About Cookies On This Site Welcome! We’re glad you’re here and want you to know that we respect your privacy and your right to control how we collect, use, and share your personal data. We use technologies to personalize and enhance your experience on our site. Please read our Privacy Policy to learn about our privacy practices. Accept All Customize Settings Reject All Pubmatic logo Advertiser Platform Privacy Policy PubMatic Platform Privacy Policy This page is about the privacy practices on PubMatic’s Advertising Platform and the personal information it uses to deliver advertising and perform related activities. Last Updated: November 21, 2024 PubMatic is an advertising technology company that provides a variety of online advertising-related services (see “Who We Are“). Any reference to “you”, “your”, “user(s)”, “individual(s)”, “data subject(s)”, implies the “End User(s)” who accesses websites, apps, or other digital properties that are being monetized through our Ad Services (defined below) so that we may deliver advertising and perform related activities (see “About Us and Our Services”). We want you to be familiar with how we collect, use, and share personal information and how you can exercise the privacy rights and choices available to you. This privacy policy (“Policy” or the “Platform Privacy Policy”) covers the personal information that we may process about you. If you are interested in our corporate and website privacy policy, which governs the personal information PubMatic collects about individuals when they visit, use, or interact with: (i) www.pubmatic.com and other websites operated by us, including PubMatic’s Client interfaces (the “Websites”); (ii) our social media pages (our “Social Media Pages”) and (iii) our events, sales and marketing activities (collectively, “PubMatic Properties”), please review our Website Privacy Policy. If you are interested in our applicant privacy practices, please review our Careers Privacy Policy. Your Privacy Choices Please visit https://pubmatic.com/legal/opt-out/ to go directly to the interest-based advertising opt-outs we offer. TABLE OF CONTENTS: We recognize that reading and understanding privacy practices can be difficult and time-consuming. While we recommend that you read this document in its entirety, to make this process easier for you, we have taken steps to simplify it and provide the following quick links to make it easier to navigate. WHO WE ARE ABOUT US AND OUR AD SERVICES PUBMATIC’S AD SERVICES & PRIVACY AT A GLANCE PUBMATIC’S AD SERVICES & PRIVACY – FULL POLICY USER INFORMATION WE COLLECT HOW WE USE THE USER INFORMATION HOW WE DISCLOSE USER INFORMATION YOUR CHOICES AND DATA PROTECTION RIGHTS YOUR PRIVACY CHOICES YOUR DATA RIGHTS ADDITIONAL INFORMATION FOR RESIDENTS SUBJECT TO STATE PRIVACY LAWS ADDITIONAL INFORMATION FOR DATA SUBJECTS IN THE EEA, UK, AND SWITZERLAND INTERNATIONAL DATA TRANSFERS DATA PRIVACY FRAMEWORK RETENTION OF USER INFORMATION SECURITY UPDATES TO THIS POLICY CONTACTING US — WHO WE ARE Any reference to “PubMatic” “we”, “us” or “our” means PubMatic, Inc. and its global subsidiaries including, as of the effective date of this Platform Privacy Policy, PubMatic Limited, PubMatic GmbH, PubMatic India Private Limited, パブティック株式会社 (PubMatic KK), PubMatic Pte. Ltd. and 据翼软件科技有限公司 (PubMatic Software (Shanghai)) Limited. The current policy does not apply to PubMatic US, Inc. For the Advertiser Platform Privacy Policy of PubMatic US, Inc refer https://pubmatic.com/legal/privacy-policy-us/. To get in touch with us, please see the “Contacting Us” section of this document. ABOUT US AND OUR AD SERVICES PubMatic provides technology via our advertising platform (the “Platform”) and related advertising tools (collectively the “Ad Services”) that allow Publishers to make space on their websites, mobile apps, internet-connected or over-the-top TV (known as ‘CTV’ and ‘OTT TV,’ respectively), or other digital properties available to show ads in order to generate revenue (what the advertising industry refers to as a ‘Supply Side Platform’ or ‘SSP’) and buyers to purchase the available space to display ads on these digital properties. In this Policy, we refer to those involved in selling ad space collectively as “Publishers”, those looking to buy ad space collectively as “Media Buyers” (including, for example advertisers, ad agencies, Demand-Side partners) and Media Buyers and Publishers together as “Clients.” Our Ad Services help Clients display relevant online advertising to the End Users who interact with Publishers’ digital properties and engage in planning and measurement to understand how these ads perform. This Policy applies only when we act as a “data controller” and not when we are a processor or service provider acting on behalf of our Clients. PUBMATIC’S AD SERVICES & PRIVACY AT A GLANCE This section serves as a summary of our personal information handling