiers of your browser(s) and/or device(s) that TripleLift may store. Additionally, we may also provide you with certain other information that we may have stored and associated with your Digital Identifiers.
Please note, however, that we have a very short retention period for the data we associate with Digital Identifiers. As a result, we may not be able to provide you any records in response to an access request. In such cases, however, we will inform you that we have not been able to locate any records associated with your Digital Identifiers.
Note also, we have a responsibility to verify your identity before we respond to an access request. This is to make sure that we provide a copy of your personal information only to the person who is entitled to it – you. If you wish to make an access request, please contact us directly, with sufficient details for us to verify your identity (as explained below).
How to Exercise a data subject or consumer rights request
Please follow these steps:
Step 1: Locate Your Digital Identifiers
In order for us to locate relevant records, we will need you to provide us with your Digital Identifiers. You can find your Digital Identifiers as follows:
Different cookies are placed on each browser that you use to access the Internet. As a result, if you use multiple browsers (for example, Google Chrome and Mozilla Firefox), you will need to locate the “TLUID” and “sync” cookies for each browser.
Mobile Devices and other Internet Connected Devices
Additionally, certain mobile devices (for example, mobile phones or tablets using the iOS or Android operating systems) generate a persistent “Advertising Identifier” per device, which, among other things, can be used by third parties, like TripleLift, for purposes of providing you with advertising.
On iOS devices, your Advertising Identifier may be referred to as an “IDFA,” “IFA,” or an “ID for Advertising.” On Android devices, your Advertising Identifier may be referred to as an “Advertising ID.” Please follow instructions from your mobile device manufacturer on how to locate your specific Advertising Identifier.
Step 2: Verify Your Digital Identifiers
In order to make sure that we are responding to the correct person, we also will need some supporting proof to demonstrate that the devices that have the Digital Identifiers you located in Step 1 are yours and that the information you are requesting relates to you. For Digital Identifiers stored in cookies, please take a screenshot of each cookie, taking care to make sure that the screenshot shows both the name of the cookie and the full Digital Identifier. For Digital Identifiers located on a mobile device, please take a screenshot of a screen that displays the Digital Identifier.
We may also request that you respond to a few questions, so that we can appropriately verify your identity. Doing this helps us to validate that you have access to the device on which the Digital Identifiers have been placed (and that you are not an unauthorized third party attempting to “guess” Digital Identifiers).
Step 3: Submit to TripleLift
Once you have located your Digital Identifiers and can provide us with verification of those Digital Identifiers, please contact us with details of the rights you wish to exercise. The easiest way to do so would be submit the relevant information to platformprivacy((at))triplelift((dot))com and include the following information:
Your full name
The region in which you are located at the time you are making your request
The data subject or consumer rights you wish to exercise
The law(s) under which you are making your request
A full list of your Digital Identifiers
Device validation information, as set forth in Step 2
You can also make a data subject rights request by phone by calling TripleLift’s data subject hotline at 1-800-760-9122.
California. Under the California Consumer Privacy Act (CCPA), if you are a California resident, you have rights to request (or have an agent request) that we disclose the following information to you: (1) the categories of personal information we have collected about you, including those we have disclosed for a business purpose and/or sold to third parties; (2) the categories of sources from which your personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom we share and/or have sold your personal information, and for each category of third party, the categories of personal information sold to them; and (5) the specific pieces of personal information we have collected about you. Depending on the nature of your request, and whether we can verify it, we will provide all or some subset of the categories listed above.
To exercise your rights, please follow the steps described above.