Contracts
- Quantcast Measure and Publisher Terms of Service
- US Data Privacy Addendum
- Key Terms
- Privacy Implementation for Quantcast Publisher Partners
- Privacy Implementation for Quantcast Advertiser Partners
- Laws
- Quantcast Partners
- Quantcast Advertise Insertion Order Terms & Conditions
- Campaign Policy
- Quantcast Website and Corporate Privacy Policy
- Quantcast Products and Services Privacy Policy
- Quantcast Buyer Terms
- International Data Privacy Addendum
- Additional Terms
- CCPA Transparency Report
Quantcast Measure and Publisher Terms of Service
Effective April 5th 2024
DownloadTable of Contents
If you have an active, duly executed contract for Quantcast services (“Existing Contract”), the Existing Contract will govern your use of the service(s) covered in the Existing Contract instead of these Quantcast Measure Terms of Service (“Terms”). In addition, these Terms only apply to the Quantcast Measure service (i.e., the “Service” as described below) and not to any other Quantcast product or service.
Quantcast Measure Terms of Service
This Quantcast Measure Terms of Service (this “Agreement”) describes the terms and conditions on which Quantcast makes Quantcast Measure (the “Services”) available to you.
BY CLICKING THE “I ACCEPT” BUTTON, COMPLETING THE REGISTRATION PROCESS, USING THE SERVICES OR ENTERING INTO AN OFFLINE AGREEMENT THAT REFERENCES THIS AGREEMENT OR INCLUDES A LINK TO THIS AGREEMENT, YOU ARE AGREEING TO BE BOUND BY THIS AGREEMENT. IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY, IN WHICH CASE THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY (OR, IF SUCH ENTITY IS ACTING AS AN AUTHORIZED AFFILIATE, THEN THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY, THE AUTHORIZING PARTY(IES), OR BOTH, AS APPLICABLE). QUANTCAST MAY MODIFY THIS AGREEMENT FROM TIME TO TIME; CONTINUED USE 30 DAYS AFTER NOTIFICATION WILL CONSTITUTE ACCEPTANCE (SEE SECTION 10).
Capitalized terms not otherwise defined herein are defined in Section 14.
This Agreement incorporates the US State Data Privacy Addendum to the extent that the Services include processing personal information that is subject to U.S. State Privacy Laws (as defined in the foregoing Addendum) and the Privacy Implementation for Quantcast Publisher Partners.
Quantcast Measure is a free digital audience measurement service that allows you to tag web pages, video, advertisements, apps, content, and paid search campaigns (what we call, “Reachpoints”) for direct measurement.
You can also define and measure actions and events by customizing your Tags with labels. You have complete control over (and are solely responsible for) which Reachpoints are tagged, how segments are labelled (e.g., with meaningful or obfuscated names), and how the resulting Measurement Results are or are not disclosed publicly.
Each time a browser visits your tagged Reachpoints, Quantcast may, in accordance with Applicable Privacy Laws, collect traffic statistics like those in any web server log (what we call, “Measurement Data”). We then apply proprietary Quantcast algorithms and other data to the Measurement Data to generate the “Measurement Results”, which we make available to you on the Quantcast website (see Section 3).
To measure Reachpoints that you do not own or control, you may provide your Tag to a third party who accepts this Agreement (any such third party, an “Authorized Affiliate”); you may also instruct us to give the Authorized Affiliate access to the Measurement Results.
In order to access the Services you must register for a Quantcast account on the Quantcast website. Each new app you Tag requires its own registration and then receives its own unique API key. In registering, you agree to provide accurate, current, and complete information, and to keep it up to date. Any processing of Personal Information when registering for a Quantcast account will be processed in accordance with the Quantcast Website and Corporate Privacy Policy which you can access here.
You are responsible for keeping your password confidential. You hereby take responsibility for all actions taken—and instructions provided to Quantcast—under your account or with the Measurement Results, by you or any third parties, whether or not authorized. You will notify Quantcast immediately of any unauthorized or non-compliant use of your account and will cooperate with us in stopping it.
Quantcast uses each piece of Measurement Data both to understand your audience (for your benefit only) and as one of trillions of data points for predictive analytics and in determining what content and advertising to show individuals across the internet and other digital applications. You acknowledge that Quantcast may use Personal Information it receives from you to provide services to other Quantcast clients or for Quantcast’s commercial interests that may be unrelated to providing the Services to you.
Quantcast will never sell your audience (whether identified as such or not) and you control the extent to which Quantcast displays the Measurement Results.
Quantcast grants you perpetual rights to use, copy, and distribute the Measurement Results, including with our sharable widgets, only as long as you:
- Credit Us. Conspicuously include: “Source: Quantcast www.quantcast.com”;
- Present the Measurement Results Exactly as We Provided It. Do not: (i) manipulate or modify the Measurement Results to state or suggest different results from those specifically presented by Quantcast; (ii) combine information related to different Quantcast profiles (for example, by adding together the reach from two different sites instead of presenting the cross-site unduplicated reach measurement provided by Quantcast); (iii) quantitatively aggregate or combine information in the Measurement Results with information derived from other sources (but offering a comparison with information derived from other sources is permissible);
- Don’t Use Our Work to Compete with Us. Do not use the information in the Measurement Results in any way that competes with Quantcast; and
- Bind Third Parties. If you provide the information in the Measurement Results directly to any third party (rather than by having them access the information through the Quantcast website), you must ensure that they agree to be bound by and comply with the terms of this Agreement including the foregoing requirements.
4. Tagging Rules and Privacy.
You agree not to misrepresent your digital traffic, audience, or user activity in connection with Quantcast, the Services, or any Tags. You agree not to tag any adware or spyware inventory, or any Reachpoint revealing precise geographic location (i.e., information that describes the precise location of a device derived through any technology that is capable of determining with reasonable specificity the actual physical location of an individual or device), specific health / medical /sex-life information, credit card or financial data, or criminal convictions or charges. In addition, you agree not to tag any Reachpoint revealing data regarded as “sensitive” or “special category” Personal Information under Applicable Privacy Laws, including data revealing racial or ethnic origin, political opinions or parties, religious or philosophical beliefs, trade union membership, or health. You further agree not to tag any website that contains information about health conditions or treatments or that might otherwise reveal or suggest an individual’s health status or treatment. If you represent to Quantcast (e.g., during the signup process) that your Reachpoints are directed to users under the age of 16, Quantcast will not collect any Personal Information from such Reachpoints and you will not receive those of our services that require collection of data across different websites. You will not modify the Tag other than as described in a Quantcast Learning Center Guide. You agree to update your Tag (which may require retagging your Reachpoints) when we notify you of any Tag fixes, updates or upgrades. You will use the Tag in the top most frame possible. You will retain the Tag’s origin address that we provided, in full.
You agree to comply with Applicable Privacy Laws and also industry self-regulation Principles and Codes of Conduct for interest-based advertising in connection with your use of the Tag and the Services. You agree not to use the Services to track or collect personally identifiable information (i.e., information that can be used to contact or identify a particular individual, including name, address, telephone number, email address, financial account number or government-issued identifier) of end users. To the extent that the web pages or apps in which you place the Technology are accessed by end users located in Europe, you agree to implement a transparency and consent solution compatible with the IAB Europe Transparency and Consent Framework or another solution mutually agreed by both parties in writing. While you are implementing such consent solution, you agree to (i) obtain consent for Quantcast to use cookies and similar technologies in compliance with Applicable Privacy Laws, (ii) provide proof of such consent if requested by Quantcast, and (iii) not permit calls from your web pages or apps to Quantcast servers if such consent has not be obtained. You agree to name Quantcast as a party for or by whom cookies or similar technologies are used to access the device and Personal Information is collected through your webpages or apps.
You further agree to prominently display to end users a user friendly, easily accessible, clear and comprehensive privacy policy (and, if necessitated by Applicable Privacy Laws, a separate cookie policy) that, where required, complies with Applicable Privacy Laws and contains the following (a) a statement that your site or app permits data collection for interest-based advertising, (ii) a description of the types of data collected for such advertising, (iii) an explanation of the purposes for which data is collected by, or transferred to, third parties, and (iv) a conspicuous link to either an opt-out mechanism, such as the NAI or DAA opt-outs for companies established outside of Europe or a consent revocation page for companies established in Europe. If you use the Services to collect data from a network of domains or subdomains, you will inform each in advance of such disclosures.
In the case of app measurement, operating system platforms provide device-level setting options that allow end users to indicate their preference with respect to third party data collection and targeted advertising (the “Ad Preference Setting”). Quantcast treats these device level Ad Preference Settings as consumer opt-outs and you will accurately pass the Ad Preference Setting to Quantcast. You will not send any identifier associated with a device to the extent that such device has otherwise indicated that the end user wishes to be opted out of advertisement tracking.
Unless agreed otherwise, you and Quantcast are each separate and independent Businesses or Controllers of any Personal Information which you and we may disclose or receive under this Agreement. You and Quantcast, pursuant to this Agreement, do not and will not jointly determine the purposes or the means of Processing of any Personal Information disclosed or received under this Agreement. Each party shall comply with the obligations that apply to it under Applicable Privacy Laws and provide Personal Information Processed pursuant to this Agreement the level of privacy protection required by such laws. In the event that either party determines that it can no longer meet its privacy obligations under this Agreement or the Privacy Laws, it shall inform the other party without undue delay.
If you are a Business subject to CCPA, you agree to prominently post a “Do Not Sell or Share My Personal Information” link on all of your Reachpoints, and to provide consumers with the disclosures required of Businesses by CCPA.
You agree to use the Services only in accordance with the terms and conditions of this Agreement. You will not use the Services to engage in any illegal or offensive acts or serve any illegal content via any Reachpoint. You will not:
- Interfere or attempt to interfere with the operation or security-related features of the Services or the Technology;
- Delete, or in any manner alter, the copyright, trademark, or other proprietary rights notices appearing on any Quantcast Content;
- Represent that Quantcast endorses or supports your services; make any representations and warranties concerning any aspect of the Services, the Technology, or Measurement Results to any Authorized Third Parties or other third parties; or
- Attempt to index, scrape, search, or crawl the Services or the Quantcast website with any automated process; or attempt to access any information or technology relating to the Services, the Quantcast website, or our proprietary algorithms through any means not intentionally made available by Quantcast to you.
All right, title, and interest, including intellectual property rights, in and to the Quantcast website, the Services, the Technology, and the Quantcast Content are and will remain the exclusive property of Quantcast (“Quantcast Property”). Except as expressly permitted in this Agreement, you will not reproduce, modify, or prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, or use such Quantcast Property. In the event that your Quantcast account is suspended or terminated, Quantcast will continue to respect this Agreement’s limits on our use of the Measurement Data and will cease all public display of the Measurement Results.
Quantcast servers may choose to occasionally respond to any publisher’s Tag by redirecting the browser to a third-party anonymous beacon to support the provision of Quantcast services in market. The decision to beacon is not related to you, your traffic, or your user base.
Quantcast agrees to defend, indemnify, and hold you harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim that the Technology or the Services infringe any U.S. or European intellectual property rights, provided that you (i) promptly inform and furnish Quantcast with a copy of each related communication and action, (ii) allow Quantcast to assume full control of the defense and settlement, and (iii) assist and cooperate with Quantcast, at Quantcast’s expense. Quantcast will have no obligation or liability hereunder where the claim results from any combination with, addition to, or modification of the Services or the Technology, from your failure to update your Tag, from your or any Authorized Affiliate breach of this Agreement, or from failure to obtain consent for your and our use of cookies or other tracking technology in accordance with Applicable Privacy Laws. If the Services or Technology become, or, in Quantcast’s opinion are likely to become, the subject of a third-party claim against you, Quantcast may, at its option and expense, procure rights for you to continue using the Services or the Technology, replace or modify the same so that it performs substantially similar functions but does not infringe, or terminate this Agreement. The foregoing states the sole and exclusive liability of Quantcast and your sole remedy with respect to third party claims of any kind.
You agree to indemnify and hold Quantcast harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim resulting from your failure to update your Tag when we notify you of any Tag fixes, updates or upgrades.
The services and related information are provided “as is,” without warranty or condition of any kind, either express or implied. Without limiting the foregoing, Quantcast explicitly disclaims any warranties of merchantability, fitness for a particular purpose, quiet enjoyment, or non-infringement. Quantcast makes no warranty that the Services, the Quantcast website, or the Quantcast content will (1) meet your requirements, (2) be available on an uninterrupted, secure, or error-free basis, or (3) not cause any latency or processing delays. Quantcast is under no obligation to retain any Measurement Data or to keep the site up and running for any period of time. Quantcast makes no warranty regarding the accuracy, timeliness, truthfulness, completeness, or reliability of any information obtained through the Services, the Quantcast website, or the Quantcast content. No information, whether oral or written, will create any warranty or representation not expressly made herein. The foregoing exclusions and disclaimers are an essential part of this Agreement and formed a basis for enabling Quantcast to offer the Services to you. Some jurisdictions do not allow exclusion of certain warranties so this disclaimer may not apply to you in full.
Unless otherwise terminated as set forth herein, this Agreement will remain in full force and effect while you use the Services. You may terminate your Quantcast account and this Agreement at any time by both (i) “dequantifying” by deleting all Reachpoints from your profile on the Quantcast website (or, alternatively, by emailing contact@quantcast.com (if you are resident in the US) or contact.dublin@quantcast.com (if you are resident outside the US) with your complete account information and explicit request to terminate) and (ii) removing the Tags from all of your Reachpoints. Quantcast may terminate or suspend your access to the Services or terminate this Agreement at any time, for any reason or no reason and without any liability to you. Upon termination, all licenses and other rights granted to you under this Agreement will immediately cease. Quantcast will not be liable to you or any third party for termination of this Agreement (whether by Quantcast or by you) or any termination or suspension of your use of the Services. Upon any termination or suspension, information in connection with your account may no longer be accessed by you. Notwithstanding the above, Sections 4 through 9, Sections 11 through 13, and the second paragraph of Section 3 will survive termination.
Quantcast reserves the right, in its sole discretion, to modify or discontinue the Quantcast website and Services without notice. Quantcast may also modify this Agreement from time to time. If the modified Agreement is not acceptable to you, you may terminate your account within 30 days by following the two-step procedure described in Section 9. Use of the Quantcast website, use of any Tag to contact Quantcast’s servers, or use of the Services will constitute your acceptance thereof.
In no event will Quantcast be liable to you or any third party for any consequential loss, exemplary damages, incidental loss, special damages or loss, lost profit, loss or deletion of Measurement Data or Measurement Results, or punitive damages arising from your use of the Services, even if Quantcast has been advised of the possibility of such damages. These limitations formed a basis for enabling Quantcast to offer these Services to you. This paragraph will apply regardless of any failure of the exclusive remedy provided in the following paragraph.
Except with regard to Quantcast’s obligations under Section 7, liability stemming from death or personal injury resulting from Quantcast’s negligence, or Quantcast’s fraud, notwithstanding anything to the contrary contained herein, Quantcast’s liability to you for any cause whatsoever and regardless of the form of the action, will at all times be limited to two hundred fifty U.S. dollars (US$250.00).
This Agreement constitutes the entire Agreement between the parties with respect to the Services and supersedes all previous and contemporaneous agreements, proposals, and communications, written or oral between Quantcast and you with respect thereto. Any agreements regarding the delivery or use of advertising segments will govern the parties’ relationship in connection with the applicable segments but will not affect the parties’ rights, restrictions, or obligations under this Agreement, which the parties acknowledge as separate subject matter. Any waiver by either party of any violation of this Agreement will not be deemed to waive any further or future violation of the same or any other provision. If any parts or provisions of this Agreement are held to be unenforceable, then you and Quantcast agree that such parts or provisions will be given maximum permissible force and effect and the remainder of the Agreement will be fully enforceable. You and Quantcast agree that there are no third party beneficiaries of any promises, obligations or representations made by Quantcast. Either Party may assign its rights, data, and duties, under this Agreement in their entirety in connection with a sale of all (or substantially all) of its assets relating to this Agreement, a merger, or a reorganization. Nothing in this Agreement will constitute a partnership or joint venture or joint controllership between you and Quantcast. This Agreement and any dispute relating to this Agreement will be governed by the laws of the United States and the laws of the State of California, without regard to U.S. or California choice of law rules. You and Quantcast agree and consent that jurisdiction, proper venue, and the most convenient forums for all claims, actions, and proceedings of any kind relating to Quantcast or the matters in this Agreement will be exclusively in courts located in San Francisco, California. This Agreement is drafted in the English language. Any translation into another language is provided for convenience only. In the event of any inconsistency between the English language version and any translation, the English language version shall prevail.
All notices or other communications to Quantcast from you will be deemed given only when received by hand delivery, electronic mail, or prepaid first class mail, at the address below or any other address provided by Quantcast to you for these purposes:
Persons in the United States, please contact:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Attn: Legal Department
Email: contact@quantcast.com
Persons outside of the United States, please contact:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street, 1st Floor
Dublin 2, Ireland
Attn: Legal Department
Email: contact.dublin@quantcast.com
14. Definitions
“Applicable Privacy Laws” means any applicable international, federal, state, or local privacy or data protection laws, statutes or regulations as may be amended, extended or re-enacted from time to time, including but not limited to (a) the EU General Data Protection Regulation 2016/679 (“GDPR”) and any EU Member State laws implementing GDPR; (b) the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. as amended, including by the California Privacy Rights Act and implementing regulations (“CCPA”); (c) the e-Privacy Directive 2002/58/EC, as amended and as transposed into EU Member State law and any legislation replacing the e-Privacy Directive; (d) The Brazilian General Data Protection Law, Law No. 13.709, of August 14, 2018 (“LGPD”)”.
“Authorized Affiliate”means a third party that you allow to use your Tag, your account, or the Measurement Results.
“Business” has the same meaning as in CCPA.
“Measurement Data”has the meaning given to it in Section 1.
“Measurement Results”has the meaning defined in Section 1.
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household and any other information that may otherwise be considered “personal information” or “personal data” under Applicable Privacy Law.
“Quantcast Content”means the content of the Quantcast website and the Services, including the Measurement Data and Measurement Results.
“Quantcast Property” has the meaning given to it in Section 6.
“Reachpoint” has the meaning given to it in Section 1.
“Services” means Quantcast Measurement: the digital audience ratings service that allows you (or an Authorized Affiliate) to define and measure specific online events by tagging Reachpoints, as described herein and as governed by these terms and conditions.
“Tag” means the particular javascript or other audience measurement code or software development kit provided to you by Quantcast, which allows Quantcast to set a cookie and embeddable on web pages, media files, and other Reachpoints, together with any labels and any fixes, updates, and upgrades provided to you.
“Technology” means, separately and collectively, the Tags, and Quantcast’s proprietary technology that generates the Measurement Results.
If you reside in the US this Agreement is between you and Quantcast Corporation. If you reside outside of the US, this Agreement is between you and Quantcast International Limited, an Irish limited liability company. References to “Quantcast”, “us”, “we” and “our” mean either Quantcast Corporation or Quantcast International Limited as appropriate.
Effective August 17th 2023 to April 5th 2024
DownloadTable of Contents
If you have an active, duly executed contract for Quantcast services (“Existing Contract”), the Existing Contract will govern your use of the service(s) covered in the Existing Contract instead of these Quantcast Measure Terms of Service (“Terms”). In addition, these Terms only apply to the Quantcast Measure service (i.e., the “Service” as described below) and not to any other Quantcast product or service.
Quantcast Measure Terms of Service
This Quantcast Measure Terms of Service (this “Agreement”) describes the terms and conditions on which Quantcast makes Quantcast Measure (the “Services”) available to you.
BY CLICKING THE “I ACCEPT” BUTTON, COMPLETING THE REGISTRATION PROCESS, USING THE SERVICES OR ENTERING INTO AN OFFLINE AGREEMENT THAT REFERENCES THIS AGREEMENT OR INCLUDES A LINK TO THIS AGREEMENT, YOU ARE AGREEING TO BE BOUND BY THIS AGREEMENT. IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY, IN WHICH CASE THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY (OR, IF SUCH ENTITY IS ACTING AS AN AUTHORIZED AFFILIATE, THEN THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY, THE AUTHORIZING PARTY(IES), OR BOTH, AS APPLICABLE). QUANTCAST MAY MODIFY THIS AGREEMENT FROM TIME TO TIME; CONTINUED USE 30 DAYS AFTER NOTIFICATION WILL CONSTITUTE ACCEPTANCE (SEE SECTION 10).
Capitalized terms not otherwise defined herein are defined in Section 14.
This Agreement incorporates the US State Data Privacy Addendum to the extent that the Services include processing personal information that is subject to U.S. State Privacy Laws (as defined in the foregoing Addendum) and the Privacy Implementation for Quantcast Publisher Partners.
- Introduction: Reachpoints, Tags, and Measurement Data.
Quantcast Measure is a free digital audience measurement service that allows you to tag web pages, video, advertisements, apps, content, and paid search campaigns (what we call, “Reachpoints”) for direct measurement.
You can also define and measure actions and events by customizing your Tags with labels. You have complete control over (and are solely responsible for) which Reachpoints are tagged, how segments are labelled (e.g., with meaningful or obfuscated names), and how the resulting Measurement Results are or are not disclosed publicly.
Each time a browser visits your tagged Reachpoints, Quantcast may, in accordance with Applicable Privacy Laws, collect traffic statistics like those in any web server log (what we call, “Measurement Data”). We then apply proprietary Quantcast algorithms and other data to the Measurement Data to generate the “Measurement Results”, which we make available to you on the Quantcast website (see Section 3).
To measure Reachpoints that you do not own or control, you may provide your Tag to a third party who accepts this Agreement (any such third party, an “Authorized Affiliate”); you may also instruct us to give the Authorized Affiliate access to the Measurement Results.
- Registration.
In order to access the Services you must register for a Quantcast account on the Quantcast website. Each new app you Tag requires its own registration and then receives its own unique API key. In registering, you agree to provide accurate, current, and complete information, and to keep it up to date. Any processing of Personal Information when registering for a Quantcast account will be processed in accordance with the Quantcast Website and Corporate Privacy Policy which you can access here.
You are responsible for keeping your password confidential. You hereby take responsibility for all actions taken—and instructions provided to Quantcast—under your account or with the Measurement Results, by you or any third parties, whether or not authorized. You will notify Quantcast immediately of any unauthorized or non-compliant use of your account and will cooperate with us in stopping it.
- Measurement Data and Results.
Quantcast uses each piece of Measurement Data both to understand your audience (for your benefit only) and as one of trillions of data points for predictive analytics and in determining what content and advertising to show individuals across the internet and other digital applications. You acknowledge that Quantcast may use Personal Information it receives from you to provide services to other Quantcast clients or for Quantcast’s commercial interests that may be unrelated to providing the Services to you.
Quantcast will never sell your audience (whether identified as such or not) and you control the extent to which Quantcast displays the Measurement Results.
Quantcast grants you perpetual rights to use, copy, and distribute the Measurement Results, including with our sharable widgets, only as long as you:
- Credit Us. Conspicuously include: “Source: Quantcast www.quantcast.com”;
- Present the Measurement Results Exactly as We Provided It. Do not: (i) manipulate or modify the Measurement Results to state or suggest different results from those specifically presented by Quantcast; (ii) combine information related to different Quantcast profiles (for example, by adding together the reach from two different sites instead of presenting the cross-site unduplicated reach measurement provided by Quantcast); (iii) quantitatively aggregate or combine information in the Measurement Results with information derived from other sources (but offering a comparison with information derived from other sources is permissible);
- Don’t Use Our Work to Compete with Us. Do not use the information in the Measurement Results in any way that competes with Quantcast; and
- Bind Third Parties. If you provide the information in the Measurement Results directly to any third party (rather than by having them access the information through the Quantcast website), you must ensure that they agree to be bound by and comply with the terms of this Agreement including the foregoing requirements.
- Tagging Rules and Privacy.
You agree not to misrepresent your digital traffic, audience, or user activity in connection with Quantcast, the Services, or any Tags. You agree not to tag any adware or spyware inventory, or any Reachpoint revealing precise geographic location (i.e., information that describes the precise location of a device derived through any technology that is capable of determining with reasonable specificity the actual physical location of an individual or device), specific health / medical /sex-life information, credit card or financial data, or criminal convictions or charges. In addition, you agree not to tag any Reachpoint revealing data regarded as “sensitive” or “special category” Personal Information under Applicable Privacy Laws, including data revealing racial or ethnic origin, political opinions or parties, religious or philosophical beliefs, trade union membership, or health. If you represent to Quantcast (e.g., during the signup process) that your Reachpoints are directed to users under the age of 16, Quantcast will not collect any Personal Information from such Reachpoints and you will not receive those of our services that require collection of data across different websites. You will not modify the Tag other than as described in a Quantcast Learning Center Guide. You agree to update your Tag (which may require retagging your Reachpoints) when we notify you of any Tag fixes, updates or upgrades. You will use the Tag in the top most frame possible. You will retain the Tag’s origin address that we provided, in full.