practices and does not replace our full Policy found below. Please note the following terms that are used in this summary: Pseudonymous user data – personal data that can no longer be attributed to a specific data subject without further technical processing or the use of additional data. ID syncing – the matching of two or more unique identifiers linked to the same individual. Cookies and online identifiers – cookies are small text files that are stored on a user’s browser; online identifiers are often used in lieu of cookies. Similar technologies such as pixels and web beacons, device fingerprinting technologies, local storage, and eTags (collectively, ”Cookies”) also allow access to, or storage of, information on a user’s browser or device. These technologies enable various online functionalities (including recognizing and tracking browsing behavior). What We Do: Provide Advertising technology for managing digital advertising campaigns and for monetizing digital properties. User Information We Collect: Pseudonymous User Information such as: Unique online and device identifiers Mobile device advertising identifiers IP addresses Browser and device information Web browsing history from advertising impressions Information about an individual’s engagement with ads Information about an individual’s behavior on Digital Properties Data We May Receive From Partners For Use in Connection With Our Ad Services: User Information such as: Demographic data Geolocation Information, including precise geolocation data Obfuscated user identifiers such as hashed email addresses Pseudonymous personal information (see “User Information We Collect” above) ID Syncing data How The Ad Services Collect Data: Some of the ways our Ad Services collect User Information: from Publishers passing us information so that we can help them monetize ad inventory space on their digital properties from Clients uploading data onto our platform from Clients using our technology (including Cookies) to gather data through the process of serving ads (including how you interact with an ad) Data Our Ad Services Do Not Collect: PubMatic’s Ad Services do not collect directly identifiable personal information, including, for example: PubMatic does not collect your email address PubMatic does not collect your physical address PubMatic does not collect your phone number PubMatic does not collect your social security number PubMatic does not collect your name How We Use the Data We Collect: The Ad Services processes the User Information we collect for advertising purposes, including: Personalizing ads Delivering ads Limiting the number of times you see an ad (called “frequency capping”) Measuring the effectiveness of ads and ad campaigns Reporting on ad campaigns to our Clients Maintaining records or transactions, user actions and conversions Attributing purchases or other actions taken by a user to ads Associating devices or identifiers that may be related to each other Preventing malicious or fraudulent activity Improving our Ad Services Location based advertising Service support and diagnostics Administration of our business How We Disclose the Data We Collect: We disclose User Information that we collect to: Media Buyers, as a way of informing them about the potential audience for their ads if they purchase a Publisher’s advertising inventory Clients, to help them improve the effectiveness of their – and their client’s – ads Service providers, Vendors, and Subprocessors Where we think we’re required to by law or where we have determined that we need to in order to defend or bring a legal claim. PUBMATIC’S AD SERVICES & PRIVACY – FULL POLICY USER INFORMATION WE COLLECT When you visit or use a digital property that uses our technology, we (and our Clients) use and deploy Cookies to automatically collect certain information about you and your computer or other devices, such as your mobile device, CTV, or OTT TV device. While none of this technology provides us with directly identifiable information (meaning, it doesn’t include your name, clear text email address, phone number), it may be considered “personal data” or “personal information” in some jurisdictions. Altogether, the personal data or personal information discussed in this policy shall be “User Information.” PubMatic collects or assigns pseudonymous identifiers (“Online Identifiers”) to your browser or other devices to enable our Ad Services to determine within a reasonable level of confidence that a browser or device is the same with which our Ad Services have previously interacted. These identifiers include: cookie IDs (a unique ID randomly assigned by PubMatic to a browser); unique online IDs (“UUID”) created by identity providers and used by our Clients; mobile advertising IDs (a unique ID assigned by the mobile operating system (e.g., Apple ID for Advertising or Android Advertising ID)); or CTV or OTT TV device