Privacy Policy
This Privacy Policy also applies to data processing via our infrastructure services. As part of our ad routing and insertion services for streaming publishers and broadcasters ("our clients"), our technical infrastructure acts as an intermediary communication relay between video players and the ad servers configured by our clients. For these flows, we act as a processor on behalf of our clients; we act as a controller only for the limited purposes described below (real-time security and our anonymous impression beacon).
Processed data (in transit). We process, on-the-fly and in real time, request data transmitted by client applications and players: IP addresses, device technical characteristics (User-Agent), non-precise location derived from the IP address, privacy choice signals (IAB TCF Transparency & Consent String and no-tracking signals), and mobile advertising identifiers where our client has configured their transmission in its workflow. Ad tracking events measured by ad servers (impressions, quartiles, completion, viewability) are fired directly from the player to the ad servers and do not pass through AdBlendr.
IAB Europe Transparency & Consent Framework (TCF). We are a registered vendor on the IAB Europe Global Vendor List (Vendor ID: [PENDING — published upon completion of registration]) under TCF v2.2. We rely exclusively on the following Special Purposes, on the legal basis of legitimate interest (Art. 6(1)(f) GDPR): SP1 (ensure security, prevent and detect fraud, and fix errors), SP2 (deliver and present advertising and content) and SP3 (save and communicate privacy choices). We declare no regular TCF Purposes (Purposes 1–11 are not used), no Features and no Special Features. See our Legitimate Interest Claim below.
No cookies, no device storage. Our infrastructure services do not set or read cookies and do not store or access any information on user devices. Our device storage disclosure file is published at https://www.adinsertplatform.com/tcf-disclosure.json. (Cookies used on this corporate website itself are described in the sections of this Policy relating to our Sites.)
Anonymous impression beacon. Our platform fires its own impression beacon, separate from the ad servers' trackers, to count ad insertions for service operation and billing. This beacon is anonymous by design: IP addresses and User-Agents are stripped and replaced at the edge of our CDN before any processing, no logging is enabled on the beacon path, and only non-personal technical identifiers (ad router ID, ad ID, timestamp) are extracted and aggregated. Only fully aggregated and anonymous impression delivery statistics are retained for business reporting purposes.
Retention. We keep no persistent platform logs: security processing happens in real time and in memory only, and our maximum declared retention for the Special Purposes above is 1 day (in-transit processing). In the event of a security or production incident, targeted logging may be temporarily enabled, strictly limited to the duration of the diagnosis, then disabled and purged. We do not use any of this data to establish behavioural profiles.
Routing analytics stored on behalf of our clients. As a platform feature, routing data (including IP address, User-Agent and, where configured by the client, advertising identifiers) is retained for 13 months in a dedicated, client-segregated statistics store, exclusively so that each client can analyse its own traffic. For this storage we act solely as a processor under a data processing agreement (Art. 28 GDPR) with each client: we perform no processing of our own on this data (no product analytics, no cross-client aggregation, no enrichment), each client can only access data relating to its own workflows, and data is deleted or returned at the end of the contract. The purposes of analysis and the legal basis towards end users are determined by our clients, as controllers — please refer to the privacy policy of the streaming service you use.
EU representative (Art. 27 GDPR). We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions: European Union (EU) Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/19403951690
We have conducted and documented a Legitimate Interest Assessment (LIA) for each Special Purpose we rely on, using the three-part test (purpose, necessity, balancing). In summary:
- SP1 — Security, fraud prevention and error fixing. Our interest is protecting the security, integrity and availability of our platform (Recital 49 GDPR). Real-time inspection of the IP address, User-Agent and technical context of requests is the only realistic way to distinguish legitimate traffic from abuse. Processing is in transit and in memory only — we keep no persistent logs, use no advertising identifiers for this purpose, and build no profiles. The impact on individuals is minimal and matches what users reasonably expect from any online infrastructure operator.
- SP2 — Delivery of advertising and content. Our interest is providing the technical routing and insertion service our clients commission, which also serves users' access to the streaming services they request. The IP address is necessary for the routing rules configured by the client (geography, territorial rights) and for serviceable ad responses; the User-Agent is necessary for device/OS-based routing rules and media format compatibility; advertising identifiers are transmitted only where the client has explicitly configured them. We are a pass-through intermediary: nothing is stored for our own purposes, nothing is added or enriched, and consent signals are systematically relayed downstream.
- SP3 — Communication of privacy choices. Our interest is ensuring that the choices users express in our clients' consent management platforms are relayed, unchanged, to the ad servers configured by our clients, so that downstream vendors can respect them. We relay the TC String and no-tracking signals as-is: no decoding for our own account, no modification, no storage on user devices. This processing directly serves the effectiveness of users' rights.
Right to object (Art. 21 GDPR). You may object to processing based on our legitimate interests at any time by contacting us at privacy@adinsertplatform.com. Please note that for SP1, network security constitutes a compelling legitimate ground; and that, by design, we retain no personal data linked to you for our own purposes — most requests will be answered by confirming that no data is held. The full Legitimate Interest Assessments are documented internally and can be made available to supervisory authorities upon request.
Personal information you disclose to us
Information automatically collected
Information collected from other sources
- To send you marketing and promotional communications. We and/or our third party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time (see the "WHAT ARE YOUR PRIVACY RIGHTS" below).
Account Information