You agree to comply with Applicable Privacy Laws and also industry self-regulation Principles and Codes of Conduct for interest-based advertising in connection with your use of the Tag and the Services. You agree not to use the Services to track or collect personally identifiable information (i.e., information that can be used to contact or identify a particular individual, including name, address, telephone number, email address, financial account number or government-issued identifier) of end users. To the extent that the web pages or apps in which you place the Technology are accessed by end users located in Europe, you agree to implement a transparency and consent solution compatible with the IAB Europe Transparency and Consent Framework or another solution mutually agreed by both parties in writing. While you are implementing such consent solution, you agree to (i) obtain consent for Quantcast to use cookies and similar technologies in compliance with Applicable Privacy Laws, (ii) provide proof of such consent if requested by Quantcast, and (iii) not permit calls from your web pages or apps to Quantcast servers if such consent has not be obtained. You agree to name Quantcast as a party for or by whom cookies or similar technologies are used to access the device and Personal Information is collected through your webpages or apps.
You further agree to prominently display to end users a user friendly, easily accessible, clear and comprehensive privacy policy (and, if necessitated by Applicable Privacy Laws, a separate cookie policy) that, where required, complies with Applicable Privacy Laws and contains the following (a) a statement that your site or app permits data collection for interest-based advertising, (ii) a description of the types of data collected for such advertising, (iii) an explanation of the purposes for which data is collected by, or transferred to, third parties, and (iv) a conspicuous link to either an opt-out mechanism, such as the NAI or DAA opt-outs for companies established outside of Europe or a consent revocation page for companies established in Europe. If you use the Services to collect data from a network of domains or subdomains, you will inform each in advance of such disclosures.
In the case of app measurement, operating system platforms provide device-level setting options that allow end users to indicate their preference with respect to third party data collection and targeted advertising (the “Ad Preference Setting”). Quantcast treats these device level Ad Preference Settings as consumer opt-outs and you will accurately pass the Ad Preference Setting to Quantcast. You will not send any identifier associated with a device to the extent that such device has otherwise indicated that the end user wishes to be opted out of advertisement tracking.
Unless agreed otherwise, you and Quantcast are each separate and independent Businesses or Controllers of any Personal Information which you and we may disclose or receive under this Agreement. You and Quantcast, pursuant to this Agreement, do not and will not jointly determine the purposes or the means of Processing of any Personal Information disclosed or received under this Agreement. Each party shall comply with the obligations that apply to it under Applicable Privacy Laws and provide Personal Information Processed pursuant to this Agreement the level of privacy protection required by such laws. In the event that either party determines that it can no longer meet its privacy obligations under this Agreement or the Privacy Laws, it shall inform the other party without undue delay.
If you are a Business subject to CCPA, you agree to prominently post a “Do Not Sell or Share My Personal Information” link on all of your Reachpoints, and to provide consumers with the disclosures required of Businesses by CCPA.
- Restrictions.
You agree to use the Services only in accordance with the terms and conditions of this Agreement. You will not use the Services to engage in any illegal or offensive acts or serve any illegal content via any Reachpoint. You will not:
- Interfere or attempt to interfere with the operation or security-related features of the Services or the Technology;
- Delete, or in any manner alter, the copyright, trademark, or other proprietary rights notices appearing on any Quantcast Content;
- Represent that Quantcast endorses or supports your services; make any representations and warranties concerning any aspect of the Services, the Technology, or Measurement Results to any Authorized Third Parties or other third parties; or
- Attempt to index, scrape, search, or crawl the Services or the Quantcast website with any automated process; or attempt to access any information or technology relating to the Services, the Quantcast website, or our proprietary algorithms through any means not intentionally made available by Quantcast to you.
- Quantcast Rights.
All right, title, and interest, including intellectual property rights, in and to the Quantcast website, the Services, the Technology, and the Quantcast Content are and will remain the exclusive property of Quantcast (“Quantcast Property”). Except as expressly permitted in this Agreement, you will not reproduce, modify, or prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, or use such Quantcast Property. In the event that your Quantcast account is suspended or terminated, Quantcast will continue to respect this Agreement’s limits on our use of the Measurement Data and will cease all public display of the Measurement Results.
Quantcast servers may choose to occasionally respond to any publisher’s Tag by redirecting the browser to a third-party anonymous beacon to support the provision of Quantcast services in market. The decision to beacon is not related to you, your traffic, or your user base.
- Indemnity.
Quantcast agrees to defend, indemnify, and hold you harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim that the Technology or the Services infringe any U.S. or European intellectual property rights, provided that you (i) promptly inform and furnish Quantcast with a copy of each related communication and action, (ii) allow Quantcast to assume full control of the defense and settlement, and (iii) assist and cooperate with Quantcast, at Quantcast’s expense. Quantcast will have no obligation or liability hereunder where the claim results from any combination with, addition to, or modification of the Services or the Technology, from your failure to update your Tag, from your or any Authorized Affiliate breach of this Agreement, or from failure to obtain consent for your and our use of cookies or other tracking technology in accordance with Applicable Privacy Laws. If the Services or Technology become, or, in Quantcast’s opinion are likely to become, the subject of a third-party claim against you, Quantcast may, at its option and expense, procure rights for you to continue using the Services or the Technology, replace or modify the same so that it performs substantially similar functions but does not infringe, or terminate this Agreement. The foregoing states the sole and exclusive liability of Quantcast and your sole remedy with respect to third party claims of any kind.
You agree to indemnify and hold Quantcast harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim resulting from your failure to update your Tag when we notify you of any Tag fixes, updates or upgrades.
- Warranty Disclaimer.
The services and related information are provided “as is,” without warranty or condition of any kind, either express or implied. Without limiting the foregoing, Quantcast explicitly disclaims any warranties of merchantability, fitness for a particular purpose, quiet enjoyment, or non-infringement. Quantcast makes no warranty that the Services, the Quantcast website, or the Quantcast content will (1) meet your requirements, (2) be available on an uninterrupted, secure, or error-free basis, or (3) not cause any latency or processing delays. Quantcast is under no obligation to retain any Measurement Data or to keep the site up and running for any period of time. Quantcast makes no warranty regarding the accuracy, timeliness, truthfulness, completeness, or reliability of any information obtained through the Services, the Quantcast website, or the Quantcast content. No information, whether oral or written, will create any warranty or representation not expressly made herein. The foregoing exclusions and disclaimers are an essential part of this Agreement and formed a basis for enabling Quantcast to offer the Services to you. Some jurisdictions do not allow exclusion of certain warranties so this disclaimer may not apply to you in full.
- Suspension and Termination.
Unless otherwise terminated as set forth herein, this Agreement will remain in full force and effect while you use the Services. You may terminate your Quantcast account and this Agreement at any time by both (i) “dequantifying” by deleting all Reachpoints from your profile on the Quantcast website (or, alternatively, by emailing contact@quantcast.com (if you are resident in the US) or contact.dublin@quantcast.com (if you are resident outside the US) with your complete account information and explicit request to terminate) and (ii) removing the Tags from all of your Reachpoints. Quantcast may terminate or suspend your access to the Services or terminate this Agreement at any time, for any reason or no reason and without any liability to you. Upon termination, all licenses and other rights granted to you under this Agreement will immediately cease. Quantcast will not be liable to you or any third party for termination of this Agreement (whether by Quantcast or by you) or any termination or suspension of your use of the Services. Upon any termination or suspension, information in connection with your account may no longer be accessed by you. Notwithstanding the above, Sections 4 through 9, Sections 11 through 13, and the second paragraph of Section 3 will survive termination.
- Modification of the Service and of the Terms.
Quantcast reserves the right, in its sole discretion, to modify or discontinue the Quantcast website and Services without notice. Quantcast may also modify this Agreement from time to time. If the modified Agreement is not acceptable to you, you may terminate your account within 30 days by following the two-step procedure described in Section 9. Use of the Quantcast website, use of any Tag to contact Quantcast’s servers, or use of the Services will constitute your acceptance thereof.
- Limitation of Liability.
In no event will Quantcast be liable to you or any third party for any consequential loss, exemplary damages, incidental loss, special damages or loss, lost profit, loss or deletion of Measurement Data or Measurement Results, or punitive damages arising from your use of the Services, even if Quantcast has been advised of the possibility of such damages. These limitations formed a basis for enabling Quantcast to offer these Services to you. This paragraph will apply regardless of any failure of the exclusive remedy provided in the following paragraph.
Except with regard to Quantcast’s obligations under Section 7, liability stemming from death or personal injury resulting from Quantcast’s negligence, or Quantcast’s fraud, notwithstanding anything to the contrary contained herein, Quantcast’s liability to you for any cause whatsoever and regardless of the form of the action, will at all times be limited to two hundred fifty U.S. dollars (US$250.00).
- Miscellaneous.
This Agreement constitutes the entire Agreement between the parties with respect to the Services and supersedes all previous and contemporaneous agreements, proposals, and communications, written or oral between Quantcast and you with respect thereto. Any agreements regarding the delivery or use of advertising segments will govern the parties’ relationship in connection with the applicable segments but will not affect the parties’ rights, restrictions, or obligations under this Agreement, which the parties acknowledge as separate subject matter. Any waiver by either party of any violation of this Agreement will not be deemed to waive any further or future violation of the same or any other provision. If any parts or provisions of this Agreement are held to be unenforceable, then you and Quantcast agree that such parts or provisions will be given maximum permissible force and effect and the remainder of the Agreement will be fully enforceable. You and Quantcast agree that there are no third party beneficiaries of any promises, obligations or representations made by Quantcast. Either Party may assign its rights, data, and duties, under this Agreement in their entirety in connection with a sale of all (or substantially all) of its assets relating to this Agreement, a merger, or a reorganization. Nothing in this Agreement will constitute a partnership or joint venture or joint controllership between you and Quantcast. This Agreement and any dispute relating to this Agreement will be governed by the laws of the United States and the laws of the State of California, without regard to U.S. or California choice of law rules. You and Quantcast agree and consent that jurisdiction, proper venue, and the most convenient forums for all claims, actions, and proceedings of any kind relating to Quantcast or the matters in this Agreement will be exclusively in courts located in San Francisco, California. This Agreement is drafted in the English language. Any translation into another language is provided for convenience only. In the event of any inconsistency between the English language version and any translation, the English language version shall prevail.
- Notice.
All notices or other communications to Quantcast from you will be deemed given only when received by hand delivery, electronic mail, or prepaid first class mail, at the address below or any other address provided by Quantcast to you for these purposes:
Persons in the United States, please contact:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Attn: Legal Department
Email: contact@quantcast.com
Persons outside of the United States, please contact:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street, 1st Floor
Dublin 2, Ireland
Attn: Legal Department
Email: contact.dublin@quantcast.com
- Definitions
“Applicable Privacy Laws” means any applicable international, federal, state, or local privacy or data protection laws, statutes or regulations as may be amended, extended or re-enacted from time to time, including but not limited to (a) the EU General Data Protection Regulation 2016/679 (“GDPR”) and any EU Member State laws implementing GDPR; (b) the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. as amended, including by the California Privacy Rights Act and implementing regulations (“CCPA”); (c) the e-Privacy Directive 2002/58/EC, as amended and as transposed into EU Member State law and any legislation replacing the e-Privacy Directive; (d) The Brazilian General Data Protection Law, Law No. 13.709, of August 14, 2018 (“LGPD”)”.
“Authorized Affiliate”means a third party that you allow to use your Tag, your account, or the Measurement Results.
“Business” has the same meaning as in CCPA.
“Measurement Data”has the meaning given to it in Section 1.
“Measurement Results”has the meaning defined in Section 1.
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household and any other information that may otherwise be considered “personal information” or “personal data” under Applicable Privacy Law.
“Quantcast Content”means the content of the Quantcast website and the Services, including the Measurement Data and Measurement Results.
“Quantcast Property” has the meaning given to it in Section 6.
“Reachpoint”has the meaning given to it in Section 1.
“Services”means Quantcast Measurement: the digital audience ratings service that allows you (or an Authorized Affiliate) to define and measure specific online events by tagging Reachpoints, as described herein and as governed by these terms and conditions.
“Tag”means the particular javascript or other audience measurement code or software development kit provided to you by Quantcast, which allows Quantcast to set a cookie and embeddable on web pages, media files, and other Reachpoints, together with any labels and any fixes, updates, and upgrades provided to you.
“Technology”means, separately and collectively, the Tags, and Quantcast’s proprietary technology that generates the Measurement Results.
- Contracting Party.
If you reside in the US this Agreement is between you and Quantcast Corporation. If you reside outside of the US, this Agreement is between you and Quantcast International Limited, an Irish limited liability company. References to “Quantcast”, “us”, “we” and “our” mean either Quantcast Corporation or Quantcast International Limited as appropriate.
Effective July 23rd 2021 to August 17th 2023
DownloadTable of Contents
Quantcast Measure and Q for Publishers Terms of Service
Effective: January 1, 2020
Once you have agreed to these Terms and Conditions you will be able to download and install the Quantcast Measure Tag. These terms will apply only after such download and installation.
This Quantcast Measure and Q for Publishers Terms of Service (this “Agreement”) describes the terms and conditions on which Quantcast makes Quantcast Measure and Q for Publishers (the “Services”) available to you.
BY CLICKING THE “I ACCEPT” BUTTON, COMPLETING THE REGISTRATION PROCESS, OR USING THE SERVICES, YOU ARE AGREEING TO BE BOUND BY THIS AGREEMENT. IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY, IN WHICH CASE THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY (OR, IF SUCH ENTITY IS ACTING AS AN AUTHORIZED AFFILIATE, THEN THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY, THE AUTHORIZING PARTY(IES), OR BOTH, AS APPLICABLE). QUANTCAST MAY MODIFY THIS AGREEMENT FROM TIME TO TIME; CONTINUED USE 30 DAYS AFTER NOTIFICATION WILL CONSTITUTE ACCEPTANCE (SEE SECTION 10).
Capitalized terms not otherwise defined herein are defined in Section 14.
- Introduction: Reachpoints, Tags, and Measurement Data.
Quantcast Measure is a free digital audience measurement service that allows you to tag web pages, video, advertisements, apps, content, and paid search campaigns (what we call, “Reachpoints”) for direct measurement.
You can also define and measure actions and events by customizing your Tags with labels. You have complete control over (and are solely responsible for) which Reachpoints are tagged, how segments are labelled (e.g., with meaningful or obfuscated names), and how the resulting Measurement Results are or are not disclosed publicly.
Each time a browser visits your tagged Reachpoints, Quantcast may, in accordance with Applicable Privacy Laws, collect traffic statistics like those in any web server log (what we call, “Measurement Data”). We then apply proprietary Quantcast algorithms and other data to the Measurement Data to generate the “Measurement Results”, which we make available to you on the Quantcast website (see Section 3). For more information about how the Services work, please see our FAQ.
To measure Reachpoints that you do not own or control, you may provide your Tag to a third party who accepts this Agreement (any such third party, an “Authorized Affiliate”); you may also instruct us to give the Authorized Affiliate access to the Measurement Results.
- Registration.
In order to access the Services you must register for a Quantcast account on the Quantcast website. Each new app you Tag requires its own registration and then receives its own unique API key. In registering, you agree to provide accurate, current, and complete information, and to keep it up to date. Any processing of Personal Data when registering for a Quantcast account will be processed in accordance with the Quantcast Privacy Policy which you can access here.
You are responsible for keeping your password confidential. You hereby take responsibility for all actions taken—and instructions provided to Quantcast—under your account or with the Measurement Results, by you or any third parties, whether or not authorized. You will notify Quantcast immediately of any unauthorized or non-compliant use of your account and will cooperate with us in stopping it.
- Measurement Data and Results.
Quantcast uses each piece of Measurement Data both to understand your audience (for your benefit only) and as one of trillions of data points for predictive analytics and in determining what content and advertising to show individuals across the internet and other digital applications. You acknowledge that Quantcast may use Personal Information it receives from you to provide services to other Quantcast clients or for Quantcast’s commercial interests that may be unrelated to providing the Services to you.
Quantcast will never sell your audience (whether identified as such or not) and you control the extent to which Quantcast displays the Measurement Results.
Quantcast grants you perpetual rights to use, copy, and distribute the Measurement Results, including with our sharable widgets, only as long as you:
- Credit Us. Conspicuously include: “Source: Quantcast www.quantcast.com”;
- Present the Measurement Results Exactly as We Provided It. Do not: (i) manipulate or modify the Measurement Results to state or suggest different results from those specifically presented by Quantcast; (ii) combine information related to different Quantcast profiles (for example, by adding together the reach from two different sites instead of presenting the cross-site unduplicated reach measurement provided by Quantcast); (iii) quantitatively aggregate or combine information in the Measurement Results with information derived from other sources (but offering a comparison with information derived from other sources is permissible);
- Don’t Use Our Work to Compete with Us. Do not use the information in the Measurement Results in any way that competes with Quantcast; and
- Bind Third Parties. If you provide the information in the Measurement Results directly to any third party (rather than by having them access the information through the Quantcast website), you must ensure that they agree to be bound by and comply with the terms of this Agreement including the foregoing requirements.
- Tagging Rules and Privacy.
You agree not to misrepresent your digital traffic, audience, or user activity in connection with Quantcast, the Services, or any Tags. You agree not to tag any adware or spyware inventory, or any Reachpoint revealing precise geographic location (i.e., information that describes the precise location of a device derived through any technology that is capable of determining with reasonable specificity the actual physical location of an individual or device), specific health / medical /sex-life information, credit card or financial data, or criminal convictions or charges. In addition, if you are an EU established company or person or your Reachpoints are directed towards end users in the EU, you agree not to tag any Reachpoint revealing other sensitive or special category Personal Data, including racial or ethnic origin, political opinions or parties, religious or philosophical beliefs, or trade union membership. If you represent to Quantcast (e.g., during the signup process) that your Reachpoints are directed to users under the age of 16, Quantcast will not collect any Personal Data from such Reachpoints and you will not receive those of our services that require collection of data across different websites. You will not modify the Tag other than as described in a Quantcast Learning Center Guide. You agree to update your Tag (which may require retagging your Reachpoints) when we notify you of any Tag fixes, updates or upgrades. You will use the Tag in the top most frame possible. You will retain the Tag’s origin address that we provided, in full.
You agree to comply with Applicable Privacy Laws and also industry self-regulation Principles and Codes of Conduct for interest-based advertising in connection with your use of the Tag and the Services. You agree not to use the Services to track or collect personally identifiable information of end users. To the extent that the web pages or apps in which you place the Technology are accessed by end users in the EU, you agree to implement a transparency and consent solution compatible with the IAB Europe Transparency and Consent Framework (such as Quantcast Choice) or another solution mutually agreed by both parties in writing. While you are implementing such consent solution, you agree to (i) obtain consent for Quantcast to use cookies and similar technologies in compliance with Applicable Privacy Laws, (ii) provide proof of such consent if requested by Quantcast, and (iii) not permit calls from your web pages or apps to Quantcast servers if such consent has not be obtained. Wherever possible, you agree to name Quantcast as a party for or by whom cookies or similar technologies are used to access the device and Personal Data is collected through your webpages or apps.
You further agree to prominently display to end users a user friendly, easily accessible, clear and comprehensive privacy policy (and, if necessitated by Applicable Privacy Laws, a separate cookie policy) that, where required, complies with Applicable Privacy Laws and contains the following (a) a statement that your site or app permits data collection for interest-based advertising, (ii) a description of the types of data collected for such advertising, (iii) an explanation of the purposes for which data is collected by, or transferred to, third parties, and (iv) a conspicuous link to either an opt-out mechanism, such as the NAI or DAA opt-outs for non-EU established companies or a consent revocation page for EU established companies. If you use the Services to collect data from a network of domains or subdomains, you will inform each in advance of such disclosures.
In the case of app measurement, operating system platforms provide device-level setting options that allow end users to indicate their preference with respect to third party data collection and targeted advertising (the “Ad Preference Setting”). Quantcast treats these device level Ad Preference Settings as consumer opt-outs and you will accurately pass the Ad Preference Setting to Quantcast. You will not send any identifier associated with a device to the extent that such device has otherwise indicated that the end user wishes to be opted out of advertisement tracking.
To the extent that GDPR applies, you and Quantcast are each separate and independent data controllers of any Personal Data which you and we may disclose or receive under this Agreement. You and Quantcast, pursuant to this Agreement, do not and will not jointly determine the purposes or the means of processing of any Personal Data disclosed or received under this Agreement.
To the extent that CCPA applies, Quantcast is a Third Party in its relationship with you regarding your use of the Services.
If you are a Business subject to CCPA, you agree to prominently post a “Do Not Sell My Personal Information” link on all of your Reachpoints, and to provide consumers with the disclosures required of Businesses by CCPA.
- Restrictions.
You agree to use the Services only in accordance with the terms and conditions of this Agreement. You will not use the Service to engage in any illegal or offensive acts or serve any illegal content via any Reachpoint. You will not:
- Interfere or attempt to interfere with the operation or security-related features of the Services or the Technology;
- Delete, or in any manner alter, the copyright, trademark, or other proprietary rights notices appearing on any Quantcast Content;
- Represent that Quantcast endorses or supports your services; make any representations and warranties concerning any aspect of the Services, the Technology, or Measurement Results to any Authorized Third Parties or other third parties; or
- Attempt to index, scrape, search, or crawl the Services or the Quantcast website with any automated process; or attempt to access any information or technology relating to the Services, the Quantcast website, or our proprietary algorithms through any means not intentionally made available by Quantcast to you.
- Quantcast Rights.
All right, title, and interest, including intellectual property rights, in and to the Quantcast website, the Services, the Technology, and the Quantcast Content are and will remain the exclusive property of Quantcast (“Quantcast Property”). Except as expressly permitted in this Agreement, you will not reproduce, modify, or prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, or use such Quantcast Property. In the event that your Quantcast account is suspended or terminated, Quantcast will continue to respect this Agreement’s limits on our use of the Measurement Data and will cease all public display of the Measurement Results.
Quantcast servers may choose to occasionally respond to any publisher’s Tag by redirecting the browser to a third-party anonymous beacon to support the provision of Quantcast services in market. The decision to beacon is not related to you, your traffic, or your user base.
- Indemnity.
Quantcast agrees to defend, indemnify, and hold you harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim that the Technology or the Services infringe any U.S. or European intellectual property rights, provided that you (i) promptly inform and furnish Quantcast with a copy of each related communication and action, (ii) allow Quantcast to assume full control of the defense and settlement, and (iii) assist and cooperate with Quantcast, at Quantcast’s expense. Quantcast will have no obligation or liability hereunder where the claim results from any combination with, addition to, or modification of the Services or the Technology, from your failure to update your Tag, from your or any Authorized Affiliate breach of this Agreement, or from failure to obtain consent for your and our use of cookies or other tracking technology in accordance with Applicable Privacy Laws. If the Services or Technology become, or, in Quantcast’s opinion are likely to become, the subject of a third-party claim against you, Quantcast may, at its option and expense, procure rights for you to continue using the Services or the Technology, replace or modify the same so that it performs substantially similar functions but does not infringe, or terminate this Agreement. The foregoing states the sole and exclusive liability of Quantcast and your sole remedy with respect to third party claims of any kind.
You agree to indemnify and hold Quantcast harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim resulting from your failure to update your Tag when we notify you of any Tag fixes, updates or upgrades.
- Warranty Disclaimer.
The services and related information are provided “as is,” without warranty or condition of any kind, either express or implied. Without limiting the foregoing, Quantcast explicitly disclaims any warranties of merchantability, fitness for a particular purpose, quiet enjoyment, or non-infringement. Quantcast makes no warranty that the Services, the Quantcast website, or the Quantcast content will (1) meet your requirements, (2) be available on an uninterrupted, secure, or error-free basis, or (3) not cause any latency or processing delays. Quantcast is under no obligation to retain any Measurement Data or to keep the site up and running for any period of time. Quantcast makes no warranty regarding the accuracy, timeliness, truthfulness, completeness, or reliability of any information obtained through the Services, the Quantcast website, or the Quantcast content. No information, whether oral or written, will create any warranty or representation not expressly made herein. The foregoing exclusions and disclaimers are an essential part of this Agreement and formed a basis for enabling Quantcast to offer the Services to you. Some jurisdictions do not allow exclusion of certain warranties so this disclaimer may not apply to you in full.
- Suspension and Termination.
Unless otherwise terminated as set forth herein, this Agreement will remain in full force and effect while you use the Services. You may terminate your Quantcast account and this Agreement at any time by both (i) “dequantifying” by deleting all Reachpoints from your profile on the Quantcast website (or, alternatively, by emailing contact@quantcast.com (if you are resident in the US) or contact.dublin@quantcast.com (if you are resident outside the US) with your complete account information and explicit request to terminate) and (ii) removing the Tags from all of your Reachpoints. Quantcast may terminate or suspend your access to the Services or terminate this Agreement at any time, for any reason or no reason and without any liability to you. Upon termination, all licenses and other rights granted to you under this Agreement will immediately cease. Quantcast will not be liable to you or any third party for termination of this Agreement (whether by Quantcast or by you) or any termination or suspension of your use of the Services. Upon any termination or suspension, information in connection with your account may no longer be accessed by you. Notwithstanding the above, Sections 4 through 9, Sections 11 through 13, and the second paragraph of Section 3 will survive termination.
- Modification of the Service and of the Terms.
Quantcast reserves the right, in its sole discretion, to modify or discontinue the Quantcast website and Services without notice. Quantcast may also modify this Agreement from time to time. If the modified Agreement is not acceptable to you, you may terminate your account within 30 days by following the two-step procedure described in Section 9. Use of the Quantcast website, use of any Tag to contact Quantcast’s servers, or use of the Services, after 30 days, will constitute your acceptance thereof.
- Limitation of Liability.