identifier for advertising (a unique ID assigned by the OTT or CTV publisher). If we (or our Media Buyers) can identify a browser or device, it increases the value of that advertisement to provide more content for you to enjoy. To opt out of our use of such technologies for interest-based advertising purposes, please follow the instructions for opting out, as described in “Your Opt-Out Choices” below. See PubMatic’s Platform Cookie and Other Similar Technologies Policy for more information on how PubMatic uses cookies and other similar technologies. Our Ad Services may also automatically collect the following information and associate it with one of the identifiers described above (also User Information: Browser and Device Information, such as the IP address you use to connect to an online service; device type and model; manufacturer; operating system type and version (e.g. iOS or Android); web browser type and version (e.g., Chrome or Safari); user-agent; carrier name; time zone; network connection type (e.g., Wi-Fi or cellular); and information about our Publisher’s apps and versions currently active on a device. Information about an End User’s behavior on our Publishers digital properties (“Behavioral Information“), such as information about how you interact with the pages of those digital properties, session start/stop time, and precise geolocation (including latitude and longitude coordinates, but only if the Publisher’s digital property has enabled location services on the device and the End User has granted the Publisher permission to collect and share this information for advertising purposes). Information about ads serviced, viewed, or clicked on, such as the type of ad, where the ad was served, whether the End User interacted with the ad, the number of times an End User has seen the ad, and whether the End User visited the Media Buyer’s website or relevant app store and/or purchased or installed the product or service advertised (“Ad Interaction“). Information about your location, which we may derive from the approximate location of your device via your IP address (“Geolocation Information”). User Information we receive from third parties We may also combine, merge and/or augment the User Information we collect about you with information received from Publishers and other Clients (such as our data providers) and may include: Demographic or interest data, obfuscated user identifiers such as UUIDs, hashed email addresses and/or hashed phone numbers, and content viewed (“Partner Provided Information“). We do not intentionally collect or process sensitive User Information (e.g., social security numbers) and attempt to prohibit our Clients and partners from passing any such information to PubMatic. Precise geolocation information collected through Digital Properties. We will not use precise geolocation information for interest-based advertising without your opt-in consent (“Geolocation”). We use this Geolocation to derive regions for ad performance reporting. We work with Clients to help create or obtain groupings of End Users by one or more attributes (e.g., ‘cycling enthusiast’) for advertising purposes (“Audience Segments”). HOW WE USE THE USER INFORMATION We process and/or disclose User Information for various business purposes, including to provide the Ad Services and to operate our business. This section will describe those purposes in detail and includes our data processing practices. Numerous states within the United States have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures (“State Privacy Laws”). If you are a resident of one of these states, this section applies to you. Likewise, those located in the EEA or UK are also afforded various rights, including additional disclosures (“UK & Europe Privacy Laws”). Under UK & Europe Privacy Laws, we have established a legal basis for processing your personal information. In most instances, consent is the basis for PubMatic’s processing of User Information. If you do not consent with respect to PubMatic’s SSP, PubMatic may still solicit bids for advertising to be displayed to you but will not process your personal information. In some circumstances we may rely on our legitimate interest to collect and use your personal information, except where such interests are overridden by your data protection interests or fundamental rights and freedoms. For example, we may use any of the data described in this Policy for the secondary purpose of detecting, preventing or otherwise addressing fraud, security, or technical issues, as well as to protect against harm to our rights, property, or safety, or that of the public. This is necessary for us to pursue our, your and our partners’ legitimate interests. If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contacting Us” heading below. Please note that we take appropriate measures to ensure that any processing of User Information