In no event will Quantcast be liable to you or any third party for any consequential loss, exemplary damages, incidental loss, special damages or loss, lost profit, loss or deletion of Measurement Data or Measurement Results, or punitive damages arising from your use of the Services, even if Quantcast has been advised of the possibility of such damages. These limitations formed a basis for enabling Quantcast to offer these Services to you. This paragraph will apply regardless of any failure of the exclusive remedy provided in the following paragraph.
Except with regard to Quantcast’s obligations under Section 7, liability stemming from death or personal injury resulting from Quantcast’s negligence, or Quantcast’s fraud, notwithstanding anything to the contrary contained herein, Quantcast’s liability to you for any cause whatsoever and regardless of the form of the action, will at all times be limited to two hundred fifty U.S. dollars (US$250.00).
- Miscellaneous.
This Agreement constitutes the entire Agreement between the parties with respect to the Services and supersedes all previous and contemporaneous agreements, proposals, and communications, written or oral between Quantcast and you with respect thereto. Any agreements regarding the delivery or use of advertising segments will govern the parties’ relationship in connection with the applicable segments but will not affect the parties’ rights, restrictions, or obligations under this Agreement, which the parties acknowledge as separate subject matter. Any waiver by either party of any violation of this Agreement will not be deemed to waive any further or future violation of the same or any other provision. If any parts or provisions of this Agreement are held to be unenforceable, then you and Quantcast agree that such parts or provisions will be given maximum permissible force and effect and the remainder of the Agreement will be fully enforceable. You and Quantcast agree that there are no third party beneficiaries of any promises, obligations or representations made by Quantcast. Either Party may assign its rights, data, and duties, under this Agreement in their entirety in connection with a sale of all (or substantially all) of its assets relating to this Agreement, a merger, or a reorganization. Nothing in this Agreement will constitute a partnership or joint venture or joint controllership between you and Quantcast. This Agreement and any dispute relating to this Agreement will be governed by the laws of the United States and the laws of the State of California, without regard to U.S. or California choice of law rules. You and Quantcast agree and consent that jurisdiction, proper venue, and the most convenient forums for all claims, actions, and proceedings of any kind relating to Quantcast or the matters in this Agreement will be exclusively in courts located in San Francisco, California. This Agreement is drafted in the English language. Any translation into another language is provided for convenience only. In the event of any inconsistency between the English language version and any translation, the English language version shall prevail.
- Notice.
All notices or other communications to Quantcast from you will be deemed given only when received by hand delivery, electronic mail, or prepaid first class mail, at the address below or any other address provided by Quantcast to you for these purposes:
Persons in the United States, please contact:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Attn: Legal Department
Email: contact@quantcast.com
Persons outside of the United States, please contact:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street, 1st Floor
Dublin 2, Ireland
Attn: Legal Department
Email: contact.dublin@quantcast.com
- Definitions
“Applicable Privacy Laws” means any applicable privacy or data protection laws, statutes or regulations as may be amended, extended or re-enacted from time to time, including, where applicable, (a) the EU General Data Protection Regulation 2016/679 (“GDPR”) and any EU Member State laws implementing GDPR; (b) the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. (“CCPA”); and; (c) the e-Privacy Directive 2002/58/EC, as amended and as transposed into EU Member State law and any legislation replacing the e-Privacy Directive.
“Authorized Affiliate” means a third party that you allow to use your Tag, your account, or the Measurement Results.
“Business” has the same meaning as in CCPA.
“Measurement Data” has the meaning given to it in Section 1.
“Measurement Results” has the meaning defined in Section 1.
“Personal Data” has the same meaning as in GDPR.
“Personal Information” has the same meaning as in CCPA.
“Quantcast Content” means the content of the Quantcast website and the Services, including the Measurement Data and Measurement Results.
“Quantcast Property” has the meaning given to it in Section 6.
“Reachpoint” has the meaning given to it in Section 1.
“Services” means Quantcast Measurement: the digital audience ratings service that allows you (or an Authorized Affiliate) to define and measure specific online events by tagging Reachpoints, as described herein and as governed by these terms and conditions.
“Tag” means the particular javascript or other audience measurement code or software development kit provided to you by Quantcast, which allows Quantcast to set a cookie and embeddable on web pages, media files, and other Reachpoints, together with any labels and any fixes, updates, and upgrades provided to you.
“Technology” means, separately and collectively, the Tags, and Quantcast’s proprietary technology that generates the Measurement Results.
“Third Party” has the same meaning as in CCPA.
- Contracting Party.
If you reside in the US this Agreement is between you and Quantcast Corporation. If you reside outside of the US, this Agreement is between you and Quantcast International Limited, an Irish limited liability company. References to “Quantcast”, “us”, “we” and “our” mean either Quantcast Corporation or Quantcast International Limited as appropriate.
Effective July 21st 2021 to July 23rd 2021
DownloadTable of Contents
Quantcast Measure and Q for Publishers Terms of Service
Effective: January 1, 2020
Once you have agreed to these Terms and Conditions you will be able to download and install the Quantcast Measure Tag. These terms will apply on after such download and installation.
This Quantcast Measure and Q for Publishers Terms of Service (this “Agreement”) describes the terms and conditions on which Quantcast makes Quantcast Measure and Q for Publishers (the “Services”) available to you.
BY CLICKING THE “I ACCEPT” BUTTON, COMPLETING THE REGISTRATION PROCESS, OR USING THE SERVICES, YOU ARE AGREEING TO BE BOUND BY THIS AGREEMENT. IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY, IN WHICH CASE THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY (OR, IF SUCH ENTITY IS ACTING AS AN AUTHORIZED AFFILIATE, THEN THE TERMS “YOU” OR “YOUR” WILL REFER TO SUCH ENTITY, THE AUTHORIZING PARTY(IES), OR BOTH, AS APPLICABLE). QUANTCAST MAY MODIFY THIS AGREEMENT FROM TIME TO TIME; CONTINUED USE 30 DAYS AFTER NOTIFICATION WILL CONSTITUTE ACCEPTANCE (SEE SECTION 10).
Capitalized terms not otherwise defined herein are defined in Section 14.
- Introduction: Reachpoints, Tags, and Measurement Data.
Quantcast Measure is a free digital audience measurement service that allows you to tag web pages, video, advertisements, apps, content, and paid search campaigns (what we call, “Reachpoints”) for direct measurement.
You can also define and measure actions and events by customizing your Tags with labels. You have complete control over (and are solely responsible for) which Reachpoints are tagged, how segments are labelled (e.g., with meaningful or obfuscated names), and how the resulting Measurement Results are or are not disclosed publicly.
Each time a browser visits your tagged Reachpoints, Quantcast may, in accordance with Applicable Privacy Laws, collect traffic statistics like those in any web server log (what we call, “Measurement Data”). We then apply proprietary Quantcast algorithms and other data to the Measurement Data to generate the “Measurement Results”, which we make available to you on the Quantcast website (see Section 3). For more information about how the Services work, please see our FAQ.
To measure Reachpoints that you do not own or control, you may provide your Tag to a third party who accepts this Agreement (any such third party, an “Authorized Affiliate”); you may also instruct us to give the Authorized Affiliate access to the Measurement Results.
- Registration.
In order to access the Services you must register for a Quantcast account on the Quantcast website. Each new app you Tag requires its own registration and then receives its own unique API key. In registering, you agree to provide accurate, current, and complete information, and to keep it up to date. Any processing of Personal Data when registering for a Quantcast account will be processed in accordance with the Quantcast Privacy Policy which you can access here.
You are responsible for keeping your password confidential. You hereby take responsibility for all actions taken—and instructions provided to Quantcast—under your account or with the Measurement Results, by you or any third parties, whether or not authorized. You will notify Quantcast immediately of any unauthorized or non-compliant use of your account and will cooperate with us in stopping it.
- Measurement Data and Results.
Quantcast uses each piece of Measurement Data both to understand your audience (for your benefit only) and as one of trillions of data points for predictive analytics and in determining what content and advertising to show individuals across the internet and other digital applications. You acknowledge that Quantcast may use Personal Information it receives from you to provide services to other Quantcast clients or for Quantcast’s commercial interests that may be unrelated to providing the Services to you.
Quantcast will never sell your audience (whether identified as such or not) and you control the extent to which Quantcast displays the Measurement Results.
Quantcast grants you perpetual rights to use, copy, and distribute the Measurement Results, including with our sharable widgets, only as long as you:
- Credit Us. Conspicuously include: “Source: Quantcast www.quantcast.com”;
- Present the Measurement Results Exactly as We Provided It. Do not: (i) manipulate or modify the Measurement Results to state or suggest different results from those specifically presented by Quantcast; (ii) combine information related to different Quantcast profiles (for example, by adding together the reach from two different sites instead of presenting the cross-site unduplicated reach measurement provided by Quantcast); (iii) quantitatively aggregate or combine information in the Measurement Results with information derived from other sources (but offering a comparison with information derived from other sources is permissible);
- Don’t Use Our Work to Compete with Us. Do not use the information in the Measurement Results in any way that competes with Quantcast; and
- Bind Third Parties. If you provide the information in the Measurement Results directly to any third party (rather than by having them access the information through the Quantcast website), you must ensure that they agree to be bound by and comply with the terms of this Agreement including the foregoing requirements.
- Tagging Rules and Privacy.
You agree not to misrepresent your digital traffic, audience, or user activity in connection with Quantcast, the Services, or any Tags. You agree not to tag any adware or spyware inventory, or any Reachpoint revealing precise geographic location (i.e., information that describes the precise location of a device derived through any technology that is capable of determining with reasonable specificity the actual physical location of an individual or device), specific health / medical /sex-life information, credit card or financial data, or criminal convictions or charges. In addition, if you are an EU established company or person or your Reachpoints are directed towards end users in the EU, you agree not to tag any Reachpoint revealing other sensitive or special category Personal Data, including racial or ethnic origin, political opinions or parties, religious or philosophical beliefs, or trade union membership. If you represent to Quantcast (e.g., during the signup process) that your Reachpoints are directed to users under the age of 16, Quantcast will not collect any Personal Data from such Reachpoints and you will not receive those of our services that require collection of data across different websites. You will not modify the Tag other than as described in a Quantcast Learning Center Guide. You agree to update your Tag (which may require retagging your Reachpoints) when we notify you of any Tag fixes, updates or upgrades. You will use the Tag in the top most frame possible. You will retain the Tag’s origin address that we provided, in full.
You agree to comply with Applicable Privacy Laws and also industry self-regulation Principles and Codes of Conduct for interest-based advertising in connection with your use of the Tag and the Services. You agree not to use the Services to track or collect personally identifiable information of end users. To the extent that the web pages or apps in which you place the Technology are accessed by end users in the EU, you agree to implement a transparency and consent solution compatible with the IAB Europe Transparency and Consent Framework (such as Quantcast Choice) or another solution mutually agreed by both parties in writing. While you are implementing such consent solution, you agree to (i) obtain consent for Quantcast to use cookies and similar technologies in compliance with Applicable Privacy Laws, (ii) provide proof of such consent if requested by Quantcast, and (iii) not permit calls from your web pages or apps to Quantcast servers if such consent has not be obtained. Wherever possible, you agree to name Quantcast as a party for or by whom cookies or similar technologies are used to access the device and Personal Data is collected through your webpages or apps.
You further agree to prominently display to end users a user friendly, easily accessible, clear and comprehensive privacy policy (and, if necessitated by Applicable Privacy Laws, a separate cookie policy) that, where required, complies with Applicable Privacy Laws and contains the following (a) a statement that your site or app permits data collection for interest-based advertising, (ii) a description of the types of data collected for such advertising, (iii) an explanation of the purposes for which data is collected by, or transferred to, third parties, and (iv) a conspicuous link to either an opt-out mechanism, such as the NAI or DAA opt-outs for non-EU established companies or a consent revocation page for EU established companies. If you use the Services to collect data from a network of domains or subdomains, you will inform each in advance of such disclosures.
In the case of app measurement, operating system platforms provide device-level setting options that allow end users to indicate their preference with respect to third party data collection and targeted advertising (the “Ad Preference Setting”). Quantcast treats these device level Ad Preference Settings as consumer opt-outs and you will accurately pass the Ad Preference Setting to Quantcast. You will not send any identifier associated with a device to the extent that such device has otherwise indicated that the end user wishes to be opted out of advertisement tracking.
To the extent that GDPR applies, you and Quantcast are each separate and independent data controllers of any Personal Data which you and we may disclose or receive under this Agreement. You and Quantcast, pursuant to this Agreement, do not and will not jointly determine the purposes or the means of processing of any Personal Data disclosed or received under this Agreement.
To the extent that CCPA applies, Quantcast is a Third Party in its relationship with you regarding your use of the Services.
If you are a Business subject to CCPA, you agree to prominently post a “Do Not Sell My Personal Information” link on all of your Reachpoints, and to provide consumers with the disclosures required of Businesses by CCPA.
- Restrictions.
You agree to use the Services only in accordance with the terms and conditions of this Agreement. You will not use the Service to engage in any illegal or offensive acts or serve any illegal content via any Reachpoint. You will not:
- Interfere or attempt to interfere with the operation or security-related features of the Services or the Technology;
- Delete, or in any manner alter, the copyright, trademark, or other proprietary rights notices appearing on any Quantcast Content;
- Represent that Quantcast endorses or supports your services; make any representations and warranties concerning any aspect of the Services, the Technology, or Measurement Results to any Authorized Third Parties or other third parties; or
- Attempt to index, scrape, search, or crawl the Services or the Quantcast website with any automated process; or attempt to access any information or technology relating to the Services, the Quantcast website, or our proprietary algorithms through any means not intentionally made available by Quantcast to you.
- Quantcast Rights.
All right, title, and interest, including intellectual property rights, in and to the Quantcast website, the Services, the Technology, and the Quantcast Content are and will remain the exclusive property of Quantcast (“Quantcast Property”). Except as expressly permitted in this Agreement, you will not reproduce, modify, or prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, or use such Quantcast Property. In the event that your Quantcast account is suspended or terminated, Quantcast will continue to respect this Agreement’s limits on our use of the Measurement Data and will cease all public display of the Measurement Results.
Quantcast servers may choose to occasionally respond to any publisher’s Tag by redirecting the browser to a third-party anonymous beacon to support the provision of Quantcast services in market. The decision to beacon is not related to you, your traffic, or your user base.
- Indemnity.
Quantcast agrees to defend, indemnify, and hold you harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim that the Technology or the Services infringe any U.S. or European intellectual property rights, provided that you (i) promptly inform and furnish Quantcast with a copy of each related communication and action, (ii) allow Quantcast to assume full control of the defense and settlement, and (iii) assist and cooperate with Quantcast, at Quantcast’s expense. Quantcast will have no obligation or liability hereunder where the claim results from any combination with, addition to, or modification of the Services or the Technology, from your failure to update your Tag, from your or any Authorized Affiliate breach of this Agreement, or from failure to obtain consent for your and our use of cookies or other tracking technology in accordance with Applicable Privacy Laws. If the Services or Technology become, or, in Quantcast’s opinion are likely to become, the subject of a third-party claim against you, Quantcast may, at its option and expense, procure rights for you to continue using the Services or the Technology, replace or modify the same so that it performs substantially similar functions but does not infringe, or terminate this Agreement. The foregoing states the sole and exclusive liability of Quantcast and your sole remedy with respect to third party claims of any kind.
You agree to indemnify and hold Quantcast harmless from any judgments, damages, loss, liability, or costs (including reasonable attorneys’ fees) resulting from a third-party claim resulting from your failure to update your Tag when we notify you of any Tag fixes, updates or upgrades.
- Warranty Disclaimer.
The services and related information are provided “as is,” without warranty or condition of any kind, either express or implied. Without limiting the foregoing, Quantcast explicitly disclaims any warranties of merchantability, fitness for a particular purpose, quiet enjoyment, or non-infringement. Quantcast makes no warranty that the Services, the Quantcast website, or the Quantcast content will (1) meet your requirements, (2) be available on an uninterrupted, secure, or error-free basis, or (3) not cause any latency or processing delays. Quantcast is under no obligation to retain any Measurement Data or to keep the site up and running for any period of time. Quantcast makes no warranty regarding the accuracy, timeliness, truthfulness, completeness, or reliability of any information obtained through the Services, the Quantcast website, or the Quantcast content. No information, whether oral or written, will create any warranty or representation not expressly made herein. The foregoing exclusions and disclaimers are an essential part of this Agreement and formed a basis for enabling Quantcast to offer the Services to you. Some jurisdictions do not allow exclusion of certain warranties so this disclaimer may not apply to you in full.
- Suspension and Termination.
Unless otherwise terminated as set forth herein, this Agreement will remain in full force and effect while you use the Services. You may terminate your Quantcast account and this Agreement at any time by both (i) “dequantifying” by deleting all Reachpoints from your profile on the Quantcast website (or, alternatively, by emailing contact@quantcast.com (if you are resident in the US) or contact.dublin@quantcast.com (if you are resident outside the US) with your complete account information and explicit request to terminate) and (ii) removing the Tags from all of your Reachpoints. Quantcast may terminate or suspend your access to the Services or terminate this Agreement at any time, for any reason or no reason and without any liability to you. Upon termination, all licenses and other rights granted to you under this Agreement will immediately cease. Quantcast will not be liable to you or any third party for termination of this Agreement (whether by Quantcast or by you) or any termination or suspension of your use of the Services. Upon any termination or suspension, information in connection with your account may no longer be accessed by you. Notwithstanding the above, Sections 4 through 9, Sections 11 through 13, and the second paragraph of Section 3 will survive termination.
- Modification of the Service and of the Terms.
Quantcast reserves the right, in its sole discretion, to modify or discontinue the Quantcast website and Services without notice. Quantcast may also modify this Agreement from time to time. If the modified Agreement is not acceptable to you, you may terminate your account within 30 days by following the two-step procedure described in Section 9. Use of the Quantcast website, use of any Tag to contact Quantcast’s servers, or use of the Services, after 30 days, will constitute your acceptance thereof.
- Limitation of Liability.
In no event will Quantcast be liable to you or any third party for any consequential loss, exemplary damages, incidental loss, special damages or loss, lost profit, loss or deletion of Measurement Data or Measurement Results, or punitive damages arising from your use of the Services, even if Quantcast has been advised of the possibility of such damages. These limitations formed a basis for enabling Quantcast to offer these Services to you. This paragraph will apply regardless of any failure of the exclusive remedy provided in the following paragraph.
Except with regard to Quantcast’s obligations under Section 7, liability stemming from death or personal injury resulting from Quantcast’s negligence, or Quantcast’s fraud, notwithstanding anything to the contrary contained herein, Quantcast’s liability to you for any cause whatsoever and regardless of the form of the action, will at all times be limited to two hundred fifty U.S. dollars (US$250.00).
- Miscellaneous.
This Agreement constitutes the entire Agreement between the parties with respect to the Services and supersedes all previous and contemporaneous agreements, proposals, and communications, written or oral between Quantcast and you with respect thereto. Any agreements regarding the delivery or use of advertising segments will govern the parties’ relationship in connection with the applicable segments but will not affect the parties’ rights, restrictions, or obligations under this Agreement, which the parties acknowledge as separate subject matter. Any waiver by either party of any violation of this Agreement will not be deemed to waive any further or future violation of the same or any other provision. If any parts or provisions of this Agreement are held to be unenforceable, then you and Quantcast agree that such parts or provisions will be given maximum permissible force and effect and the remainder of the Agreement will be fully enforceable. You and Quantcast agree that there are no third party beneficiaries of any promises, obligations or representations made by Quantcast. Either Party may assign its rights, data, and duties, under this Agreement in their entirety in connection with a sale of all (or substantially all) of its assets relating to this Agreement, a merger, or a reorganization. Nothing in this Agreement will constitute a partnership or joint venture or joint controllership between you and Quantcast. This Agreement and any dispute relating to this Agreement will be governed by the laws of the United States and the laws of the State of California, without regard to U.S. or California choice of law rules. You and Quantcast agree and consent that jurisdiction, proper venue, and the most convenient forums for all claims, actions, and proceedings of any kind relating to Quantcast or the matters in this Agreement will be exclusively in courts located in San Francisco, California. This Agreement is drafted in the English language. Any translation into another language is provided for convenience only. In the event of any inconsistency between the English language version and any translation, the English language version shall prevail.
- Notice.
All notices or other communications to Quantcast from you will be deemed given only when received by hand delivery, electronic mail, or prepaid first class mail, at the address below or any other address provided by Quantcast to you for these purposes:
Persons in the United States, please contact:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Attn: Legal Department
Email: contact@quantcast.com
Persons outside of the United States, please contact:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street, 1st Floor
Dublin 2, Ireland
Attn: Legal Department
Email: contact.dublin@quantcast.com
- Definitions
“Applicable Privacy Laws” means any applicable privacy or data protection laws, statutes or regulations as may be amended, extended or re-enacted from time to time, including, where applicable, (a) the EU General Data Protection Regulation 2016/679 (“GDPR”) and any EU Member State laws implementing GDPR; (b) the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. (“CCPA”); and; (c) the e-Privacy Directive 2002/58/EC, as amended and as transposed into EU Member State law and any legislation replacing the e-Privacy Directive.
“Authorized Affiliate” means a third party that you allow to use your Tag, your account, or the Measurement Results.
“Business” has the same meaning as in CCPA.
“Measurement Data” has the meaning given to it in Section 1.
“Measurement Results” has the meaning defined in Section 1.
“Personal Data” has the same meaning as in GDPR.
“Personal Information” has the same meaning as in CCPA.
“Quantcast Content” means the content of the Quantcast website and the Services, including the Measurement Data and Measurement Results.
“Quantcast Property” has the meaning given to it in Section 6.
“Reachpoint” has the meaning given to it in Section 1.
“Services” means Quantcast Measurement: the digital audience ratings service that allows you (or an Authorized Affiliate) to define and measure specific online events by tagging Reachpoints, as described herein and as governed by these terms and conditions.
“Tag” means the particular javascript or other audience measurement code or software development kit provided to you by Quantcast, which allows Quantcast to set a cookie and embeddable on web pages, media files, and other Reachpoints, together with any labels and any fixes, updates, and upgrades provided to you.
“Technology” means, separately and collectively, the Tags, and Quantcast’s proprietary technology that generates the Measurement Results.
“Third Party” has the same meaning as in CCPA.
- Contracting Party.
If you reside in the US this Agreement is between you and Quantcast Corporation. If you reside outside of the US, this Agreement is between you and Quantcast International Limited, an Irish limited liability company. References to “Quantcast”, “us”, “we” and “our” mean either Quantcast Corporation or Quantcast International Limited as appropriate.
US Data Privacy Addendum
Effective August 28th 2023
DownloadTable of Contents
Effective Date: May 16, 2023
This US Data Privacy Addendum (this “Addendum”) entered into by Customer and Quantcast (each, a “Party” and collectively, the “Parties”), governs the Processing of Personal Information that Customer transmits or otherwise makes available to Quantcast in connection with the delivery of Quantcast’s services (“Services”).
This Addendum is incorporated into the relevant Quantcast services agreement executed by the Parties (the “Agreement”). This Addendum reflects the Parties’ agreement with respect to the Processing of Personal Information pursuant to the Agreement and is applicable solely to the extent that the US State Privacy Laws apply.
In the event of any inconsistency between the terms of the Agreement and this Addendum, the terms of this Addendum shall prevail.
1. Definitions. Capitalized terms used in this Addendum that are not defined herein shall have the same meaning as set forth in the Agreement.
1.1. “Consumer” means a natural person to whom Personal Information relates.
1.2. “Consumer Rights Request” means a request made by a Consumer to exercise his or her rights under the US State Privacy Laws in relation to Personal Information.
1.3. “Controller” means the party that alone or jointly with others determines the purpose and means of the Processing of Personal Information.
1.4. “Personal Information” means any information relating to a Consumer that is subject to protection under the US State Privacy Laws and includes information that is referred to as “personal data” and similar terms as may be defined in the US State Privacy Laws.
1.5. “Processor” means the party that Processes Personal Information on behalf of the Controller.
1.6. “Subprocessor” means a party engaged by Quantcast in the Processing of the Customer Personal Information on Customer’s behalf.
1.7. “US State Privacy Laws” means privacy laws, regulations, or guidance applicable to the Processing of Personal Information in any relevant jurisdiction, including the California Consumer Privacy Act, as amended, including by the California Privacy Rights Act and implementing regulations (“CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Act Concerning Protection and Online Monitoring (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), and any other similar applicable laws that are in effect or come into effect during the term of the Agreement.
1.8. The terms “Business,” “Process,” “Sale” (or “Sell”), “Service Provider,” “Share,” and “Third Party” have the meanings ascribed to them in the CCPA.
2. Quantcast as a Third Party.
2.1. Role of Quantcast. The Parties acknowledge and agree that with regard to the Personal Information that Customer makes available to Quantcast through the Tag pursuant to the Agreement and any Personal Information included in the Customer Data (the “Disclosed Personal Information”), Quantcast is a Third Party. In its role as a Third Party, Quantcast shall comply with the obligations that apply to it under the US State Privacy Laws (including with respect to the Disclosed Personal Information) and provide the Disclosed Personal Information the level of privacy protection required by such laws. In the event that Quantcast determines that it can no longer meet its obligations under the US State Privacy Laws with respect to the Disclosed Personal Information, it shall take commercially reasonable steps to notify Customer.
2.2. Processing of the Disclosed Personal Information. Customer makes the Disclosed Personal Information available to Quantcast for the limited and specified purpose of providing Customer with access to Quantcast’s platform and the Services and as otherwise described in the Agreement. Quantcast shall not Process the Disclosed Personal Information for any other purpose unless such Processing is explicitly permitted or required by the US State Privacy Laws or other applicable law.
2.3. Data Security. Quantcast shall maintain technical and organizational measures designed to protect the Disclosed Personal Information against any breach of security leading to the accidental or unlawful destruction, use, loss, alteration, unauthorized disclosure of, or access to the Disclosed Personal Information.
2.4. Consumer Rights Requests. In accordance with the US State Privacy Laws, Customer shall notify Quantcast in writing or through other methods agreed upon by the Parties of all Consumer Rights Requests it receives relating to the Disclosed Personal Information with which Quantcast must comply (including deletion and opt-out requests).
2.5. Compliance Verification. At reasonable intervals during the term of the Agreement not to exceed more than once in a given twelve (12) month period, Quantcast shall, upon written request, make available to Customer information or documentation necessary to demonstrate its compliance with its obligations under this Addendum with respect to the Disclosed Personal Information. In the event that the information or documentation provided by Quantcast reveals any unauthorized use of the Disclosed Personal Information, Customer and Quantcast shall promptly work together in good faith to agree upon reasonable and appropriate steps to stop and remediate the unauthorized use.
3. Modifications. The Parties agree to cooperate in good faith to amend the terms of this Addendum and/or enter into additional terms as necessary to address modifications, amendments, or updates to the US State Privacy Laws.
Key Terms
Effective June 11th 2024
DownloadTable of Contents
Key Terms
Effective: June 6 2024
Capitalized terms that are not defined in these Key Terms are as defined in the Quantcast Products and Services Privacy Policy. These Key Terms are for use in understanding the Quantcast Products and Services Privacy Policy. Nothing in these Key Terms modifies any active agreement with any Quantcast customer, vendor or other business partner (e.g., agreements for the Advertise and Measure product, etc.).
Advertising Exchange
See Exchange/Advertising Exchange.
Attributes/Attribute Information
Attributes are known, observed, or inferred characteristics. Examples of attributes are “male” and “visited XYZ website”. Attributes may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data. Quantcast associates attributes with Pseudonymous Identifiers.
Audience
An Audience is a group of devices and/or users who are known to or are estimated to have certain common characteristics. A characteristic in common may be an Interest, such as an interest in cooking. A characteristic in common may be an Attribute, such as being male, visited a particular digital property, or viewed or interacted with a particular advertisement. One type of Audience is a group who have visited a Quantcast Client’s digital property. Another type of Audience is a group who have been shown, or may potentially be shown, a Quantcast Client’s advertisement.
Audience Insights
Audience Insights are data collected, or data that is inferred from data collected, about an Audience. Audience Insights are aggregated, anonymised data and are not Personal Information. An example of an Audience Insight is a report that a given audience is estimated to be 70% male and 3 times as likely to be interested in cooking compared to the general population.
Quantcast provides Audience Insights based on Event Data, Bid Request Data, Client Data, Third Party Data, and Inferred Data to Quantcast Clients. Audience Insights enable Quantcast Clients to better understand the audiences who engage with their content and ads.
Bid Request/Bid Request Data
A Bid Request is a request by a digital content publisher (e.g., website owner, app developer, streaming content provider, etc.) for an offer to place an ad in the publisher’s digital content. For example, when you visit an ad-supported web page, Bid Requests are sent by, or on behalf of, the publisher of the web page to multiple parties that may want to show an ad to you. Those parties can bid for the opportunity to show an ad in an auction, and an ad is selected to show on the page. Bid Requests typically go through an Advertising Exchange. This all happens via digital communication between computer servers in less than a second. The contents of the Bid Request may include information about the ad unit (the container in the digital content that will display the ad), the digital content, the device it will be seen on, and your engagement with the publisher’s digital content, so that prospective buyers can choose whether to bid and how much. For most cases, the contents of the Bid Request are defined by the OpenRTB industry standard (https://iabtechlab.com/standards/openrtb/), though not all fields are necessarily included in every Bid Request. Bid Request Data consists of data provided in the Bid Request and will commonly consist of one or more Pseudonymous Identifiers (if available), the content that the ad would serve in (such as the web page, app, video, etc.), the type of device the ad would be served on (i.e., your device type), the approximate geographic location of your device, the size of the ad, the auction ID, and consent information, such as TCF Signals. Bid Request Data also includes Quantcast’s response to the Bid Request, such as whether a Quantcast Client bid on the ad opportunity.
Browsing Data
Browsing Data is information collected relating to your Online activity or behaviour. Browsing Data is generated when a Pixels, Tags, or SDKs installed by a Quantcast Client on its digital property loads and sends information to us. This includes the website URL of the page you are visiting, often along with a Pseudonymous Identifier, as well as fields of information that may be automatically included from HTTP Header Information, such as referral URLs (which is the URL that directed your browser to the website where an advertisement was served to you).
Browsing Data is included in Event Data.
Client Data
Client Data is Imported Data that is uploaded to the Quantcast platform by a particular Quantcast advertiser Client for use on its behalf. Client Data is Pseudonymised Information, which defines groups of users. These groups might typically be based on users’ Online Data or Offline Data, or other characteristics or aspects of users’ relationship with the Quantcast Client. The groups are then used by Quantcast to help deliver advertising campaigns to the right Audiences and assess their effectiveness, all on behalf of the Quantcast Client.
Cookie
A Cookie is a small bit of text that is sent to and saved on your computer or device when you visit a website. A Cookie is associated with a single web browser profile; each web browser and browser profile that you use on your device will have separate Cookies. Cookies allow a website to recognise a browser and are commonly used to store user preferences or identifiers, which enables us to collect and use information about browsers over time and across different internet content. Cookies enable us to understand more about users and the content they are visiting over time, which in turn can be used to improve our Quantcast Clients’ advertising activities and the quality of advertising you experience. The identifiers we store in Cookies are Pseudonymous Information; in other words, they cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link a Pseudonymous Identifier to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers or Pseudonymous Information from doing the same. Browsers have controls that enable users to clear or block Cookies. See your browser help for details.
There are two forms of cookies: First Party Cookies and Third Party Cookies.
A “First Party Cookie” is limited in scope to a particular website you visit (“First Party Cookie”). In some instances, Quantcast is able to store or access information in a First Party Cookie. If www.example.com incorporates Quantcast Pixels, Tags or SDKs into their website, and if you visit www.example.com, Quantcast may set a First-Party Cookie associated with www.example.com. In these instances, Quantcast can store a Pseudonymous Identifier in the First-Party Cookie, but because it is a First Party Cookie, Quantcast can only access that Pseudonymous Identifier in the context of your visits to that site.
A “Third Party Cookie” is a cookie associated with an internet domain that is different from the one you are visiting. For example, if you are visiting www.example.com and a Quantcast Pixel, Tag or SDK on that website is able to set a cookie associated with quantcast.com, that is a Third Party Cookie. That same cookie will be accessible to Quantcast on other sites that also incorporate Quantcast Pixels, Tags or SDKs. Quantcast uses
Pseudonymous Identifiers stored in Third Party Cookies in order to collect information across multiple websites.
Quantcast Cookies placed on your device have a maximum expiry period of 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). Each time you visit a website and a First or Third Party Cookie is placed on your device, the placement of a Cookie begins a new expiry period of up to 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). All Quantcast Cookies automatically cease providing any data to Quantcast from your browser upon expiration.
Cookie ID/Identifier
A Cookie ID is a unique string of characters that we store in a Cookie that allows us to identify a single web browser instance over time and across different web sites. Our Cookie IDs are Pseudonymous Identifiers. A First Party Cookie ID is a unique Pseudonymous Identifier relating to the First-Party Cookie set by the owner of the website you are visiting. A Third Party Cookie ID is a unique Pseudonymous Identifier relating to the Third-Party Cookie set by Quantcast.
Cookie Syncing/Matching
In the online advertising industry, Cookie Syncing/Matching generally refers to a process through which two entities who each, and separately, identify a device using their own Pseudonymous Identifier can determine which of their respective Pseudonymous Identifiers may relate to the same device. For example, Quantcast may pseudonymously identify a device as “cookie ID 123.” Company B may pseudonymously identify the same device as “cookie ID ABC.” Cookie Syncing/Matching enables Quantcast and Company B to recognise that their respective Pseudonymous identifiers may relate to the device that Quantcast records as “cookie ID 123”.
Quantcast’s Cookie Syncing activities work similarly. If you visit a website that incorporates Pixels, Tags or SDKs from Quantcast, Company B may match its own pseudonymous identifiers to Quantcast Pseudonymous Identifiers (this creates a record of matching pseudonymous identifiers for Company B). Once a match is established, Company B can reference a particular device when communicating with Quantcast, using Quantcast’s Pseudonymous Identifier.
The Cookie Syncing/Matching process does not in itself result in Quantcast sharing Attributes related to Quantcast Pseudonymous Identifiers with Company B. The Cookie Syncing/Matching enables transactions between the parties at a later time; for example, in the case of an Advertising Exchange sending a Bid Request, the Bid Request can contain a previously synched Pseudonymous Identifier.
Cross-Media Matching/Linking
In the online advertising industry, Cross-Media Matching generally refers to a process through which Quantcast links identifiers across a user’s consumption of various media (e.g. audio, video, websites, apps, etc) because such identifiers are known to or Inferred to relate to the same user. Matching/Linking may be undertaken for consumption of media on a single device and for consumption of media on more than one device. As an example, if you visit a digital property using your mobile phone and later visit that same digital property using a browser on your laptop or make visits to several different digital properties using a browser over a period of time, Quantcast may initially determine that these visits are made by different users and assign each device user their own profile.
If, however, Quantcast finds there is sufficient commonality between the Pseudonymous Identifiers associated with the consumption of media, Quantcast will assess that those identifiers may be joined as they are likely to emanate from the same user. This assessment is“probabilistic”– in other words, it uses statistical techniques to determine that the identifiers to be matched have a higher likelihood of relating to the same device and/or user.
Data Management Platforms and Data Providers
Data Management Platforms and Data Providers provide Third Party Data to Quantcast, or provide a platform through which Quantcast Clients can provide Client Data to Quantcast. These companies either directly licence first and third party Audience Segment Data from different sources (such as Online Data and Offline Data) to businesses or provide a platform through which Quantcast Clients can collect, organise, and activate such data for Quantcast’s use in connection with the Solutions. We share Pseudonymous Identifiers with Data Management Platforms/Data Providers in order to sync/match identifiers to effectively integrate with their services (see Cookie Syncing/Matching).
Device ID/Identifier
A unique string of characters that can be used to identify a device set by the developer of the device’s operating system (e.g., a mobile phone, tablet, TV, or console). Device Identifiers (or “Device IDs”) serve a similar purpose as Cookies and can be used to provide personalised advertising. A Device ID is a Pseudonymous Identifier.
A Mobile Advertising ID (or “MAID”) is a Device ID assigned to a mobile device or connected TV (“CTV”) device by the device operating system. Typically, the device user can reset or turn off the ID via the device’s settings. A MAID is referred to as the IDFA (ID for Advertisers) on iOS devices and GAID (Google Ad ID) on Android mobile devices.
Device Configuration/Device Information
Information about a device or its configuration, transmitted from the device, and typically associated with a Pseudonymous Identifier. The information includes browser, app, or other information about the device (such as device type, screen size and resolution, date and time, and language), which also may include a User Agent. Some Device Information is derived from HTTP Request Header Information.
Email Address
See Hashed Email Address
Event Data
Information collected relating to your Online activity/behaviour, which may include Personal Information in Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, Browsing Data and TCF Signals. Event Data is generated when a Pixel, Tag, or SDK installed on a Quantcast Client’s digital property loads and sends information to us. Event Data can also be collected from ads, when you view or click on an ad which contains a Tag.
Exchange/Advertising Exchange
A marketplace platform that facilitates automated, real-time, auction-based buying and selling of ad inventory (which are spaces available on sites and apps to display ads). An Advertising Exchange receives Bid Requests from digital publishers and forwards them to advertisers, or to entities like Quantcast who act on behalf of advertisers. Advertisers, or their agents, respond to Bid Requests with a bid amount and an advertisement to provide to a user if they win the auction.
First Party Cookie
See Cookie.
Hashed Email Address
A hashed email address (HEM) is an email address that has been encoded using a cryptographic hashing function. A hashed email is treated as a Pseudonymous Identifier.
HTTP Request Header Information
HTTP headers are defined by internet standards and contain a number of data fields designed to facilitate communication and interoperability on the internet. On the web, your web browser controls which headers are sent and what the contents are. We receive the headers when a request is sent over the internet to our system, such as when a Pixel loads in your web browser. We also might receive information that has been derived from the HTTP headers from another party, such as in a Bid Request. We use a subset of the header fields for purposes described in the Privacy Policy, which includes:
- IP Address
- Cookie (if available)
- User Agent, which is a string (a line of text) identifying the device type, browser type, and version that the user is using to access the web server (“User Agent”)
- Date, which includes the precise time of access
- Referral URL, which is the web page you were on when the request was sent
- TLS Session ID, which identifies a particular session of communication between the browser and the server
- Content-Language, which is the languages of the intended audience for the enclosed content
Detailed documentation related to HTTP header information can be found online in a general search for “HTTP header information fields”.
IAB Transparency & Consent Framework (“TCF”)
The IAB Transparency & Consent Framework, or “TCF,” is a standardised industry program active in countries governed by the GDPR, and designed for notifying users about data Processing by companies involved in digital advertising on sites and apps that users visit, and for establishing a legal basis for that Processing.
The TCF is designed to be used on digital properties, such as websites and apps. The TCF incorporates a consent dialog that displays when users visit a website or app, giving them information about vendors, the data they collect, and the purposes for which they collect it. It also offers an opportunity for users to give or change their permissions for such data collection and use.
The TCF allows Quantcast to work with publishers of websites and other digital properties in a consistent manner using standardised technical specifications to:
(a) provide a link to Quantcast's Privacy Policy, as well as transparency about Quantcast's Processing of Personal Information, the specific purposes for which Quantcast Processes Personal Information, and Quantcast's legal basis for such Processing, directly on the website or other digital property accessed by the user;
(b) allow the user, in a granular manner, to express their consent or refusal to consent, to Quantcast's (i) use of Cookies, and (ii) the purposes of Quantcast's Processing, which are the reasons why Quantcast Processes the personal data of users (“TCF Purposes”), including where Quantcast relies on the user’s consent for such Processing directly on the website or other digital property that the user is accessing;
(c) allow the user to object to Quantcast's Processing of Personal Information (for purposes where Quantcast relies on legitimate interests) directly on the website or other digital property accessed by the user.
Using the TCF allows publishers of websites or other digital properties to provide information about Quantcast’s Processing to users in a consistent manner. The user-facing disclosures presented by these digital properties are sourced from information that Quantcast has registered with the TCF's “Global Vendor List”, a publicly accessible, machine-readable repository of information about TCF-compliant vendors, like Quantcast. This information includes Quantcast’s Privacy Policy URL, the purposes for which it Processes Personal Information, and its legal basis for each of these purposes. As the description of these purposes and minimum standards for disclosures are standardised across all TCF participants, Quantcast knows how operators of websites or other digital properties using the TCF are making disclosures about Quantcast and can have confidence in such disclosures.
In addition, the TCF enables publishers of websites or other digital properties to create and send to Quantcast a standardised technical signal that indicates (A) whether Quantcast’s transparency disclosures were provided to a user; (B) whether or not the user has consented to Quantcast’s Processing and/or each purpose for which Quantcast sought the user's consent; and (c) whether the user objected to Quantcast’s Processing and/or any purposes for which Quantcast Processes Personal Information on the basis of its legitimate interests (the “TCF Signal”).
TCF Signal is collected via Quantcast Tags if the digital property on which the Tag is implemented has also implemented a TCF-compatible Consent Management Platform, which is a company or organisation that centralises and manages transparency for, and consent and objections of, the user (“CMP”) . In addition, TCF Signal is received by Quantcast as part of the Bid Requests it receives from Advertising Exchanges. Quantcast is able to read the standardised TCF Signal and will only Process Personal Information for purposes to which the user has consented (where consent is the legal basis) or not objected (where legitimate interests is the legal basis) in order to provide the Solutions.
Read more about the TCF here https://iabeurope.eu/transparency-consent-framework/
Imported Data
Imported Data is uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”). Imported Data is Pseudonymised Information, which may include information relating to your Online data or Offline data or other information that Quantcast Clients or partners have about you. For examples of Imported Data provided to Quantcast, see Client Data or Third Party Data.
Imported Data (Client)
See Client Data.
Imported Data (Third Party/Segment)
See Third Party Data.
Imprecise/Approximate Location Information
Typically, in digital advertising we distinguish between precise and imprecise geolocation information.
Precise geolocation usually comes from GPS coordinates from mobile devices, and can have precision up to about one meter. Quantcast does not use precise geolocation data and we request that Quantcast Clients, partners, and third parties refrain from sending precise geolocation to us. If a party inadvertently sends it, we do not use it in the Solutions and it is removed from our systems within 30 days.
Imprecise geolocation is lower precision, and refers to a general geographic area, for example a country, region, city or division of a metropolitan area, and/or some combination of these, and is often derived from IP Addresses.
Inferences/Inferred Data
Inferences, or Inferred Data, is information that is inferred from data that we have collected about a device, such as Event Data, Bid Request Data, Client Data, or Third Party Data. Our inferences are made using algorithms that estimate the likelihood that the user of a device has particular interests or characteristics. The Inferences are then associated with a Pseudonymous Identifier as part of a set of device Attributes.
For example, if a device frequently visits sports websites, it might be inferred that there is some probability the user of that device likes sports. Similarly, if a device frequently visits an airline provider’s website, it might be inferred that there is some probability a user of that device likes to travel. Other Inferences include things such as Interests, income range, gender, age, marital status, and other socio-economic information.
Inferences associated with any individual device have a high degree of uncertainty. Inferences become more accurate when used to estimate the characteristics of a large group of devices, like an Audience.
Interests
Interests are known, observed, or inferred non-demographic characteristics. Interests are associated with Pseudonymous Identifiers to characterise particular interests of users. Examples of Interests include “cooking” and “outdoor activities”. Interests may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data.
IP Address
An IP (“Internet Protocol”) Address is a unique numerical label corresponding to a computer or device. Computers use IP Addresses to identify each other and know where to send information over the Internet. For example, when you open a web page in your browser a request is made to a server for the web page content. The server knows where to send the content based on the IP Address contained in the request. Computers or other devices are assigned an IP Address from the network the device is on. A device’s IP Address may change over time or as a device changes locations. Also, an IP Address can refer to multiple devices, for example if the devices are behind an internet router.
Labels/Label Data
Labels, or Label Data, are descriptors associated with Pseudonymous Identifiers to denote particular groups of users that can be subsequently used to index all Pseudonymous Identifiers associated with that label. An analogy would be applying a “label” to messages in an email inbox - you might decide to label messages from work as “Work,” family members as “Family,” and so on. These labels then help you readily index and recall particular categories of email.
Labels processed by Quantcast are:
- Labels from Data Management Platforms and Data Providers : these are category Labels (e.g., male, female, age 21-24) acquired from third party data partners relating to a Pseudonymous Identifier;
- Custom-Client Data Labels: these are custom category labels set by Quantcast Clients corresponding to a device associated with the identifier visiting their digital property (e.g., byline of the news article accessed by the user) or product name (of the product accessed by the user).
- Inferred Data Labels: these are inferred category Labels about a user using a device associated with a Pseudonymous Identifier, e.g., inferred age, inferred gender, inferred interest.
Example Labels are “male” and “visited XYZ website”. Labels may be inferred information (see Inferences/Inferred Data) or may be Imported Data (see Client Data and Third Party Data).
Log Data
Log Data is an industry term that is generally used to refer to data collected from interactions with computer systems, and is used differently by different companies. For purposes of describing our Processing, we use more precise terms, such as Pseudonymous Identifiers, Event Data, Bid Request Data, Client Data, Third Party Data, and/or Inferences/Inferred Data, which are all types of data that can be subsumed within the general industry term “Log Data.” Some elements within Log Data, when isolated from the Pseudonymous Identifiers, will not qualify as Personal Information. For example, a single time zone and publisher URL without an associated Pseudonymous Identifier would not qualify as Personal Information.
Online Data
Data relating to a user’s interaction with digital media including websites, apps and streaming media services.
Offline Data
Data relating to a user’s real-world purchases and/or activity.
Panel
A Panel is a set of individuals who have consented to participate in market research and share information about themselves, their preferences and interests for purposes of research and market analytics.
This information can then be used as the basis for learning or making inferences about a larger population. For example, if a number of people on a Panel share that they visit a particular news website, and of those people, most of them are male and over the age of 50, we might extrapolate from that and say that most of the audience for that website is male and over 50.
Another way to use Panel data is to compare Panel results to the estimates that we have made using our algorithms in order to score the effectiveness of our algorithms. So, if our algorithm predicted for the same news website that most of the audience is under 30, we would learn that our algorithm might be wrong.
Personal Information
Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you, your browser, or your device. We use the term “personal information” to refer to information that is subject to protection under data protection and privacy laws and regulatory regimes around the world. Depending on the jurisdiction, such information may be referred to as “personal data.”
The Personal Information Processed by Quantcast is limited to Pseudonymised Identifiers Quantcast does not Process Personal Information that directly identifies you as an individual, and that can be used to directly identify you without technical efforts to add additional information, which Quantcast does not have.
Pixels, Tags, and SDKs
Pixels, Tags, and SDKs are computer code embedded in a website, mobile applications, and advertisements that we use to enable the Solutions. We tend to use the terms Pixels, Tags, and SDKs interchangeably. Quantcast Clients that use the Solutions can put them on their sites, in their apps, or in their ads in order to send us information that is then used in the Solutions. When a Pixel, Tag, or SDK loads and calls our servers, we receive HTTP Header Information, along with other information that is configured by the Quantcast Client who is using the Solutions. That information includes IDs from partners, so we know which partner the data is coming from.
Pixels, Tags, and SDKs include:
- Sync Pixels: These are used to exchange and match Pseudonymous Identifiers between companies that participate in the digital advertising market. By matching, they can synchronise these identifiers to deliver and measure ads.
- Tags or Pixels in ads: When a digital ad loads on a page, it can include a Tag or Pixel that we use on behalf of Quantcast Clients to gather information about where and when the ad was served. This can help to measure ad performance, to ensure ads are shown where intended, and to learn in order to improve ad effectiveness.
- Tags or Pixels on publisher Clients’ web pages: For publisher Clients that use the Solutions, they can put our Tags on their sites. The information we collect then enables the Client to learn about their audience, and it enables us to build models for better targeting ads.
- Tags or Pixels used by advertiser Clients: When advertiser Clients use our Tags or Pixels, they send us information so we can learn about their customers in order to help them better target their ads.
- SDKs: SDKs are bits of computer code that mobile app publisher Clients incorporate into their apps, enabling them to send us information. Similar to Pixels or Tags, the information enables us to offer the Solutions as described in our Privacy Policy.
Probabilistic Identifier
A Probabilistic Identifier is a Pseudonymous Identifier which we create by combining Pseudonymous Identifiers (such as IP Addresses) with Bid Request Data and/or Event Data using non-deterministic, statistical methods to estimate the likelihood that a group of devices may be used by the same user or household, if applicable law or rules allow. For example, we might be able to determine that because a mobile phone and a TV are on the same network, they are likely in the same house. We can then use that information to select and measure ads. Unlike using Cookie IDs, this approach is not 100% accurate and could identify one or many devices.
Process
Refers to any operation or set of operations performed upon Personal Information or sets of Personal Information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Pseudonymous Identifiers
Pseudonymous Identifiers are unique values that distinguish your browser profile(s) or device(s). Pseudonymous Identifiers cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link Pseudonymous Identifiers to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers from doing the same.
Pseudonymous Identifiers are important in digital advertising because they help distinguish browsers or devices over time across different contexts. This is useful for example, to limit the number of times that we show the same ad to one device, to measure the performance of ads, and to target and select personalised ads.
We may incorporate any one of the following types of information in a Quantcast Pseudonymous Identifier:
- Third Party Cookie ID: see Cookie ID.
- First Party Cookie ID: see Cookie ID.
- IP Addresses.
- Hashed email addresses
- Third party identifiers
- Device ID.
- Application ID: an ID that is unique to your mobile device and a particular app on your device.
- Application Session ID: like an application ID, except that it is reset periodically (e.g., many browsers reset these after 30 minutes of inactivity).
- Exchange User ID: an ID that is sent to us with a Bid Request that identifies the device or browser where an ad is to be shown.
- Probabilistic Identifier.
- Publisher User ID: digital publishers that use the Solutions can send us an ID to use in the Solutions. The digital publisher hashes or encrypts an identifier available to it. The resulting ID is pseudonymous because it does not directly identify you, but it would be consistent across different publishers, so the Publisher User ID can be used to match data.
- TLS Session ID: when you visit a website URL that starts with “https” instead of “http”, that means you have an encrypted connection between your browser and the site. If one of our Pixels, Tags or SDKs loads on the site, that call to our server will also be encrypted. The Session ID identifies a particular session of communication between the browser and the server.
Pseudonymous/Pseudonymised Information
Pseudonymised Information is Personal Information that has been Processed in such a manner that the information can no longer be attributed to a specific user without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal information is not attributed to a specific user.