is done in accordance with applicable privacy laws and regulations, and with care for protecting your privacy and User Information. Serve and Deliver Ads (Ad Services). Generally, we process User Information to provide our products and services (including the Ad Services) as described in this Platform Privacy Policy. This is what allows Publishers to offer advertising inventory in their Digital Properties and Media Buyers to bid on and fill that inventory with relevant ads, as well as to determine inventory value and to inform bid decisions (i.e., whether to purchase an ad impression or not, for creating segments for End Users matching, targeting of lookalike audiences or retargeting users). For example, when a Publisher has potential ad inventory to offer, we will send a “bid request” to Media Buyers which includes the information detailed in this privacy policy so that Media Buyers can determine if they want to purchase the ad impression. Ad Reporting. Provide information and reports to Media Buyers about when and how End Users have been exposed to their ads, clicked on their ads, or visited their Digital Property (including whether an advertised app has been installed). This information is used to analyze an advertising campaign’s performance. Frequency Capping. Using information from our Ad Services to prevent seeing the same ad too many times. Targeted Advertising. The method by which we predict likely commercial interests (e.g., sports or travel) based on activities across websites, mobile apps, and other Digital Properties over time. We will also supplement User Information with additional information we receive from third parties, such as third-party advertising segments or audiences, to allow us to customize and more effectively tailor the ads we display to End Users and to optimize the display of ads (including limiting exposure to less relevant ads). Location Based Advertising. Location-based advertising, services, and content delivered in real-time using your device’s physical location (where permitted by law). ID Syncs. We may disclose cookie values to other advertising technology platforms so that they may match their identifier to our identifier. Fraud Detection & Prevention (Security). Identify invalid ad impressions, clicks, installs, or ad queries, protect us and our Publishers from fraudulent behavior, and protect the security of the Ad Services. Business Operations & Improving the Ad Services. These purposes include several processing activities supporting our ability to run the business for our Clients, such as to: Facilitate navigation, display information more effectively, and to personalize your experience while using the Ad Services, as well as auditing, researching, and analyzing information to provide, protect, manage, and improve our Ad Services, develop new services, and ensure that our technologies function properly. Calculate Ad Services usage levels, help diagnose server problems and administer the Ad Services. Operate our business, such as billing, support, accounting, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, and meeting our legal obligations. We may disclose User Information to our service providers that store or process the User Information in furtherance of the services we offer via our Ad Services and on our behalf. The following table illustrates the categories of User Information processed for each business purpose, the lawful basis under which we process User Information, and the categories of recipients of User Information where we engage third parties to augment our ability to provide the Ad Services. Purpose of Use Serve & Deliver Ads (Ad Services) Ad Reporting Frequency Capping Targeted Advertising Location Based Advertising ID Syncs Fraud Detection & Prevention (Security) Business Operations & Improving the Ad Services Categories of Personal Data Online Identifiers x x x x Demographic Information x x x Browser and Device Information x x x x x x x x Behavioral Information x x x x x Ad Interaction x x x x x Partner Provided Information x x x Geolocation Information & Geolocation x x x x Audience Segments x x x Lawful Basis (UK / EEA) Consent Consent Legitimate Interest Consent Consent Consent Legitimate Interest Legitimate Interest Categories of Recipients Affiliates x x x x x x x x Clients x x x x x Attribution & Analytics Partners x x x x Service Providers/ Sub processors & Consultants x x x x x x x x We may disclose User Information in accordance with applicable laws, both within and outside of an individual’s country of residence for specific situations which include: Where we need to comply with legal obligations or respond to requests from public and government authorities, even if they are outside your country of residence. To enforce our terms and conditions, protect our operations or the operations of our affiliates, safeguard our rights, privacy, safety, or pr Beloud