Segment Data
Segment Data is imported data that is uploaded to the Quantcast platform or provided to us via an API by Clients or Third Party Data Partners. Segment Data is Pseudonymised Information, which may include Online Data and/or Offline Data as well as Attributes, Inferences, or Interests inferred from that data. This category of information is typically called “Segment Data” because it identifies groups of users who fall into advertising segments (e.g., “auto buyers,” “shoe shoppers,” or “women 25-35”). These segments represent groups of users that share (or that are inferred to share) one or more certain characteristics in common (e.g., a client may want to advertise to a segment of “male shoppers who are interested in sports fashion”). These groupings are created by using the intersection of different segments (in the example given, an audience that is simultaneously in the “male”, “shopper”, and “sports fashion” segments). A segment may be identified with a Label (in which case it is referred to as “Label Data”).
Software Development Kit (SDK)
Tag
TCF
See IAB Transparency & Consent Framework.
TCF Purpose/Special Purpose/Feature/Special Feature
The TCF has standardised certain Purposes, Special Purposes, Features and Special Features and the descriptions of data processing activity in the digital advertising industry. Through this standardisation, the digital advertising industry can ascribe consistent meanings for the permissions that data subjects give via the TCF. This also ensures a consistent experience for users because they then do not have to read and understand an entirely different set of Purposes, Special Purposes, Features, and Special Features for each website they visit.
Because of the benefits of standardising the purposes across the industry, we use the TCF to establish the legal basis to Process Personal Information governed by the GDPR, and use the Purposes, Special Purposes, Features, and Special Features in our Privacy Policy to describe much of our data processing activity.
For detailed descriptions of TCF Purposes, Special Purposes, Features, and Special Features, see IAB Transparency & Consent Framework.
Third Party Cookie/Cookie ID
See Cookie.
Third Party Data
Third Party Data is Imported Data that is uploaded to the Quantcast platform or provided to us via API by third party Data Management Platforms and Data Providers. Third Party Data may include Segment Data.
Training Data
Training Data is Pseudonymous Information that we receive from Quantcast Clients and third party data providers, where the actual Attributes or Interests of the underlying users are known (even though their actual identities are not known to Quantcast). The Training Data is segmented across various Interests and Attributes, such as shopping interests (e.g., automotive, technology, or restaurants), business and occupation (e.g., management, IT professional or retail), media interests (e.g., cinema, video games, TV), income range, age, marital status, and other socio-economic information and used for data modeling purposes. We use the Training Data to train statistical models to make Inferences. When our systems subsequently receive Event Data relating to a user, we can infer whether the Event Data displays characteristics similar to the Training Data. If the Event Data displays characteristics that are similar to the Training Data, we can infer from that the likely Attributes and Interests of the user to whom the Event Data relates. These Inferences are then used to deliver advertising and provide aggregated, analytical reporting to our Quantcast Clients.
URL (Uniform Resource Locator)
A URL, also known as a web address, is a reference to a unique web resource that specifies its location on a computer network. Most commonly, a URL points to a web page. URLs can also point to a document, image, video, etc. URLs often use plain text, such as www.quantcast.com; in that case, the domain name must be processed by a Domain Name Server in order to convert the domain name into an IP Address.
Effective February 17th 2024 to June 11th 2024
DownloadTable of Contents
Key Terms
Effective: March 1 2024
Advertising Exchange
See Exchange/Advertising Exchange.
Attributes/Attribute Information
Attributes are known, observed, or inferred characteristics. Examples of attributes are “male” and “visited XYZ website”. Attributes may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data. Quantcast associates attributes with Pseudonymous Identifiers.
Audience
An Audience is a group of devices and/or users who are known to or are estimated to have certain common characteristics. A characteristic in common may be an Interest, such as an interest in cooking. A characteristic in common may be an Attribute, such as being male, visited a particular digital property, or viewed or interacted with a particular advertisement. One type of Audience is a group who have visited a Client’s digital property. Another type of Audience is a group who have been shown, or may potentially be shown, a Client’s advertisement.
Audience Insights
Audience Insights are data collected, or data that is inferred from data collected, about an Audience. Audience Insights are aggregated, anonymised data and are not Personal Information. An example of an Audience Insight is a report that a given audience is estimated to be 70% male and 3 times as likely to be interested in cooking compared to the general population.
Quantcast provides Audience Insights based on Event Data, Bid Request Data, Client Data, Third Party Data, and Inferred Data to Clients. Audience Insights enable Clients to better understand the audiences who engage with their content and ads.
Bid Request/Bid Request Data
A Bid Request is a request by a digital content publisher (e.g., website owner, app developer, streaming content provider, etc.) for an offer to place an ad in the publisher’s digital content. For example, when you visit an ad-supported web page, Bid Requests are sent by, or on behalf of, the publisher of the web page to multiple parties that may want to show an ad to you. Those parties can bid for the opportunity to show an ad in an auction, and one ad is selected to show on the page. Bid Requests typically go through an Advertising Exchange. This all happens via digital communication between computer servers in less than a second. The contents of the Bid Request may include information about the ad unit (the container in the digital content that will display the ad), the digital content, the device it will be seen on, and your engagement with the publisher’s digital content, so that prospective buyers can choose whether to bid and how much. For most cases, the contents of the Bid Request are defined by the OpenRTB industry standard (https://iabtechlab.com/standards/openrtb/), though not all fields are necessarily included in every Bid Request. Bid Request Data consists of data provided in the Bid Request and will commonly consist of a Pseudonymous Identifier (if available), the content that the ad would serve in (such as the web page, app, video, etc.), the type of device the ad would be served on (i.e., your device type), the approximate geographic location of your device, the size of the ad, the auction ID, and consent information, such as TCF Signals. Bid Request Data also includes Quantcast’s response to the Bid Request, such as whether Quantcast bid on the ad opportunity.
Browsing Data
Browsing Data is information collected relating to your Online activity or behaviour. Browsing Data is generated when a Pixels, Tags, or SDKs installed by a Client on its digital property loads and sends information to us. This includes the website URL of the page you are visiting, often along with a Pseudonymous Identifier, as well as fields of information that may be automatically included from HTTP Header Information, such as referral URLs (which is the URL that directed your browser to the website where an advertisement was served to you).
Browsing Data is included in Event Data.
Client Data
Client Data is Imported Data that is uploaded to the Quantcast platform by a particular advertiser Client for use on its behalf. Client Data is Pseudonymised Information, which defines groups of users. These groups might typically be based on users’ Online Data or Offline Data, or other characteristics or aspects of users’ relationship with the Client. The groups are then used by Quantcast to help deliver advertising campaigns to the right Audiences on behalf of the Client.
Cookie
A Cookie is a small bit of text that is sent to and saved on your computer or device when you visit a website. A Cookie is associated with a single web browser profile; each web browser and browser profile that you use on your device will have separate Cookies. Cookies allow a website to recognise a browser and are commonly used to store user preferences or identifiers, which enables us to collect and use information about browsers over time and across different internet content. Cookies enable us to understand more about users and the content they are visiting over time, which in turn can be used to improve our Clients’ advertising activities and the quality of advertising you experience. The identifiers we store in Cookies are Pseudonymous Information; in other words, they cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link a Pseudonymous Identifier to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers or Pseudonymous Information from doing the same. Browsers have controls that enable users to clear or block Cookies. See your browser help for details.
There are two forms of cookies: First Party Cookies and Third Party Cookies.
A “First Party Cookie” is limited in scope to a particular website you visit (“First Party Cookie”). In some instances, Quantcast is able to store or access information in a First Party Cookie. If www.example.com incorporates Quantcast Pixels, Tags or SDKs into their website, and if you visit www.example.com, Quantcast may set a First-Party Cookie associated with www.example.com. In these instances, Quantcast can store a Pseudonymous Identifier in the First-Party Cookie, but because it is a First Party Cookie, Quantcast can only access that Pseudonymous Identifier in the context of your visits to that site.
A “Third Party Cookie” is a cookie associated with an internet domain that is different from the one you are visiting. For example, if you are visiting www.example.com and a Quantcast Pixel, Tag or SDK on that website is able to set a cookie associated with quantcast.com, that is a Third Party Cookie. That same cookie will be accessible to Quantcast on other sites that also incorporate Quantcast Pixels, Tags or SDKs. Quantcast uses
Pseudonymous Identifiers stored in Third Party Cookies in order to collect information across multiple websites.
Quantcast Cookies placed on your device have a maximum expiry period of 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). Each time you visit a website and a First or Third Party Cookie is placed on your device, the placement of a Cookie begins a new expiry period of up to 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). All Quantcast Cookies automatically cease providing any data to Quantcast from your browser upon expiration.
Cookie ID/Identifier
A Cookie ID is a unique string of characters that we store in a Cookie that allows us to identify a single web browser instance over time and across different web sites. Our Cookie IDs are Pseudonymous Identifiers. A First Party Cookie ID is a unique Pseudonymous Identifier relating to the First-Party Cookie set by the owner of the website you are visiting. A Third Party Cookie ID is a unique Pseudonymous Identifier relating to the Third-Party Cookie set by Quantcast.
Cookie Syncing/Matching
In the online advertising industry, Cookie Syncing/Matching generally refers to a process through which two entities who each, and separately, identify a device using their own Pseudonymous Identifier can determine which of their respective Pseudonymous Identifiers may relate to the same device. For example, Quantcast may pseudonymously identify a device as “cookie ID 123.” Company B may pseudonymously identify the same device as “cookie ID ABC.” Cookie Syncing/Matching enables Quantcast and Company B to recognise that their respective Pseudonymous identifiers may relate to the device that Quantcast records as “cookie ID 123”.
Quantcast’s Cookie Syncing activities work similarly. If you visit a website that incorporates Pixels, Tags or SDKs from Quantcast, Company B may match its own pseudonymous identifiers to Quantcast Pseudonymous Identifiers (this creates a record of matching pseudonymous identifiers for Company B). Once a match is established, Company B can reference a particular device when communicating with Quantcast, using Quantcast’s Pseudonymous Identifier.
The Cookie Syncing/Matching process does not in itself result in Quantcast sharing Attributes related to Quantcast Pseudonymous Identifiers with Company B. The Cookie Syncing/Matching enables transactions between the parties at a later time; for example, in the case of an Advertising Exchange sending a Bid Request, the Bid Request can contain a previously synched Pseudonymous Identifier.
Cross-Media Matching/Linking
In the online advertising industry, Cross-Media Matching generally refers to a process through which Quantcast links identifiers across a user’s consumption of various media (e.g. audio, video, websites, apps, etc) because such identifiers are known to or Inferred to relate to the same user. Matching/Linking may be undertaken for consumption of media on a single device and for consumption of media on more than one device. As an example, if you visit a digital property using your mobile phone and later visit that same digital property using a browser on your laptop or make visits to several different digital properties using a browser over a period of time, Quantcast may initially determine that these visits are made by different users and assign each device user their own profile.
If, however, Quantcast finds there is sufficient commonality between the Pseudonymous Identifiers associated with the consumption of media, Quantcast will assess that those identifiers may be joined as they are likely to emanate from the same user. This assessment is“probabilistic”– in other words, it uses statistical techniques to determine that the identifiers to be matched have a higher likelihood of relating to the same device and/or user.
Data Management Platforms and Data Providers
Data Management Platforms and Data Providers provide Third Party Data to Quantcast, or provide a platform through which Clients can provide Client Data to Quantcast. These companies either directly licence first and third party Audience Segment Data from different sources (such as Online Data and Offline Data) to businesses or provide a platform through which Clients can collect, organise, and activate such data for Quantcast’s use in connection with the Solutions. We share Pseudonymous Identifiers with Data Management Platforms/Data Providers in order to sync/match identifiers to effectively integrate with their services (see Cookie Syncing/Matching).
Device ID/Identifier
A unique string of characters that can be used to identify a device set by the developer of the device’s operating system (e.g., a mobile phone, tablet, TV, or console). Device Identifiers (or “Device IDs”) serve a similar purpose as Cookies and can be used to provide personalised advertising. A Device ID is a Pseudonymous Identifier.
A Mobile Advertising ID (or “MAID”) is a Device ID assigned to a mobile device or connected TV (“CTV”) device by the device operating system. Typically, the device user can reset or turn off the ID via the device’s settings. A MAID is referred to as the IDFA (ID for Advertisers) on iOS devices and GAID (Google Ad ID) on Android mobile devices.
Device Configuration/Device Information
Information about a device or its configuration, transmitted from the device, and typically associated with a Pseudonymous Identifier. The information includes browser, app, or other information about the device (such as device type, screen size and resolution, date and time, and language), which also may include a User Agent. Some Device Information is derived from HTTP Request Header Information.
Event Data
Information collected relating to your Online activity/behaviour, which may include Personal Information in Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, Browsing Data and TCF Signals. Event Data is generated when a Pixel, Tag, or SDK installed on a Client’s digital property loads and sends information to us. Event Data can also be collected from ads, when you view or click on an ad which contains a Tag.
Exchange/Advertising Exchange
A marketplace platform that facilitates automated, real-time, auction-based buying and selling of ad inventory (which are spaces available on sites and apps to display ads). An Advertising Exchange receives Bid Requests from digital publishers and forwards them to advertisers, or to entities like Quantcast who act on behalf of advertisers. Advertisers, or their agents, respond to Bid Requests with a bid amount and an advertisement to provide to a user if they win the auction.
First Party Cookie
See Cookie.
HTTP Request Header Information
HTTP headers are defined by internet standards and contain a number of data fields designed to facilitate communication and interoperability on the internet. On the web, your web browser controls which headers are sent and what the contents are. We receive the headers when a request is sent over the internet to our system, such as when a Pixel loads in your web browser. We also might receive information that has been derived from the HTTP headers from another party, such as in a Bid Request. We use a subset of the header fields for purposes described in the Privacy Policy, which includes:
Cookie (if available)
User Agent, which is a string (a line of text) identifying the device type, browser type, and version that the user is using to access the web server (“User Agent”)
Date, which includes the precise time of access
Referral URL, which is the web page you were on when the request was sent
TLS Session ID, which identifies a particular session of communication between the browser and the server
Content-Language, which is the languages of the intended audience for the enclosed content
Detailed documentation related to HTTP header information can be found online in a general search for “HTTP header information fields”.
IAB Transparency & Consent Framework (“TCF”)
The IAB Transparency & Consent Framework, or “TCF,” is a standardised industry program active in countries governed by the GDPR, and designed for notifying users about data Processing by companies involved in digital advertising on sites and apps that users visit, and for establishing a legal basis for that Processing.
The TCF is designed to be used on digital properties, such as websites and apps. The TCF incorporates a consent dialog that displays when users visit a website or app, giving them information about vendors, the data they collect, and the purposes for which they collect it. It also offers an opportunity for users to give or change their permissions for such data collection and use.
The TCF allows Quantcast to work with publishers of websites and other digital properties in a consistent manner using standardised technical specifications to:
(a) provide a link to Quantcast's Privacy Policy, as well as transparency about Quantcast's Processing of Personal Information, the specific purposes for which Quantcast Processes Personal Information, and Quantcast's legal basis for such Processing, directly on the website or other digital property accessed by the user;
(b) allow the user, in a granular manner, to express their consent or refusal to consent, to Quantcast's (i) use of Cookies, and (ii) the purposes of Quantcast's Processing, which are the reasons why Quantcast Processes the personal data of users (“TCF Purposes”), including where Quantcast relies on the user’s consent for such Processing directly on the website or other digital property that the user is accessing;
(c) allow the user to object to Quantcast's Processing of Personal Information (for purposes where Quantcast relies on legitimate interests) directly on the website or other digital property accessed by the user.
Using the TCF allows publishers of websites or other digital properties to provide information about Quantcast’s Processing to users in a consistent manner. The user-facing disclosures presented by these digital properties are sourced from information that Quantcast has registered with the TCF's “Global Vendor List”, a publicly accessible, machine-readable repository of information about TCF-compliant vendors, like Quantcast. This information includes Quantcast’s Privacy Policy URL, the purposes for which it Processes Personal Information, and its legal basis for each of these purposes. As the description of these purposes and minimum standards for disclosures are standardised across all TCF participants, Quantcast knows how operators of websites or other digital properties using the TCF are making disclosures about Quantcast and can have confidence in such disclosures.
In addition, the TCF enables publishers of websites or other digital properties to create and send to Quantcast a standardised technical signal that indicates (A) whether Quantcast’s transparency disclosures were provided to a user; (B) whether or not the user has consented to Quantcast’s Processing and/or each purpose for which Quantcast sought the user's consent; and (c) whether the user objected to Quantcast’s Processing and/or any purposes for which Quantcast Processes Personal Information on the basis of its legitimate interests (the “TCF Signal”).
TCF Signal is collected via Quantcast Tags if the digital property on which the Tag is implemented has also implemented a TCF-compatible Consent Management Platform, which is a company or organisation that centralises and manages transparency for, and consent and objections of, the user (“CMP”) . In addition, TCF Signal is received by Quantcast as part of the Bid Requests it receives from Advertising Exchanges. Quantcast is able to read the standardised TCF Signal and will only Process Personal Information for purposes to which the user has consented (where consent is the legal basis) or not objected (where legitimate interests is the legal basis) in order to provide the Solutions.
Read more about the TCF here https://iabeurope.eu/transparency-consent-framework/
Imported Data
Imported Data is uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”). Imported Data is Pseudonymised Information, which may include information relating to your Online data or Offline data or other information that Clients or partners have about you. For examples of Imported Data provided to Quantcast, see Client Data or Third Party Data.
Imported Data (Client)
See Client Data.
Imported Data (Third Party/Segment)
See Third Party Data.
Imprecise/Approximate Location Information
Typically, in digital advertising we distinguish between precise and imprecise geolocation information.
Precise geolocation usually comes from GPS coordinates from mobile devices, and can have precision up to about one metre. Quantcast does not use precise geolocation data and we request that Clients, partners, and third parties refrain from sending precise geolocation to us. If a party inadvertently sends it, we do not use it in the Solutions and it is removed from our systems within 30 days.
Imprecise geolocation is lower precision, and refers to a general geographic area, for example a country, region, city or division of a metropolitan area, and/or some combination of these, and is often derived from GPS coordinates or from IP Addresses.
Inferences/Inferred Data
Inferences, or Inferred Data, is information that is inferred from data that we have collected about a device, such as Event Data, Bid Request Data, Client Data, or Third Party Data. Our inferences are made using algorithms that estimate the likelihood that the user of a device has particular interests or characteristics. The Inferences are then associated with a Pseudonymous Identifier as part of a set of device Attributes.
For example, if a device frequently visits sports websites, it might be inferred that there is some probability the user of that device likes sports. Similarly, if a device frequently visits an airline provider’s website, it might be inferred that there is some probability a user of that device likes to travel. Other Inferences include things such as Interests, income range, gender, age, marital status, and other socio-economic information.
Inferences associated with any individual device have a high degree of uncertainty. Inferences become more accurate when used to estimate the characteristics of a large group of devices, like an Audience.
Interests
Interests are known, observed, or inferred non-demographic characteristics. Interests are associated with Pseudonymous Identifiers to characterise particular interests of users. Examples of Interests include “cooking” and “outdoor activities”. Interests may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data.
IP Address
An IP (“Internet Protocol”) Address is a unique numerical label corresponding to a computer or device. Computers use IP Addresses to identify each other and know where to send information over the Internet. For example, when you open a web page in your browser a request is made to a server for the web page content. The server knows where to send the content based on the IP Address contained in the request. Computers or other devices are assigned an IP Address from the network the device is on. A device’s IP Address may change over time or as a device changes locations. Also, an IP Address can refer to multiple devices, for example if the devices are behind an internet router.
An IP Address that has been hashed, or encoded using a cryptographic hashing function to obfuscate the email, is treated as a Pseudonymous Identifier.
Labels/Label Data
Labels, or Label Data, are descriptors associated with Pseudonymous Identifiers to denote particular groups of users that can be subsequently used to index all Pseudonymous Identifiers associated with that label. An analogy would be applying a “label” to messages in an email inbox - you might decide to label messages from work as “Work”, family members as “Family,” and so on. These labels then help you readily index and recall particular categories of email.
Labels processed by Quantcast are:
Labels from Data Management Platforms and Data Providers : these are category Labels (e.g., male, female, age 21-24) acquired from third party data partners relating to a Pseudonymous Identifier;
Custom-Client Data Labels: these are custom category labels set by Clients corresponding to a device associated with the identifier visiting their digital property (e.g., byline of the news article accessed by the user) or product name (of the product accessed by the user).
Inferred Data Labels: these are inferred category Labels about a user using a device associated with a Pseudonymous Identifier, e.g., inferred age, inferred gender, inferred interest.
Example Labels are “male” and “visited XYZ website”. Labels may be inferred information (see Inferences/Inferred Data) or may be Imported Data (see Client Data and Third Party Data).
Log Data
Log Data is an industry term that is generally used to refer to data collected from interactions with computer systems, and is used differently by different companies. For purposes of describing our Processing, we use more precise terms, such as Pseudonymous Identifiers, Event Data, Bid Request Data, Client Data, Third Party Data, and/or Inferences/Inferred Data, which are all types of data that can be subsumed within the general industry term “Log Data”. Some elements within Log Data, when isolated from the Pseudonymous Identifiers, will not qualify as Personal Information. For example, a single time zone and publisher URL without an associated Pseudonymous Identifier would not qualify as Personal Information.
Online Data
Data relating to a user’s interaction with digital media including websites, apps and streaming media services.
Offline Data
Data relating to a user’s real-world purchases and/or activity.
Panel
A Panel is a set of individuals who have consented to participate in market research and share information about themselves, their preferences and interests for purposes of research and market analytics.
This information can then be used as the basis for learning or making inferences about a larger population. For example, if a number of people on a Panel share that they visit a particular news website, and of those people, most of them are male and over the age of 50, we might extrapolate from that and say that most of the audience for that website is male and over 50.
Another way to use Panel data is to compare Panel results to the estimates that we have made using our algorithms in order to score the effectiveness of our algorithms. So, if our algorithm predicted for the same news website that most of the audience is under 30, we would learn that our algorithm might be wrong.
Personal Information
Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you, your browser, or your device. We use the term “personal information” to refer to information that is subject to protection under data protection and privacy laws and regulatory regimes around the world. Depending on the jurisdiction, such information may be referred to as “personal data.”
The Personal Information Processed by Quantcast is limited to Pseudonymised Identifiers. Quantcast does not Process Personal Information that directly identifies you as an individual, and that can be used to directly identify you without technical efforts to add additional information, which Quantcast does not have.
Pixels, Tags, and SDKs
Pixels, Tags, and SDKs are computer code embedded in a website that we use to enable the Solutions. We tend to use the terms Pixels, Tags, and SDKs interchangeably. Clients that use the Solutions can put them on their sites, in their apps, or in their ads in order to send us information that is then used in the Solutions. When a Pixel, Tag, or SDK loads and calls our servers, we receive HTTP Header Information, along with other information that is configured by the Client who is using the Solutions. That information includes IDs from partners, so we know which partner the data is coming from.
Pixels, Tags, and SDKs include:
Sync Pixels: These are used to exchange and match Pseudonymous Identifiers between companies that participate in the digital advertising market. By matching, they can synchronise these identifiers to deliver and measure ads.
Tags or Pixels in ads: When a digital ad loads on a page, it can include a Tag or Pixel that we use on behalf of Clients to gather information about where and when the ad was served. This can help to measure ad performance, to ensure ads are shown where intended, and to learn in order to improve ad effectiveness.
Tags or Pixels on publisher Clients’ web pages: For publisher Clients that use the Solutions, they can put our Tags on their sites. The information we collect then enables the Client to learn about their audience, and it enables us to build models for better targeting ads.
Tags or Pixels used by advertiser Clients: When advertiser Clients use our Tags or Pixels, they send us information so we can learn about their customers in order to help them better target their ads.
SDKs: SDKs are bits of computer code that mobile app publisher Clients incorporate into their apps, enabling them to send us information. Similar to Pixels or Tags, the information enables us to offer the Solutions as described in our Privacy Policy.
Probabilistic Identifier
A Probabilistic Identifier is a Pseudonymous Identifier which we create by combining Pseudonymous Identifiers (such as IP Addresses) with Bid Request Data and/or Event Data using non-deterministic, statistical methods to estimate the likelihood that a group of devices may be used by the same user or household, if applicable law or rules allow. For example, we might be able to determine that because a mobile phone and a TV are on the same network, they are likely in the same house. We can then use that information to select and measure ads. Unlike using Cookie IDs, this approach is not 100% accurate and could identify one or many devices.
Process
Refers to any operation or set of operations performed upon Personal Information or sets of Personal Information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Pseudonymous Identifiers
Pseudonymous Identifiers are unique values that distinguish your browser profile(s) or device(s). Pseudonymous Identifiers cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link Pseudonymous Identifiers to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers from doing the same.
Pseudonymous Identifiers are important in digital advertising because they help distinguish browsers or devices over time across different contexts. This is useful for example, to limit the number of times that we show the same ad to one device, to measure the performance of ads, and to target and select personalised ads.
We may incorporate any one of the following types of information in a Quantcast Pseudonymous Identifier:
Third Party Cookie ID: see Cookie ID.
First Party Cookie ID: see Cookie ID.
Hashed email addresses, which are email addresses that have been encoded using a cryptographic hashing function to obfuscate the email.
Third party identifiers
Application ID: an ID that is unique to your mobile device and a particular app on your device.
Application Session ID: like an application ID, except that it is reset periodically (e.g., many browsers reset these after 30 minutes of inactivity).
Exchange User ID: an ID that is sent to us with a Bid Request that identifies the device or browser where an ad is to be shown.
Publisher User ID: digital publishers that use the Solutions can send us an ID to use in the Solutions. The digital publisher hashes or encrypts an identifier available to it. The resulting ID is pseudonymous because it does not directly identify you, but it would be consistent across different publishers, so the Publisher User ID can be used to match data.
TLS Session ID: when you visit a website URL that starts with “https” instead of “http”, that means you have an encrypted connection between your browser and the site. If one of our Pixels, Tags or SDKs loads on the site, that call to our server will also be encrypted. The Session ID identifies a particular session of communication between the browser and the server.
Pseudonymous/Pseudonymised Information
Pseudonymised Information is Personal Information that has been Processed in such a manner that the information can no longer be attributed to a specific user without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal information is not attributed to a specific user.
Segment Data
Segment Data is imported data that is uploaded to the Quantcast platform or provided to us via an API by Clients or Third Party Data Partners. Segment Data is Pseudonymised Information, which may include Online Data and/or Offline Data as well as Attributes, Inferences, or Interests inferred from that data. This category of information is typically called “Segment Data” because it identifies groups of users who fall into advertising segments (e.g., “auto buyers,” “shoe shoppers,” or “women 25-35”). These segments represent groups of users that share (or that are inferred to share) one or more certain characteristics in common (e.g., a client may want to advertise to a segment of “male shoppers who are interested in sports fashion”). These groupings are created by using the intersection of different segments (in the example given, an audience that is simultaneously in the “male”, “shopper”, and “sports fashion” segments). A segment may be identified with a Label (in which case it is referred to as “Label Data”).
Software Development Kit (SDK)
Tag
TCF
See IAB Transparency & Consent Framework.
TCF Purpose/TCF Special Purpose
The TCF has standardised certain Purposes, Special Purposes and Special Features and the descriptions of data processing activity in the digital advertising industry. Through this standardisation, the digital advertising industry can ascribe consistent meanings for the permissions that data subjects give via the TCF. This also ensures a consistent experience for users because they then do not have to read and understand an entirely different set of Purposes, Special Purposes and Special Features for each website they visit.
Because of the benefits of standardising the purposes across the industry, we use the TCF to establish the legal basis to Process Personal Information and use the Purposes, Special Purposes and Special Features in our Privacy Policy to describe much of our data processing activity.
For detailed descriptions of TCF “Purpose” or TCF “Special Purpose”, see IAB Transparency & Consent Framework.
Third Party Cookie/Cookie ID
See Cookie.
Third Party Data
Third Party Data is Imported Data that is uploaded to the Quantcast platform or provided to us via API by third party Data Management Platforms and Data Providers. Third Party Data may include Segment Data.
Training Data
Training Data is Pseudonymous Information that we receive from Clients and third party data providers, where the actual Attributes or Interests of the underlying users are known (even though their actual identities are not known to Quantcast). The Training Data is segmented across various Interests and Attributes, such as shopping interests (e.g., automotive, technology, or restaurants), business and occupation (e.g., management, IT professional or retail), media interests (e.g., cinema, video games, TV), income range, age, marital status, and other socio-economic information and used for data modeling purposes. We use the Training Data to train statistical models to make Inferences. When our systems subsequently receive Event Data relating to a user, we can infer whether the Event Data displays characteristics similar to the Training Data. If the Event Data displays characteristics that are similar to the Training Data, we can infer from that the likely Attributes and Interests of the user to whom the Event Data relates. These Inferences are then used to deliver advertising and provide aggregated, analytical reporting to our Clients.
URL (Uniform Resource Locator)
A URL, also known as a web address, is a reference to a unique web resource that specifies its location on a computer network. Most commonly, a URL points to a web page. URLs can also point to a document, image, video, etc. URLs often use plain text, such as www.quantcast.com; in that case, the domain name must be processed by a Domain Name Server in order to convert the domain name into an IP Address.
Effective February 12th 2024 to February 17th 2024
DownloadTable of Contents
Key Terms
Effective: March 1 2024
Advertising Exchange
See Exchange/Advertising Exchange.
Attributes/Attribute Information
Attributes are known, observed, or inferred characteristics. Examples of attributes are “male” and “visited XYZ website”. Attributes may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data. Quantcast associates attributes with Pseudonymous Identifiers.
Audience
An Audience is a group of devices and/or users who are known to or are estimated to have certain common characteristics. A characteristic in common may be an Interest, such as an interest in cooking. A characteristic in common may be an Attribute, such as being male, visited a particular digital property, or viewed or interacted with a particular advertisement. One type of Audience is a group who have visited a Client’s digital property. Another type of Audience is a group who have been shown, or may potentially be shown, a Client’s advertisement.
Audience Insights
Audience Insights are data collected, or data that is inferred from data collected, about an Audience. Audience Insights are aggregated, anonymised data and are not Personal Information. An example of an Audience Insight is a report that a given audience is estimated to be 70% male and 3 times as likely to be interested in cooking compared to the general population.
Quantcast provides Audience Insights based on Event Data, Bid Request Data, Client Data, Third Party Data, and Inferred Data to Clients. Audience Insights enable Clients to better understand the audiences who engage with their content and ads.
Bid Request/Bid Request Data
A Bid Request is a request by a digital content publisher (e.g., website owner, app developer, streaming content provider, etc.) for an offer to place an ad in the publisher’s digital content. For example, when you visit an ad-supported web page, Bid Requests are sent by, or on behalf of, the publisher of the web page to multiple parties that may want to show an ad to you. Those parties can bid for the opportunity to show an ad in an auction, and one ad is selected to show on the page. Bid Requests typically go through an Advertising Exchange. This all happens via digital communication between computer servers in less than a second. The contents of the Bid Request may include information about the ad unit (the container in the digital content that will display the ad), the digital content, the device it will be seen on, and your engagement with the publisher’s digital content, so that prospective buyers can choose whether to bid and how much. For most cases, the contents of the Bid Request are defined by the OpenRTB industry standard (https://iabtechlab.com/standards/openrtb/), though not all fields are necessarily included in every Bid Request. Bid Request Data consists of data provided in the Bid Request and will commonly consist of a Pseudonymous Identifier (if available), the content that the ad would serve in (such as the web page, app, video, etc.), the type of device the ad would be served on (i.e., your device type), the approximate geographic location of your device, the size of the ad, the auction ID, and consent information, such as TCF Signals. Bid Request Data also includes Quantcast’s response to the Bid Request, such as whether Quantcast bid on the ad opportunity.
Browsing Data
Browsing Data is information collected relating to your Online activity or behaviour. Browsing Data is generated when a Pixels, Tags, or SDKs installed by a Client on its digital property loads and sends information to us. This includes the website URL of the page you are visiting, often along with a Pseudonymous Identifier, as well as fields of information that may be automatically included from HTTP Header Information, such as referral URLs (which is the URL that directed your browser to the website where an advertisement was served to you).
Browsing Data is included in Event Data.
Client Data
Client Data is Imported Data that is uploaded to the Quantcast platform by a particular advertiser Client for use on its behalf. Client Data is Pseudonymised Information, which defines groups of users. These groups might typically be based on users’ Online Data or Offline Data, or other characteristics or aspects of users’ relationship with the Client. The groups are then used by Quantcast to help deliver advertising campaigns to the right Audiences on behalf of the Client.
Cookie
A Cookie is a small bit of text that is sent to and saved on your computer or device when you visit a website. A Cookie is associated with a single web browser profile; each web browser and browser profile that you use on your device will have separate Cookies. Cookies allow a website to recognise a browser and are commonly used to store user preferences or identifiers, which enables us to collect and use information about browsers over time and across different internet content. Cookies enable us to understand more about users and the content they are visiting over time, which in turn can be used to improve our Clients’ advertising activities and the quality of advertising you experience. The identifiers we store in Cookies are Pseudonymous Information; in other words, they cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link a Pseudonymous Identifier to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers or Pseudonymous Information from doing the same. Browsers have controls that enable users to clear or block Cookies. See your browser help for details.
There are two forms of cookies: First Party Cookies and Third Party Cookies.
A “First Party Cookie” is limited in scope to a particular website you visit (“First Party Cookie”). In some instances, Quantcast is able to store or access information in a First Party Cookie. If www.example.com incorporates Quantcast Pixels, Tags or SDKs into their website, and if you visit www.example.com, Quantcast may set a First-Party Cookie associated with www.example.com. In these instances, Quantcast can store a Pseudonymous Identifier in the First-Party Cookie, but because it is a First Party Cookie, Quantcast can only access that Pseudonymous Identifier in the context of your visits to that site.
A “Third Party Cookie” is a cookie associated with an internet domain that is different from the one you are visiting. For example, if you are visiting www.example.com and a Quantcast Pixel, Tag or SDK on that website is able to set a cookie associated with quantcast.com, that is a Third Party Cookie. That same cookie will be accessible to Quantcast on other sites that also incorporate Quantcast Pixels, Tags or SDKs. Quantcast uses
Pseudonymous Identifiers stored in Third Party Cookies in order to collect information across multiple websites.
Quantcast Cookies placed on your device have a maximum expiry period of 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). Each time you visit a website and a First or Third Party Cookie is placed on your device, the placement of a Cookie begins a new expiry period of up to 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). All Quantcast Cookies automatically cease providing any data to Quantcast from your browser upon expiration.
Cookie ID/Identifier
A Cookie ID is a unique string of characters that we store in a Cookie that allows us to identify a single web browser instance over time and across different web sites. Our Cookie IDs are Pseudonymous Identifiers. A First Party Cookie ID is a unique Pseudonymous Identifier relating to the First-Party Cookie set by the owner of the website you are visiting. A Third Party Cookie ID is a unique Pseudonymous Identifier relating to the Third-Party Cookie set by Quantcast.
Cookie Syncing/Matching
In the online advertising industry, Cookie Syncing/Matching generally refers to a process through which two entities who each, and separately, identify a device using their own Pseudonymous Identifier can determine which of their respective Pseudonymous Identifiers may relate to the same device. For example, Quantcast may pseudonymously identify a device as “cookie ID 123.” Company B may pseudonymously identify the same device as “cookie ID ABC.” Cookie Syncing/Matching enables Quantcast and Company B to recognise that their respective Pseudonymous identifiers may relate to the device that Quantcast records as “cookie ID 123”.
Quantcast’s Cookie Syncing activities work similarly. If you visit a website that incorporates Pixels, Tags or SDKs from Quantcast, Company B may match its own pseudonymous identifiers to Quantcast Pseudonymous Identifiers (this creates a record of matching pseudonymous identifiers for Company B). Once a match is established, Company B can reference a particular device when communicating with Quantcast, using Quantcast’s Pseudonymous Identifier.
The Cookie Syncing/Matching process does not in itself result in Quantcast sharing Attributes related to Quantcast Pseudonymous Identifiers with Company B. The Cookie Syncing/Matching enables transactions between the parties at a later time; for example, in the case of an Advertising Exchange sending a Bid Request, the Bid Request can contain a previously synched Pseudonymous Identifier.
Cross-Media Matching/Linking
In the online advertising industry, Cross-Media Matching generally refers to a process through which Quantcast links identifiers across a user’s consumption of various media (e.g. audio, video, websites, apps, etc) because such identifiers are known to or Inferred to relate to the same user. Matching/Linking may be undertaken for consumption of media on a single device and for consumption of media on more than one device. As an example, if you visit a digital property using your mobile phone and later visit that same digital property using a browser on your laptop or make visits to several different digital properties using a browser over a period of time, Quantcast may initially determine that these visits are made by different users and assign each device user their own profile.
If, however, Quantcast finds there is sufficient commonality between the Pseudonymous Identifiers associated with the consumption of media, Quantcast will assess that those identifiers may be joined as they are likely to emanate from the same user. This assessment is“probabilistic”– in other words, it uses statistical techniques to determine that the identifiers to be matched have a higher likelihood of relating to the same device and/or user.
Data Management Platforms and Data Providers
Data Management Platforms and Data Providers provide Third Party Data to Quantcast, or provide a platform through which Clients can provide Client Data to Quantcast. These companies either directly licence first and third party Audience Segment Data from different sources (such as Online Data and Offline Data) to businesses or provide a platform through which Clients can collect, organise, and activate such data for Quantcast’s use in connection with the Solutions. We share Pseudonymous Identifiers with Data Management Platforms/Data Providers in order to sync/match identifiers to effectively integrate with their services (see Cookie Syncing/Matching).
Device ID/Identifier
A unique string of characters that can be used to identify a device set by the developer of the device’s operating system (e.g., a mobile phone, tablet, TV, or console). Device Identifiers (or “Device IDs”) serve a similar purpose as Cookies and can be used to provide personalised advertising. A Device ID is a Pseudonymous Identifier.
A Mobile Advertising ID (or “MAID”) is a Device ID assigned to a mobile device or connected TV (“CTV”) device by the device operating system. Typically, the device user can reset or turn off the ID via the device’s settings. A MAID is referred to as the IDFA (ID for Advertisers) on iOS devices and GAID (Google Ad ID) on Android mobile devices.
Device Configuration/Device Information
Information about a device or its configuration, transmitted from the device, and typically associated with a Pseudonymous Identifier. The information includes browser, app, or other information about the device (such as device type, screen size and resolution, date and time, and language), which also may include a User Agent. Some Device Information is derived from HTTP Request Header Information.
Event Data
Information collected relating to your Online activity/behaviour, which may include Personal Information in Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, Browsing Data and TCF Signals. Event Data is generated when a Pixel, Tag, or SDK installed on a Client’s digital property loads and sends information to us. Event Data can also be collected from ads, when you view or click on an ad which contains a Tag.
Exchange/Advertising Exchange
A marketplace platform that facilitates automated, real-time, auction-based buying and selling of ad inventory (which are spaces available on sites and apps to display ads). An Advertising Exchange receives Bid Requests from digital publishers and forwards them to advertisers, or to entities like Quantcast who act on behalf of advertisers. Advertisers, or their agents, respond to Bid Requests with a bid amount and an advertisement to provide to a user if they win the auction.
First Party Cookie
See Cookie.
HTTP Request Header Information
HTTP headers are defined by internet standards and contain a number of data fields designed to facilitate communication and interoperability on the internet. On the web, your web browser controls which headers are sent and what the contents are. We receive the headers when a request is sent over the internet to our system, such as when a Pixel loads in your web browser. We also might receive information that has been derived from the HTTP headers from another party, such as in a Bid Request. We use a subset of the header fields for purposes described in the Privacy Policy, which includes:
Cookie (if available)
User Agent, which is a string (a line of text) identifying the device type, browser type, and version that the user is using to access the web server (“User Agent”)
Date, which includes the precise time of access
Referral URL, which is the web page you were on when the request was sent
TLS Session ID, which identifies a particular session of communication between the browser and the server
Content-Language, which is the languages of the intended audience for the enclosed content
Detailed documentation related to HTTP header information can be found online in a general search for “HTTP header information fields”.
IAB Transparency & Consent Framework (“TCF”)
The IAB Transparency & Consent Framework, or “TCF,” is a standardised industry program active in countries governed by the GDPR, and designed for notifying users about data Processing by companies involved in digital advertising on sites and apps that users visit, and for establishing a legal basis for that Processing.
The TCF is designed to be used on digital properties, such as websites and apps. The TCF incorporates a consent dialog that displays when users visit a website or app, giving them information about vendors, the data they collect, and the purposes for which they collect it. It also offers an opportunity for users to give or change their permissions for such data collection and use.
The TCF allows Quantcast to work with publishers of websites and other digital properties in a consistent manner using standardised technical specifications to:
(a) provide a link to Quantcast's Privacy Policy, as well as transparency about Quantcast's Processing of Personal Information, the specific purposes for which Quantcast Processes Personal Information, and Quantcast's legal basis for such Processing, directly on the website or other digital property accessed by the user;
(b) allow the user, in a granular manner, to express their consent or refusal to consent, to Quantcast's (i) use of Cookies, and (ii) the purposes of Quantcast's Processing, which are the reasons why Quantcast Processes the personal data of users (“TCF Purposes”), including where Quantcast relies on the user’s consent for such Processing directly on the website or other digital property that the user is accessing;
(c) allow the user to object to Quantcast's Processing of Personal Information (for purposes where Quantcast relies on legitimate interests) directly on the website or other digital property accessed by the user.
Using the TCF allows publishers of websites or other digital properties to provide information about Quantcast’s Processing to users in a consistent manner. The user-facing disclosures presented by these digital properties are sourced from information that Quantcast has registered with the TCF's “Global Vendor List”, a publicly accessible, machine-readable repository of information about TCF-compliant vendors, like Quantcast. This information includes Quantcast’s Privacy Policy URL, the purposes for which it Processes Personal Information, and its legal basis for each of these purposes. As the description of these purposes and minimum standards for disclosures are standardised across all TCF participants, Quantcast knows how operators of websites or other digital properties using the TCF are making disclosures about Quantcast and can have confidence in such disclosures.
In addition, the TCF enables publishers of websites or other digital properties to create and send to Quantcast a standardised technical signal that indicates (A) whether Quantcast’s transparency disclosures were provided to a user; (B) whether or not the user has consented to Quantcast’s Processing and/or each purpose for which Quantcast sought the user's consent; and (c) whether the user objected to Quantcast’s Processing and/or any purposes for which Quantcast Processes Personal Information on the basis of its legitimate interests (the “TCF Signal”).
TCF Signal is collected via Quantcast Tags if the digital property on which the Tag is implemented has also implemented a TCF-compatible Consent Management Platform, which is a company or organisation that centralises and manages transparency for, and consent and objections of, the user (“CMP”) . In addition, TCF Signal is received by Quantcast as part of the Bid Requests it receives from Advertising Exchanges. Quantcast is able to read the standardised TCF Signal and will only Process Personal Information for purposes to which the user has consented (where consent is the legal basis) or not objected (where legitimate interests is the legal basis) in order to provide the Solutions.
Read more about the TCF here https://iabeurope.eu/transparency-consent-framework/
Imported Data
Imported Data is uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”). Imported Data is Pseudonymised Information, which may include information relating to your Online data or Offline data or other information that Clients or partners have about you. For examples of Imported Data provided to Quantcast, see Client Data or Third Party Data.
Imported Data (Client)
See Client Data.
Imported Data (Third Party/Segment)
See Third Party Data.
Imprecise/Approximate Location Information
Typically, in digital advertising we distinguish between precise and imprecise geolocation information.
Precise geolocation usually comes from GPS coordinates from mobile devices, and can have precision up to about one metre. Quantcast does not use precise geolocation data and we request that Clients, partners, and third parties refrain from sending precise geolocation to us. If a party inadvertently sends it, we do not use it in the Solutions and it is removed from our systems within 30 days.
Imprecise geolocation is lower precision, and refers to a general geographic area, for example a country, region, city or division of a metropolitan area, and/or some combination of these, and is often derived from GPS coordinates or from IP Addresses.
Inferences/Inferred Data
Inferences, or Inferred Data, is information that is inferred from data that we have collected about a device, such as Event Data, Bid Request Data, Client Data, or Third Party Data. Our inferences are made using algorithms that estimate the likelihood that the user of a device has particular interests or characteristics. The Inferences are then associated with a Pseudonymous Identifier as part of a set of device Attributes.
For example, if a device frequently visits sports websites, it might be inferred that there is some probability the user of that device likes sports. Similarly, if a device frequently visits an airline provider’s website, it might be inferred that there is some probability a user of that device likes to travel. Other Inferences include things such as Interests, income range, gender, age, marital status, and other socio-economic information.
Inferences associated with any individual device have a high degree of uncertainty. Inferences become more accurate when used to estimate the characteristics of a large group of devices, like an Audience.
Interests
Interests are known, observed, or inferred non-demographic characteristics. Interests are associated with Pseudonymous Identifiers to characterise particular interests of users. Examples of Interests include “cooking” and “outdoor activities”. Interests may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data.
IP Address
An IP (“Internet Protocol”) Address is a unique numerical label corresponding to a computer or device. Computers use IP Addresses to identify each other and know where to send information over the Internet. For example, when you open a web page in your browser a request is made to a server for the web page content. The server knows where to send the content based on the IP Address contained in the request. Computers or other devices are assigned an IP Address from the network the device is on. A device’s IP Address may change over time or as a device changes locations. Also, an IP Address can refer to multiple devices, for example if the devices are behind an internet router.
An IP Address that has been hashed, or encoded using a cryptographic hashing function to obfuscate the email, is treated as a Pseudonymous Identifier.
Labels/Label Data
Labels, or Label Data, are descriptors associated with Pseudonymous Identifiers to denote particular groups of users that can be subsequently used to index all Pseudonymous Identifiers associated with that label. An analogy would be applying a “label” to messages in an email inbox - you might decide to label messages from work as “Work”, family members as “Family,” and so on. These labels then help you readily index and recall particular categories of email.
Labels processed by Quantcast are:
Labels from Data Management Platforms and Data Providers : these are category Labels (e.g., male, female, age 21-24) acquired from third party data partners relating to a Pseudonymous Identifier;
Custom-Client Data Labels: these are custom category labels set by Clients corresponding to a device associated with the identifier visiting their digital property (e.g., byline of the news article accessed by the user) or product name (of the product accessed by the user).
Inferred Data Labels: these are inferred category Labels about a user using a device associated with a Pseudonymous Identifier, e.g., inferred age, inferred gender, inferred interest.
Example Labels are “male” and “visited XYZ website”. Labels may be inferred information (see Inferences/Inferred Data) or may be Imported Data (see Client Data and Third Party Data).
Log Data
Log Data is an industry term that is generally used to refer to data collected from interactions with computer systems, and is used differently by different companies. For purposes of describing our Processing, we use more precise terms, such as Pseudonymous Identifiers, Event Data, Bid Request Data, Client Data, Third Party Data, and/or Inferences/Inferred Data, which are all types of data that can be subsumed within the general industry term “Log Data”. Some elements within Log Data, when isolated from the Pseudonymous Identifiers, will not qualify as Personal Information. For example, a single time zone and publisher URL without an associated Pseudonymous Identifier would not qualify as Personal Information.
Online Data
Data relating to a user’s interaction with digital media including websites, apps and streaming media services.
Offline Data
Data relating to a user’s real-world purchases and/or activity.
Panel
A Panel is a set of individuals who have consented to participate in market research and share information about themselves, their preferences and interests for purposes of research and market analytics.
This information can then be used as the basis for learning or making inferences about a larger population. For example, if a number of people on a Panel share that they visit a particular news website, and of those people, most of them are male and over the age of 50, we might extrapolate from that and say that most of the audience for that website is male and over 50.
Another way to use Panel data is to compare Panel results to the estimates that we have made using our algorithms in order to score the effectiveness of our algorithms. So, if our algorithm predicted for the same news website that most of the audience is under 30, we would learn that our algorithm might be wrong.
Personal Information
Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you, your browser, or your device. We use the term “personal information” to refer to information that is subject to protection under data protection and privacy laws and regulatory regimes around the world. Depending on the jurisdiction, such information may be referred to as “personal data.”
The Personal Information Processed by Quantcast is limited to Pseudonymised Identifiers. Quantcast does not Process Personal Information that directly identifies you as an individual, and that can be used to directly identify you without technical efforts to add additional information, which Quantcast does not have.
Pixels, Tags, and SDKs
Pixels, Tags, and SDKs are computer code embedded in a website that we use to enable the Solutions. We tend to use the terms Pixels, Tags, and SDKs interchangeably. Clients that use the Solutions can put them on their sites, in their apps, or in their ads in order to send us information that is then used in the Solutions. When a Pixel, Tag, or SDK loads and calls our servers, we receive HTTP Header Information, along with other information that is configured by the Client who is using the Solutions. That information includes IDs from partners, so we know which partner the data is coming from.
Pixels, Tags, and SDKs include:
Sync Pixels: These are used to exchange and match Pseudonymous Identifiers between companies that participate in the digital advertising market. By matching, they can synchronise these identifiers to deliver and measure ads.
Tags or Pixels in ads: When a digital ad loads on a page, it can include a Tag or Pixel that we use on behalf of Clients to gather information about where and when the ad was served. This can help to measure ad performance, to ensure ads are shown where intended, and to learn in order to improve ad effectiveness.
Tags or Pixels on publisher Clients’ web pages: For publisher Clients that use the Solutions, they can put our Tags on their sites. The information we collect then enables the Client to learn about their audience, and it enables us to build models for better targeting ads.
Tags or Pixels used by advertiser Clients: When advertiser Clients use our Tags or Pixels, they send us information so we can learn about their customers in order to help them better target their ads.
SDKs: SDKs are bits of computer code that mobile app publisher Clients incorporate into their apps, enabling them to send us information. Similar to Pixels or Tags, the information enables us to offer the Solutions as described in our Privacy Policy.
Probabilistic Identifier
A Probabilistic Identifier is a Pseudonymous Identifier which we create by combining Pseudonymous Identifiers (such as IP Addresses) with Bid Request Data and/or Event Data using non-deterministic, statistical methods to estimate the likelihood that a group of devices may be used by the same user or household, if applicable law or rules allow. For example, we might be able to determine that because a mobile phone and a TV are on the same network, they are likely in the same house. We can then use that information to select and measure ads. Unlike using Cookie IDs, this approach is not 100% accurate and could identify one or many devices.
Process
Refers to any operation or set of operations performed upon Personal Information or sets of Personal Information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Pseudonymous Identifiers
Pseudonymous Identifiers are unique values that distinguish your browser profile(s) or device(s). Pseudonymous Identifiers cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link Pseudonymous Identifiers to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers from doing the same.
Pseudonymous Identifiers are important in digital advertising because they help distinguish browsers or devices over time across different contexts. This is useful for example, to limit the number of times that we show the same ad to one device, to measure the performance of ads, and to target and select personalised ads.
We may incorporate any one of the following types of information in a Quantcast Pseudonymous Identifier:
Third Party Cookie ID: see Cookie ID.
First Party Cookie ID: see Cookie ID.
Hashed email addresses, which are email addresses that have been encoded using a cryptographic hashing function to obfuscate the email.
Third party identifiers
Application ID: an ID that is unique to your mobile device and a particular app on your device.
Application Session ID: like an application ID, except that it is reset periodically (e.g., many browsers reset these after 30 minutes of inactivity).
Exchange User ID: an ID that is sent to us with a Bid Request that identifies the device or browser where an ad is to be shown.
Publisher User ID: digital publishers that use the Solutions can send us an ID to use in the Solutions. The digital publisher hashes or encrypts an identifier available to it. The resulting ID is pseudonymous because it does not directly identify you, but it would be consistent across different publishers, so the Publisher User ID can be used to match data.
TLS Session ID: when you visit a website URL that starts with “https” instead of “http”, that means you have an encrypted connection between your browser and the site. If one of our Pixels, Tags or SDKs loads on the site, that call to our server will also be encrypted. The Session ID identifies a particular session of communication between the browser and the server.
Pseudonymous/Pseudonymised Information
Pseudonymised Information is Personal Information that has been Processed in such a manner that the information can no longer be attributed to a specific user without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal information is not attributed to a specific user.
Segment Data
Segment Data is imported data that is uploaded to the Quantcast platform or provided to us via an API by Clients or Third Party Data Partners. Segment Data is Pseudonymised Information, which may include Online Data and/or Offline Data as well as Attributes, Inferences, or Interests inferred from that data. This category of information is typically called “Segment Data” because it identifies groups of users who fall into advertising segments (e.g., “auto buyers,” “shoe shoppers,” or “women 25-35”). These segments represent groups of users that share (or that are inferred to share) one or more certain characteristics in common (e.g., a client may want to advertise to a segment of “male shoppers who are interested in sports fashion”). These groupings are created by using the intersection of different segments (in the example given, an audience that is simultaneously in the “male”, “shopper”, and “sports fashion” segments). A segment may be identified with a Label (in which case it is referred to as “Label Data”).
Software Development Kit (SDK)
Tag
TCF
See IAB Transparency & Consent Framework.
TCF Purpose/TCF Special Purpose
The TCF has standardised certain Purposes, Special Purposes and Special Features and the descriptions of data processing activity in the digital advertising industry. Through this standardisation, the digital advertising industry can ascribe consistent meanings for the permissions that data subjects give via the TCF. This also ensures a consistent experience for users because they then do not have to read and understand an entirely different set of Purposes, Special Purposes and Special Features for each website they visit.
Because of the benefits of standardising the purposes across the industry, we use the TCF to establish the legal basis to Process Personal Information and use the Purposes, Special Purposes and Special Features in our Privacy Policy to describe much of our data processing activity.
For detailed descriptions of TCF “Purpose” or TCF “Special Purpose”, see IAB Transparency & Consent Framework.
Third Party Cookie/Cookie ID
See Cookie.
Third Party Data
Third Party Data is Imported Data that is uploaded to the Quantcast platform or provided to us via API by third party Data Management Platforms and Data Providers. Third Party Data may include Segment Data.
Training Data
Training Data is Pseudonymous Information that we receive from Clients and third party data providers, where the actual Attributes or Interests of the underlying users are known (even though their actual identities are not known to Quantcast). The Training Data is segmented across various Interests and Attributes, such as shopping interests (e.g., automotive, technology, or restaurants), business and occupation (e.g., management, IT professional or retail), media interests (e.g., cinema, video games, TV), income range, age, marital status, and other socio-economic information and used for data modeling purposes. We use the Training Data to train statistical models to make Inferences. When our systems subsequently receive Event Data relating to a user, we can infer whether the Event Data displays characteristics similar to the Training Data. If the Event Data displays characteristics that are similar to the Training Data, we can infer from that the likely Attributes and Interests of the user to whom the Event Data relates. These Inferences are then used to deliver advertising and provide aggregated, analytical reporting to our Clients.
URL (Uniform Resource Locator)
A URL, also known as a web address, is a reference to a unique web resource that specifies its location on a computer network. Most commonly, a URL points to a web page. URLs can also point to a document, image, video, etc. URLs often use plain text, such as www.quantcast.com; in that case, the domain name must be processed by a Domain Name Server in order to convert the domain name into an IP Address.
Effective August 29th 2023 to February 12th 2024
DownloadTable of Contents
Advertising Exchange
See Exchange/Advertising Exchange.
Attributes/Attribute Information
Attributes are known, observed, or inferred characteristics. Examples of attributes are “male” and “visited XYZ website”. Attributes may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data. Quantcast associates attributes with Pseudonymous Identifiers.
Audience
An Audience is a group of devices and/or users who are known to or are estimated to have certain common characteristics. A characteristic in common may be an Interest, such as an interest in cooking. A characteristic in common may be an Attribute, such as being male, visited a particular digital property, or viewed or interacted with a particular advertisement. One type of Audience is a group who have visited a Client’s digital property. Another type of Audience is a group who have been shown, or may potentially be shown, a Client’s advertisement.
Audience Insights
Audience Insights are data collected, or data that is inferred from data collected, about an Audience. Audience Insights are aggregated, anonymised data and are not Personal Information. An example of an Audience Insight is a report that a given audience is estimated to be 70% male and 3 times as likely to be interested in cooking compared to the general population.
Quantcast provides Audience Insights based on Event Data, Bid Request Data, Client Data, Third Party Data, and Inferred Data to Clients. Audience Insights enable Clients to better understand the audiences who engage with their content and ads.
Bid Request/Bid Request Data
A Bid Request is a request by a digital content publisher (e.g., website owner, app developer, streaming content provider, etc.) for an offer to place an ad in the publisher’s digital content. For example, when you visit an ad-supported web page, Bid Requests are sent by, or on behalf of, the publisher of the web page to multiple parties that may want to show an ad to you. Those parties can bid for the opportunity to show an ad in an auction, and one ad is selected to show on the page. Bid Requests typically go through an Advertising Exchange. This all happens via digital communication between computer servers in less than a second. The contents of the Bid Request may include information about the ad unit (the container in the digital content that will display the ad), the digital content, the device it will be seen on, and your engagement with the publisher’s digital content, so that prospective buyers can choose whether to bid and how much. For most cases, the contents of the Bid Request are defined by the OpenRTB industry standard (https://iabtechlab.com/standards/openrtb/), though not all fields are necessarily included in every Bid Request. Bid Request Data consists of data provided in the Bid Request and will commonly consist of a Pseudonymous Identifier (if available), the content that the ad would serve in (such as the web page, app, video, etc.), the type of device the ad would be served on (i.e., your device type), the approximate geographic location of your device, the size of the ad, the auction ID, and consent information, such as TCF Signals. Bid Request Data also includes Quantcast’s response to the Bid Request, such as whether Quantcast bid on the ad opportunity.
Browsing Data
Browsing Data is information collected relating to your Online activity or behaviour. Browsing Data is generated when a Pixels, Tags, or SDKs installed by a Client on its digital property loads and sends information to us. This includes the website URL of the page you are visiting, often along with a Pseudonymous Identifier, as well as fields of information that may be automatically included from HTTP Header Information, such as referral URLs (which is the URL that directed your browser to the website where an advertisement was served to you).
Browsing Data is included in Event Data.
Client Data
Client Data is Imported Data that is uploaded to the Quantcast platform by a particular advertiser Client for use on its behalf. Client Data is Pseudonymised Information, which defines groups of users. These groups might typically be based on users’ Online Data or Offline Data, or other characteristics or aspects of users’ relationship with the Client. The groups are then used by Quantcast to help deliver advertising campaigns to the right Audiences on behalf of the Client.
Cookie
A Cookie is a small bit of text that is sent to and saved on your computer or device when you visit a website. A Cookie is associated with a single web browser profile; each web browser and browser profile that you use on your device will have separate Cookies. Cookies allow a website to recognise a browser and are commonly used to store user preferences or identifiers, which enables us to collect and use information about browsers over time and across different internet content. Cookies enable us to understand more about users and the content they are visiting over time, which in turn can be used to improve our Clients’ advertising activities and the quality of advertising you experience. The identifiers we store in Cookies are Pseudonymous Information; in other words, they cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link a Pseudonymous Identifier to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers or Pseudonymous Information from doing the same. Browsers have controls that enable users to clear or block Cookies. See your browser help for details.
There are two forms of cookies: First Party Cookies and Third Party Cookies.
A “First Party Cookie” is limited in scope to a particular website you visit (“First Party Cookie”). In some instances, Quantcast is able to store or access information in a First Party Cookie. If www.example.com incorporates Quantcast Pixels, Tags or SDKs into their website, and if you visit www.example.com, Quantcast may set a First-Party Cookie associated with www.example.com. In these instances, Quantcast can store a Pseudonymous Identifier in the First-Party Cookie, but because it is a First Party Cookie, Quantcast can only access that Pseudonymous Identifier in the context of your visits to that site.
A “Third Party Cookie” is a cookie associated with an internet domain that is different from the one you are visiting. For example, if you are visiting www.example.com and a Quantcast Pixel, Tag or SDK on that website is able to set a cookie associated with quantcast.com, that is a Third Party Cookie. That same cookie will be accessible to Quantcast on other sites that also incorporate Quantcast Pixels, Tags or SDKs. Quantcast uses
Pseudonymous Identifiers stored in Third Party Cookies in order to collect information across multiple websites.
Quantcast Cookies placed on your device have a maximum expiry period of 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). Each time you visit a website and a First or Third Party Cookie is placed on your device, the placement of a Cookie begins a new expiry period of up to 13 months (or such shorter period as described in the Privacy Policy “Information Collection” section). All Quantcast Cookies automatically cease providing any data to Quantcast from your browser upon expiration.
Cookie ID/Identifier
A Cookie ID is a unique string of characters that we store in a Cookie that allows us to identify a single web browser instance over time and across different web sites. Our Cookie IDs are Pseudonymous Identifiers. A First Party Cookie ID is a unique Pseudonymous Identifier relating to the First-Party Cookie set by the owner of the website you are visiting. A Third Party Cookie ID is a unique Pseudonymous Identifier relating to the Third-Party Cookie set by Quantcast.
Cookie Syncing/Matching
In the online advertising industry, Cookie Syncing/Matching generally refers to a process through which two entities who each, and separately, identify a device using their own Pseudonymous Identifier can determine which of their respective Pseudonymous Identifiers may relate to the same device. For example, Quantcast may pseudonymously identify a device as “cookie ID 123.” Company B may pseudonymously identify the same device as “cookie ID ABC.” Cookie Syncing/Matching enables Quantcast and Company B to recognise that their respective Pseudonymous identifiers may relate to the device that Quantcast records as “cookie ID 123”.
Quantcast’s Cookie Syncing activities work similarly. If you visit a website that incorporates Pixels, Tags or SDKs from Quantcast, Company B may match its own pseudonymous identifiers to Quantcast Pseudonymous Identifiers (this creates a record of matching pseudonymous identifiers for Company B). Once a match is established, Company B can reference a particular device when communicating with Quantcast, using Quantcast’s Pseudonymous Identifier.
The Cookie Syncing/Matching process does not in itself result in Quantcast sharing Attributes related to Quantcast Pseudonymous Identifiers with Company B. The Cookie Syncing/Matching enables transactions between the parties at a later time; for example, in the case of an Advertising Exchange sending a Bid Request, the Bid Request can contain a previously synched Pseudonymous Identifier.
Cross-Media Matching/Linking
In the online advertising industry, Cross-Media Matching generally refers to a process through which Quantcast links identifiers across a user’s consumption of various media (e.g. audio, video, websites, apps, etc) because such identifiers are known to or Inferred to relate to the same user. Matching/Linking may be undertaken for consumption of media on a single device and for consumption of media on more than one device. As an example, if you visit a digital property using your mobile phone and later visit that same digital property using a browser on your laptop or make visits to several different digital properties using a browser over a period of time, Quantcast may initially determine that these visits are made by different users and assign each device user their own profile.
If, however, Quantcast finds there is sufficient commonality between the Pseudonymous Identifiers associated with the consumption of media, Quantcast will assess that those identifiers may be joined as they are likely to emanate from the same user. This assessment is“probabilistic”– in other words, it uses statistical techniques to determine that the identifiers to be matched have a higher likelihood of relating to the same device and/or user.
Data Management Platforms and Data Providers
Data Management Platforms and Data Providers provide Third Party Data to Quantcast, or provide a platform through which Clients can provide Client Data to Quantcast. These companies either directly licence first and third party Audience Segment Data from different sources (such as Online Data and Offline Data) to businesses or provide a platform through which Clients can collect, organise, and activate such data for Quantcast’s use in connection with the Solutions. We share Pseudonymous Identifiers with Data Management Platforms/Data Providers in order to sync/match identifiers to effectively integrate with their services (see Cookie Syncing/Matching).
Device ID/Identifier
A unique string of characters that can be used to identify a device set by the developer of the device’s operating system (e.g., a mobile phone, tablet, TV, or console). Device Identifiers (or “Device IDs”) serve a similar purpose as Cookies and can be used to provide personalised advertising. A Device ID is a Pseudonymous Identifier.
A Mobile Advertising ID (or “MAID”) is a Device ID assigned to a mobile device by the mobile device operating system. Typically, the device user can reset or turn off the ID via the device’s settings. A MAID is referred to as the IDFA (ID for Advertisers) on iOS devices and GAID (Google Ad ID) on Android mobile devices.
Device Configuration/Device Information
Information about a device or its configuration, transmitted from the device, and typically associated with a Pseudonymous Identifier. The information includes browser, app, or other information about the device (such as device type, screen size and resolution, date and time, and language), which also may include a User Agent. Some Device Information is derived from HTTP Request Header Information.
Event Data
Information collected relating to your Online activity/behaviour, which may include Personal Information in Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, Browsing Data and TCF Signals. Event Data is generated when a Pixel, Tag, or SDK installed on a Client’s digital property loads and sends information to us. Event Data can also be collected from ads, when you view or click on an ad which contains a Tag.
Exchange/Advertising Exchange
A marketplace platform that facilitates automated, real-time, auction-based buying and selling of ad inventory (which are spaces available on sites and apps to display ads). An Advertising Exchange receives Bid Requests from digital publishers and forwards them to advertisers, or to entities like Quantcast who act on behalf of advertisers. Advertisers, or their agents, respond to Bid Requests with a bid amount and an advertisement to provide to a user if they win the auction.
First Party Cookie
See Cookie.
HTTP Request Header Information
HTTP headers are defined by internet standards and contain a number of data fields designed to facilitate communication and interoperability on the internet. On the web, your web browser controls which headers are sent and what the contents are. We receive the headers when a request is sent over the internet to our system, such as when a Pixel loads in your web browser. We also might receive information that has been derived from the HTTP headers from another party, such as in a Bid Request. We use a subset of the header fields for purposes described in the Privacy Policy, which includes:
- IP Address
- Cookie (if available)
User Agent, which is a string (a line of text) identifying the device type, browser type, and version that the user is using to access the web server (“User Agent”)
- Date, which includes the precise time of access
- Referral URL, which is the web page you were on when the request was sent
- TLS Session ID, which identifies a particular session of communication between the browser and the server
- Content-Language, which is the languages of the intended audience for the enclosed content
Detailed documentation related to HTTP header information can be found online in a general search for “HTTP header information fields”.
IAB Transparency & Consent Framework (“TCF”)
The IAB Transparency & Consent Framework, or “TCF,” is a standardised industry program active in countries governed by the GDPR, and designed for notifying users about data Processing by companies involved in digital advertising on sites and apps that users visit, and for establishing a legal basis for that Processing.
The TCF is designed to be used on digital properties, such as websites and apps. The TCF incorporates a consent dialog that displays when users visit a website or app, giving them information about vendors, the data they collect, and the purposes for which they collect it. It also offers an opportunity for users to give or change their permissions for such data collection and use.
The TCF allows Quantcast to work with publishers of websites and other digital properties in a consistent manner using standardised technical specifications to:
(a) provide a link to Quantcast's Privacy Policy, as well as transparency about Quantcast's Processing of Personal Information, the specific purposes for which Quantcast Processes Personal Information, and Quantcast's legal basis for such Processing, directly on the website or other digital property accessed by the user;
(b) allow the user, in a granular manner, to express their consent or refusal to consent, to Quantcast's (i) use of Cookies, and (ii) the purposes of Quantcast's Processing, which are the reasons why Quantcast Processes the personal data of users (“TCF Purposes”), including where Quantcast relies on the user’s consent for such Processing directly on the website or other digital property that the user is accessing;
(c) allow the user to object to Quantcast's Processing of Personal Information (for purposes where Quantcast relies on legitimate interests) directly on the website or other digital property accessed by the user.
Using the TCF allows publishers of websites or other digital properties to provide information about Quantcast’s Processing to users in a consistent manner. The user-facing disclosures presented by these digital properties are sourced from information that Quantcast has registered with the TCF's “Global Vendor List”, a publicly accessible, machine-readable repository of information about TCF-compliant vendors, like Quantcast. This information includes Quantcast’s Privacy Policy URL, the purposes for which it Processes Personal Information, and its legal basis for each of these purposes. As the description of these purposes and minimum standards for disclosures are standardised across all TCF participants, Quantcast knows how operators of websites or other digital properties using the TCF are making disclosures about Quantcast and can have confidence in such disclosures.
In addition, the TCF enables publishers of websites or other digital properties to create and send to Quantcast a standardised technical signal that indicates (A) whether Quantcast’s transparency disclosures were provided to a user; (B) whether or not the user has consented to Quantcast’s Processing and/or each purpose for which Quantcast sought the user's consent; and (c) whether the user objected to Quantcast’s Processing and/or any purposes for which Quantcast Processes Personal Information on the basis of its legitimate interests (the “TCF Signal”).
TCF Signal is collected via Quantcast Tags if the digital property on which the Tag is implemented has also implemented a TCF-compatible Consent Management Platform, which is a company or organisation that centralises and manages transparency for, and consent and objections of, the user (“CMP”) . In addition, TCF Signal is received by Quantcast as part of the Bid Requests it receives from Advertising Exchanges. Quantcast is able to read the standardised TCF Signal and will only Process Personal Information for purposes to which the user has consented (where consent is the legal basis) or not objected (where legitimate interests is the legal basis) in order to provide the Solutions.
Read more about the TCF here https://iabeurope.eu/transparency-consent-framework/
Imported Data
Imported Data is uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”). Imported Data is Pseudonymised Information, which may include information relating to your Online data or Offline data or other information that Clients or partners have about you. For examples of Imported Data provided to Quantcast, see Client Data or Third Party Data.
Imported Data (Client)
See Client Data.
Imported Data (Third Party/Segment)
See Third Party Data.
Imprecise/Approximate Location Information
Typically, in digital advertising we distinguish between precise and imprecise geolocation information.
Precise geolocation usually comes from GPS coordinates from mobile devices, and can have precision up to about one metre. Quantcast does not use precise geolocation data and we request that Clients, partners, and third parties refrain from sending precise geolocation to us. If a party inadvertently sends it, we do not use it in the Solutions and it is removed from our systems within 30 days.
Imprecise geolocation is lower precision, and refers to a general geographic area, for example a country, region, city or division of a metropolitan area, and/or some combination of these, and is often derived from GPS coordinates or from IP Addresses.
Inferences/Inferred Data
Inferences, or Inferred Data, is information that is inferred from data that we have collected about a device, such as Event Data, Bid Request Data, Client Data, or Third Party Data. Our inferences are made using algorithms that estimate the likelihood that the user of a device has particular interests or characteristics. The Inferences are then associated with a Pseudonymous Identifier as part of a set of device Attributes.
For example, if a device frequently visits sports websites, it might be inferred that there is some probability the user of that device likes sports. Similarly, if a device frequently visits an airline provider’s website, it might be inferred that there is some probability a user of that device likes to travel. Other Inferences include things such as Interests, income range, gender, age, marital status, and other socio-economic information.
Inferences associated with any individual device have a high degree of uncertainty. Inferences become more accurate when used to estimate the characteristics of a large group of devices, like an Audience.
Interests
Interests are known, observed, or inferred non-demographic characteristics. Interests are associated with Pseudonymous Identifiers to characterise particular interests of users. Examples of Interests include “cooking” and “outdoor activities”. Interests may be derived from Event Data, Bid Request Data, Client Data, Third Party Data, and Inferences/Inferred Data.
IP Address
An IP (“Internet Protocol”) Address is a unique numerical label corresponding to a computer or device. Computers use IP Addresses to identify each other and know where to send information over the Internet. For example, when you open a web page in your browser a request is made to a server for the web page content. The server knows where to send the content based on the IP Address contained in the request. Computers or other devices are assigned an IP Address from the network the device is on. A device’s IP Address may change over time or as a device changes locations. Also, an IP Address can refer to multiple devices, for example if the devices are behind an internet router.
An IP Address that has been hashed, or encoded using a cryptographic hashing function to obfuscate the email, is treated as a Pseudonymous Identifier.
Labels/Label Data
Labels, or Label Data, are descriptors associated with Pseudonymous Identifiers to denote particular groups of users that can be subsequently used to index all Pseudonymous Identifiers associated with that label. An analogy would be applying a “label” to messages in an email inbox - you might decide to label messages from work as “Work”, family members as “Family,” and so on. These labels then help you readily index and recall particular categories of email.
Labels processed by Quantcast are:
- Labels from Data Management Platforms and Data Providers : these are category Labels (e.g., male, female, age 21-24) acquired from third party data partners relating to a Pseudonymous Identifier;
- Custom-Client Data Labels: these are custom category labels set by Clients corresponding to a device associated with the identifier visiting their digital property (e.g., byline of the news article accessed by the user) or product name (of the product accessed by the user).
- Inferred Data Labels: these are inferred category Labels about a user using a device associated with a Pseudonymous Identifier, e.g., inferred age, inferred gender, inferred interest.
Example Labels are “male” and “visited XYZ website”. Labels may be inferred information (see Inferences/Inferred Data) or may be Imported Data (see Client Data and Third Party Data).
Log Data
Log Data is an industry term that is generally used to refer to data collected from interactions with computer systems, and is used differently by different companies. For purposes of describing our Processing, we use more precise terms, such as Pseudonymous Identifiers, Event Data, Bid Request Data, Client Data, Third Party Data, and/or Inferences/Inferred Data, which are all types of data that can be subsumed within the general industry term “Log Data”. Some elements within Log Data, when isolated from the Pseudonymous Identifiers, will not qualify as Personal Information. For example, a single time zone and publisher URL without an associated Pseudonymous Identifier would not qualify as Personal Information.
Online Data
Data relating to a user’s interaction with digital media including websites, apps and streaming media services.
Offline Data
Data relating to a user’s real-world purchases and/or activity.
Panel
A Panel is a set of individuals who have consented to participate in market research and share information about themselves, their preferences and interests for purposes of research and market analytics.
This information can then be used as the basis for learning or making inferences about a larger population. For example, if a number of people on a Panel share that they visit a particular news website, and of those people, most of them are male and over the age of 50, we might extrapolate from that and say that most of the audience for that website is male and over 50.
Another way to use Panel data is to compare Panel results to the estimates that we have made using our algorithms in order to score the effectiveness of our algorithms. So, if our algorithm predicted for the same news website that most of the audience is under 30, we would learn that our algorithm might be wrong.
Personal Information
Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you, your browser, or your device. We use the term “personal information” to refer to information that is subject to protection under data protection and privacy laws and regulatory regimes around the world. Depending on the jurisdiction, such information may be referred to as “personal data.”
The Personal Information Processed by Quantcast is limited to Pseudonymised Identifiers. Quantcast does not Process Personal Information that directly identifies you as an individual, and that can be used to directly identify you without technical efforts to add additional information, which Quantcast does not have.
Pixels, Tags, and SDKs
Pixels, Tags, and SDKs are computer code embedded in a website that we use to enable the Solutions. We tend to use the terms Pixels, Tags, and SDKs interchangeably. Clients that use the Solutions can put them on their sites, in their apps, or in their ads in order to send us information that is then used in the Solutions. When a Pixel, Tag, or SDK loads and calls our servers, we receive HTTP Header Information, along with other information that is configured by the Client who is using the Solutions. That information includes IDs from partners, so we know which partner the data is coming from.
Pixels, Tags, and SDKs include:
- Sync Pixels: These are used to exchange and match Pseudonymous Identifiers between companies that participate in the digital advertising market. By matching, they can synchronise these identifiers to deliver and measure ads.
- Tags or Pixels in ads: When a digital ad loads on a page, it can include a Tag or Pixel that we use on behalf of Clients to gather information about where and when the ad was served. This can help to measure ad performance, to ensure ads are shown where intended, and to learn in order to improve ad effectiveness.
- Tags or Pixels on publisher Clients’ web pages: For publisher Clients that use the Solutions, they can put our Tags on their sites. The information we collect then enables the Client to learn about their audience, and it enables us to build models for better targeting ads.
- Tags or Pixels used by advertiser Clients: When advertiser Clients use our Tags or Pixels, they send us information so we can learn about their customers in order to help them better target their ads.
- SDKs: SDKs are bits of computer code that mobile app publisher Clients incorporate into their apps, enabling them to send us information. Similar to Pixels or Tags, the information enables us to offer the Solutions as described in our Privacy Policy.
Probabilistic Identifier
A Probabilistic Identifier is a Pseudonymous Identifier which we create by combining Pseudonymous Identifiers (such as IP Addresses) with Bid Request Data and/or Event Data using non-deterministic, statistical methods to estimate the likelihood that a group of devices may be used by the same user or household, if applicable law or rules allow. For example, we might be able to determine that because a mobile phone and a TV are on the same network, they are likely in the same house. We can then use that information to select and measure ads. Unlike using Cookie IDs, this approach is not 100% accurate and could identify one or many devices.
Process
Refers to any operation or set of operations performed upon Personal Information or sets of Personal Information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Pseudonymous Identifiers
Pseudonymous Identifiers are unique values that distinguish your browser profile(s) or device(s). Pseudonymous Identifiers cannot be linked to you as an individual without technical efforts to add additional information, which Quantcast does not have. We do not attempt to link Pseudonymous Identifiers to you as an individual, and we prohibit other parties with whom we share Pseudonymous Identifiers from doing the same.
Pseudonymous Identifiers are important in digital advertising because they help distinguish browsers or devices over time across different contexts. This is useful for example, to limit the number of times that we show the same ad to one device, to measure the performance of ads, and to target and select personalised ads.
We may incorporate any one of the following types of information in a Quantcast Pseudonymous Identifier:
- Third Party Cookie ID: see Cookie ID.
- First Party Cookie ID: see Cookie ID.
- IP Addresses.
- Hashed email addresses, which are email addresses that have been encoded using a cryptographic hashing function to obfuscate the email.
- Device ID.
- Application ID: an ID that is unique to your mobile device and a particular app on your device.
- Application Session ID: like an application ID, except that it is reset periodically (e.g., many browsers reset these after 30 minutes of inactivity).
- Exchange User ID: an ID that is sent to us with a Bid Request that identifies the device or browser where an ad is to be shown.
- Probabilistic Identifier.
- Publisher User ID: digital publishers that use the Solutions can send us an ID to use in the Solutions. The digital publisher hashes or encrypts an identifier available to it. The resulting ID is pseudonymous because it does not directly identify you, but it would be consistent across different publishers, so the Publisher User ID can be used to match data.
- TLS Session ID: when you visit a website URL that starts with “https” instead of “http”, that means you have an encrypted connection between your browser and the site. If one of our Pixels, Tags or SDKs loads on the site, that call to our server will also be encrypted. The Session ID identifies a particular session of communication between the browser and the server.
Pseudonymous/Pseudonymised Information
Pseudonymised Information is Personal Information that has been Processed in such a manner that the information can no longer be attributed to a specific user without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal information is not attributed to a specific user.
Segment Data
Segment Data is imported data that is uploaded to the Quantcast platform or provided to us via an API by Clients or Third Party Data Partners. Segment Data is Pseudonymised Information, which may include Online Data and/or Offline Data as well as Attributes, Inferences, or Interests inferred from that data. This category of information is typically called “Segment Data” because it identifies groups of users who fall into advertising segments (e.g., “auto buyers,” “shoe shoppers,” or “women 25-35”). These segments represent groups of users that share (or that are inferred to share) one or more certain characteristics in common (e.g., a client may want to advertise to a segment of “male shoppers who are interested in sports fashion”). These groupings are created by using the intersection of different segments (in the example given, an audience that is simultaneously in the “male”, “shopper”, and “sports fashion” segments). A segment may be identified with a Label (in which case it is referred to as “Label Data”).
Software Development Kit (SDK)
Tag
TCF
See IAB Transparency & Consent Framework.
TCF Purpose/TCF Special Purpose
The TCF has standardised certain Purposes, Special Purposes and Special Features and the descriptions of data processing activity in the digital advertising industry. Through this standardisation, the digital advertising industry can ascribe consistent meanings for the permissions that data subjects give via the TCF. This also ensures a consistent experience for users because they then do not have to read and understand an entirely different set of Purposes, Special Purposes and Special Features for each website they visit.
Because of the benefits of standardising the purposes across the industry, we use the TCF to establish the legal basis to Process Personal Information and use the Purposes, Special Purposes and Special Features in our Privacy Policy to describe much of our data processing activity.
For detailed descriptions of TCF “Purpose” or TCF “Special Purpose”, see IAB Transparency & Consent Framework.
Third Party Cookie/Cookie ID
See Cookie.
Third Party Data
Third Party Data is Imported Data that is uploaded to the Quantcast platform or provided to us via API by third party Data Management Platforms and Data Providers. Third Party Data may include Segment Data.
Training Data
Training Data is Pseudonymous Information that we receive from Clients and third party data providers, where the actual Attributes or Interests of the underlying users are known (even though their actual identities are not known to Quantcast). The Training Data is segmented across various Interests and Attributes, such as shopping interests (e.g., automotive, technology, or restaurants), business and occupation (e.g., management, IT professional or retail), media interests (e.g., cinema, video games, TV), income range, age, marital status, and other socio-economic information and used for data modeling purposes. We use the Training Data to train statistical models to make Inferences. When our systems subsequently receive Event Data relating to a user, we can infer whether the Event Data displays characteristics similar to the Training Data. If the Event Data displays characteristics that are similar to the Training Data, we can infer from that the likely Attributes and Interests of the user to whom the Event Data relates. These Inferences are then used to deliver advertising and provide aggregated, analytical reporting to our Clients.
URL (Uniform Resource Locator)
A URL, also known as a web address, is a reference to a unique web resource that specifies its location on a computer network. Most commonly, a URL points to a web page. URLs can also point to a document, image, video, etc. URLs often use plain text, such as www.quantcast.com; in that case, the domain name must be processed by a Domain Name Server in order to convert the domain name into an IP Address.
Privacy Implementation for Quantcast Publisher Partners
Effective August 29th 2023
DownloadTable of Contents
Last Update: May 16, 2023
This Privacy Implementation for Quantcast Publisher Partners is for Quantcast publisher partners and clients (“publishers”) who include Quantcast code, such as pixels or tags, on their websites for Quantcast Measure or the Quantcast QID Module in Prebid. It documents certain privacy-related responsibilities for publishers, which are in addition to the US Data Privacy Addendum (the “DPA”). If there is any conflict between this document and the DPA, the DPA is the controlling document.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
This document does not contain legal advice, and adherence to this document does not ensure legal compliance. Publishers must ensure for themselves that they operate in a legal manner, based on their particular circumstances. In the event of any conflict between this document and applicable laws or regulations, the laws or regulations should prevail.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a publisher has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Publishers are responsible for ensuring their own implementation of self-regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms used across jurisdictions that describe the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data.
Where the EU GDPR or the UK GDPR applies, Quantcast is a “controller” of personal data collected using Quantcast tags and pixels dropped on your sites. This document, together with the Quantcast agreement under which you access our services, addresses our respective GDPR compliance responsibilities. Where US state privacy law applies, Quantcast acts as a “third party” unless agreed otherwise.
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, including Quantcast Measure tags and the QID prebid module, publishers are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, publishers have to make sure of notice and choice for their own collection and processing of personal data.
At minimum, and further subject to any other applicable laws or rules, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising and advertising measurement), and how users can exercise their choices. Laws or rules in some jurisdictions, including the EU and the UK, would require that Quantcast be specifically identified in the notice, and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching, and cross-device matching (using passively collected data). The data Quantcast collects includes information about users’ visits to sites, such as IP address, device information, timestamp, referrer URL, etc.
Quantcast implements choice using industry standard methods, and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, publishers need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Publishers should, at minimum, and subject to any additional legal requirements provide a link to the geographically relevant industry opt-out page, including but not limited to YourAdChoices and the NAI in the US, Your Online Choices in Europe, and Your Ad Choices in Canada.
In all cases, publishers should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, publishers are responsible to make sure that tags or pixels don’t fire until that consent is obtained. Publishers must not send to Quantcast, or enable Quantcast to collect, personal data without having established required permissions, and certainly not if the user has explicitly opted out.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the publisher has no operations in Europe. Alternatively, such publishers may elect not to introduce data about EU or UK users into Quantcast’s services. Quantcast Choice is a leading, and TCF compliant, Consent Management Platform. Proper use of Quantcast Choice will meet these TCF requirements.
Publishers not using the TCF for EU or UK users may, only with Quantcast’s express written permission, use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF. In any case, publishers should not allow data to be collected by, or transmitted to, Quantcast on their sites without user consent, and must be able to provide proof of consent to Quantcast, upon request.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt-out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Publishers need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable. Unless agreed otherwise with Quantcast, Quantcast acts as a “third-party,” as defined under the CCPA, with respect to personal data it collects or receives from publishers’ sites. Quantcast will check the US Privacy String, as specified by the IAB.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, Virginia and elsewhere. Publishers need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US Data Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, when acting as a controller or third party, Quantcast will be responsible for honoring users’ access and deletion requests with respect to their personal data that is within Quantcast’s services.
Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category data” under applicable law or data about children under the age of 16, publishers must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and publishers may not send such information to Quantcast or cause Quantcast to collect it. If a publisher has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will publishers use any information collected or generated by Quantcast’s services to identify an individual user.
Privacy Implementation for Quantcast Advertiser Partners
Effective August 26th 2024
DownloadTable of Contents
This Privacy Implementation for Quantcast Advertiser Partners documents certain privacy-related responsibilities for advertisers and agencies, which are in addition to the US State Data Privacy Addendum and the International Data Privacy Addendum (collectively, the “DPAs”). If there is any conflict between this document and the DPAs, the DPAs are the controlling documents.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Partners and clients are responsible for ensuring their own implementation of self- regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms describing the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data. In many relationships with advertiser partners or clients, Quantcast is a controller or joint controller, because of the role that Quantcast plays in defining exactly how data is used. This does not mean Quantcast has unfettered rights to use this data; rather, Quantcast’s use of the data is usually restricted by contractual limitations. If you have questions about this, please consult your agreement or ask your account representative.
Advertisers: Where the EU GDPR or the UK GDPR applies, Quantcast is a joint controller of personal data collected using Quantcast tags and pixels and of other personal data introduced into Quantcast’s services by the advertiser. Where US state privacy law applies, Quantcast acts as a “third party.”
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, or otherwise introducing data into Quantcast’s services, partners and clients are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, partners and clients have to make sure of notice and choice for their own personal data collection and processing.
Generally, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising), and how users can exercise their choices. Laws or rules in some jurisdictions would require that Quantcast be specifically identified in the notice and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching and cross-device matching (using passively collected data).
Quantcast implements choice using industry standard methods and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, partners and clients need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Usually this means providing access to choose within other privacy disclosures, including in a privacy policy.
In all cases, partners and clients should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, partners and clients are responsible to make sure that tags or pixels don’t fire until that consent is obtained.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Europe Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the client or partner has no operations in Europe. Alternatively, such partners and clients may elect not to introduce data about EU or UK users into Quantcast’s services.
Partners and clients not using the TCF for EU or UK users need to use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Partners and clients need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, and Virginia. Partners and clients need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US State Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, as a joint controller or third party, Quantcast will be responsible for providing users access to their personal data that is within Quantcast’s services, and for deleting personal data
after it receives (or is notified of) a user’s request. Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category” under applicable law (including data revealing racial or ethnic origin, political opinions, or parties, religious or philosophical beliefs, trade union membership or related to health status or treatment) or data about children under the age of 16, partners and clients must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law. Sensitive data also includes any data that qualifies as “consumer health data” under the Washington My Health My Data Act, 2023 Wash. Laws 191 or any other equivalent laws.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and partners and clients may not send such information to Quantcast or cause Quantcast to collect it. If a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will clients and other partners use any information collected or generated by Quantcast’s services to identify an individual user.
Effective July 29th 2024 to August 26th 2024
DownloadTable of Contents
This Privacy Implementation for Quantcast Advertiser Partners documents certain privacy-related responsibilities for advertisers and agencies, which are in addition to the US State Data Privacy Addendum and the International Data Privacy Addendum (collectively, the “DPAs”). If there is any conflict between this document and the DPAs, the DPAs are the controlling documents.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Partners and clients are responsible for ensuring their own implementation of self- regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms describing the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data. In many relationships with advertiser partners or clients, Quantcast is a controller or joint controller, because of the role that Quantcast plays in defining exactly how data is used. This does not mean Quantcast has unfettered rights to use this data; rather, Quantcast’s use of the data is usually restricted by contractual limitations. If you have questions about this, please consult your agreement or ask your account representative.
Advertisers: Where the EU GDPR or the UK GDPR applies, Quantcast is a joint controller of personal data collected using Quantcast tags and pixels and of other personal data introduced into Quantcast’s services by the advertiser. Where US state privacy law applies, Quantcast acts as a “third party.”
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, or otherwise introducing data into Quantcast’s services, partners and clients are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, partners and clients have to make sure of notice and choice for their own personal data collection and processing.
Generally, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising), and how users can exercise their choices. Laws or rules in some jurisdictions would require that Quantcast be specifically identified in the notice and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching and cross-device matching (using passively collected data).
Quantcast implements choice using industry standard methods and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, partners and clients need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Usually this means providing access to choose within other privacy disclosures, including in a privacy policy.
In all cases, partners and clients should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, partners and clients are responsible to make sure that tags or pixels don’t fire until that consent is obtained.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Europe Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the client or partner has no operations in Europe. Alternatively, such partners and clients may elect not to introduce data about EU or UK users into Quantcast’s services. Quantcast Choice is a leading, and TCF compliant, Consent Management Platform.
Proper use of Quantcast Choice will meet these requirements.
Partners and clients not using the TCF for EU or UK users need to use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Partners and clients need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, and Virginia. Partners and clients need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US State Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, as a joint controller or third party, Quantcast will be responsible for providing users access to their personal data that is within Quantcast’s services, and for deleting personal data after it receives (or is notified of) a user’s request.
Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category” under applicable law (including data revealing racial or ethnic origin, political opinions, or parties, religious or philosophical beliefs, trade union membership or related to health status or treatment) or data about children under the age of 16, partners and clients must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law. Sensitive data also includes any data that qualifies as “consumer health data” under the Washington My Health My Data Act, 2023 Wash. Laws 191 or any other equivalent laws.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and partners and clients may not send such information to Quantcast or cause Quantcast to collect it. If a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will clients and other partners use any information collected or generated by Quantcast’s services to identify an individual user.
Effective April 5th 2024 to July 29th 2024
DownloadTable of Contents
This Privacy Implementation for Quantcast Advertiser Partners documents certain privacy-related responsibilities for advertisers and agencies, which are in addition to the US State Data Privacy Addendum and the International Data Privacy Addendum (collectively, the “DPAs”). If there is any conflict between this document and the DPAs, the DPAs are the controlling documents.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Partners and clients are responsible for ensuring their own implementation of self-regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms describing the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data. In many relationships with advertiser partners or clients, Quantcast is a controller or joint controller, because of the role that Quantcast plays in defining exactly how data is used. This does not mean Quantcast has unfettered rights to use this data; rather, Quantcast’s use of the data is usually restricted by contractual limitations. If you have questions about this, please consult your agreement or ask your account representative.
Advertisers: Where the EU GDPR or the UK GDPR applies, Quantcast is a joint controller of personal data collected using Quantcast tags and pixels and of other personal data introduced into Quantcast’s services by the advertiser. Where US state privacy law applies, Quantcast acts as a “third party.”
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, or otherwise introducing data into Quantcast’s services, partners and clients are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, partners and clients have to make sure of notice and choice for their own personal data collection and processing.
Generally, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising), and how users can exercise their choices. Laws or rules in some jurisdictions would require that Quantcast be specifically identified in the notice and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching and cross-device matching (using passively collected data).
Quantcast implements choice using industry standard methods and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, partners and clients need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Usually this means providing access to choose within other privacy disclosures, including in a privacy policy.
In all cases, partners and clients should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, partners and clients are responsible to make sure that tags or pixels don’t fire until that consent is obtained.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Europe Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the client or partner has no operations in Europe. Alternatively, such partners and clients may elect not to introduce data about EU or UK users into Quantcast’s services. Quantcast Choice is a leading, and TCF compliant, Consent Management Platform. Proper use of Quantcast Choice will meet these requirements.
Partners and clients not using the TCF for EU or UK users need to use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Partners and clients need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, and Virginia. Partners and clients need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US State Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, as a joint controller or third party, Quantcast will be responsible for providing users access to their personal data that is within Quantcast’s services, and for deleting personal data after it receives (or is notified of) a user’s request.
Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category” under applicable law (including data revealing racial or ethnic origin, political opinions, or parties, religious or philosophical beliefs, trade union membership or related to health status or treatment) or data about children under the age of 16, partners and clients must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law. Sensitive data also includes any data that qualifies as “consumer health data” under the Washington My Health My Data Act, 2023 Wash. Laws 191 or any other equivalent laws.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and partners and clients may not send such information to Quantcast or cause Quantcast to collect it. If a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will publishers use any information collected or generated by Quantcast’s services to identify an individual user.
Effective January 23rd 2024 to April 5th 2024
DownloadTable of Contents
Last Update: September 28, 2023
This Privacy Implementation for Quantcast Advertiser Partners documents certain privacy-related responsibilities for advertisers and agencies, which are in addition to the US State Data Privacy Addendum and the International Data Privacy Addendum (collectively, the “DPAs”). If there is any conflict between this document and the DPAs, the DPAs are the controlling documents.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Partners and clients are responsible for ensuring their own implementation of self-regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms describing the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data. In many relationships with advertiser partners or clients, Quantcast is a controller or joint controller, because of the role that Quantcast plays in defining exactly how data is used. This does not mean Quantcast has unfettered rights to use this data; rather, Quantcast’s use of the data is usually restricted by contractual limitations. If you have questions about this, please consult your agreement or ask your account representative.
Advertisers: Where the EU GDPR or the UK GDPR applies, Quantcast is a joint controller of personal data collected using Quantcast tags and pixels and of other personal data introduced into Quantcast’s services by the advertiser. Where US state privacy law applies, Quantcast acts as a “third party.”
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, or otherwise introducing data into Quantcast’s services, partners and clients are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, partners and clients have to make sure of notice and choice for their own personal data collection and processing.
Generally, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising), and how users can exercise their choices. Laws or rules in some jurisdictions would require that Quantcast be specifically identified in the notice and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching and cross-device matching (using passively collected data).
Quantcast implements choice using industry standard methods and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, partners and clients need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Usually this means providing access to choose within other privacy disclosures, including in a privacy policy.
In all cases, partners and clients should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, partners and clients are responsible to make sure that tags or pixels don’t fire until that consent is obtained.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Europe Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the client or partner has no operations in Europe. Alternatively, such partners and clients may elect not to introduce data about EU or UK users into Quantcast’s services. Quantcast Choice is a leading, and TCF compliant, Consent Management Platform. Proper use of Quantcast Choice will meet these requirements.
Partners and clients not using the TCF for EU or UK users need to use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Partners and clients need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, and Virginia. Partners and clients need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US State Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, as a joint controller or third party, Quantcast will be responsible for providing users access to their personal data that is within Quantcast’s services, and for deleting personal data after it receives (or is notified of) a user’s request.
Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category” under applicable law or data about children under the age of 16, partners and clients must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and partners and clients may not send such information to Quantcast or cause Quantcast to collect it. If a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will publishers use any information collected or generated by Quantcast’s services to identify an individual user.
Effective August 29th 2023 to January 23rd 2024
DownloadTable of Contents
Last Update: May 16, 2023
This Privacy Implementation for Quantcast Advertiser Partners documents certain privacy-related responsibilities for advertisers and agencies, which are in addition to the US State Data Privacy Addendum and the EEA/UK/Swiss Data Privacy Addendum (collectively, the “DPAs”). If there is any conflict between this document and the DPAs, the DPAs are the controlling documents.
Privacy regulation around the world is dynamic. Quantcast may update this document from time to time at its own discretion in order to keep pace with changes in privacy rules and risks, and industry best practices, as well as to ensure users’ rights are honored appropriately.
Quantcast may take reasonable measures to ensure that data processed in its services is collected and processed in accordance with privacy rules and industry best practices. We may review locations where data is collected and may refuse to accept data that is not collected in a manner consistent with the approaches described in this document.
Terminology
This document uses “user” or “users” as interchangeable with “data subject” or “consumer” or other equivalent terms from various rules.
When we say rules, we mean laws, regulations, and industry self-regulatory codes that are applicable to the processing of personal data in relation to Quantcast’s services. Quantcast has a global footprint, including operations in the EU, the UK, and the US (including California), so those jurisdictions’ rules are applicable to Quantcast for data about users who reside in those jurisdictions.
We also will use “personal data” as interchangeable with terms such as, “personal information.” Personal data processed by Quantcast’s service is pseudonymous, including but not limited to IP address, cookie or device IDs, and other identifiers used for advertising-related purposes. In the case where a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Industry standards and self-regulatory programs
Quantcast supports and participates in industry self-regulatory programs, and generally implements industry standards and best practices when it comes to handling personal data. Partners and clients are responsible for ensuring their own implementation of self-regulatory rules and industry best practices, in particular related to providing transparency and choice to users in places where data is collected or used by Quantcast’s services.
Controller, processor, service provider, vendor, etc.
Unfortunately, terms describing the relationships between parties sharing data are not interchangeable. Quantcast determines its role based on applicable law and the facts of its processing of personal data. In many relationships with advertiser partners or clients, Quantcast is a controller or joint controller, because of the role that Quantcast plays in defining exactly how data is used. This does not mean Quantcast has unfettered rights to use this data; rather, Quantcast’s use of the data is usually restricted by contractual limitations. If you have questions about this, please consult your agreement or ask your account representative.
Advertisers: Where the EU GDPR or the UK GDPR applies, Quantcast is a joint controller of personal data collected using Quantcast tags and pixels and of other personal data introduced into Quantcast’s services by the advertiser. Where US state privacy law applies, Quantcast acts as a “third party.”
Notice/Transparency and Choice
Laws, self-regulatory rules, and industry best practice require users be notified about processing of personal data, and be offered a choice – either opt in or opt out — with respect to that processing.
When deploying Quantcast tags or pixels, or otherwise introducing data into Quantcast’s services, partners and clients are responsible to make sure that users are given notice and choice that is required for Quantcast to be able to collect and process the data. And, of course, partners and clients have to make sure of notice and choice for their own personal data collection and processing.
Generally, notice must include the fact that third parties are collecting and processing users’ data, along with information about the data collected, the means of collection, the purposes for processing (including interest-based advertising), and how users can exercise their choices. Laws or rules in some jurisdictions would require that Quantcast be specifically identified in the notice and a link to Quantcast’s privacy policy be included.
Quantcast’s methods of collection include, depending on particular circumstances, cookies, pixels, JavaScript tags, probabilistic device matching and cross-device matching (using passively collected data).
Quantcast implements choice using industry standard methods and will be responsible for honoring that choice with respect to personal data within Quantcast’s services.
For their part, partners and clients need to provide access to the choice using industry standard and legally compliant methods, depending on the applicable laws and rules. Usually this means providing access to choose within other privacy disclosures, including in a privacy policy.
In all cases, partners and clients should have user-facing privacy policies that are prominently linked from their homepages and from content (sites, apps, etc.) where personal data are collected or used.
Privacy policies will adhere to applicable laws, as well as industry self-regulatory requirements and industry best practices. At minimum, policies should disclose the fact that third parties are collecting personal data for advertising-related purposes, and should describe the methods of collection, as described above. Particular circumstances and applicable rules may create additional requirements.
Where consent (opt-in) is required prior to setting cookies or collecting data, such as in Europe under ePrivacy, the GDPR, and the UK GDPR, partners and clients are responsible to make sure that tags or pixels don’t fire until that consent is obtained.
EU and the UK: The industry standard means for ensuring notice and choice for vendors like Quantcast in the EU and the UK is the IAB Europe Transparency and Consent Framework. Quantcast is vendor ID 11. Quantcast’s required purposes and associated legal bases are viewable in the Global Vendor List. Because Quantcast is subject to European law, the TCF should be used for all users in the EU or the UK, even if the client or partner has no operations in Europe. Alternatively, such partners and clients may elect not to introduce data about EU or UK users into Quantcast’s services. Quantcast Choice is a leading, and TCF compliant, Consent Management Platform. Proper use of Quantcast Choice will meet these requirements.
Partners and clients not using the TCF for EU or UK users need to use a legally compliant alternative means to ensure Quantcast’s legal basis for using cookies, where applicable, and for processing the data. This includes that Quantcast must be identified as a controller of the user’s personal data, and a link to Quantcast’s privacy policy must be provided. Quantcast may in the future require TCF.
Privacy policies in the EU and the UK need to include a link to the European Interactive Digital Advertising Alliance (EDAA) opt out page, located at youronlinechoices.com.
US: In the US, along with other requirements laid out here, privacy policies need to include links to an industry standard opt out page, like those offered by the NAI or DAA.
California: The CCPA applies for users in California. Partners and clients need to provide users with notice of their “sale” and “share” opt-out rights and the ability to exercise such rights, as applicable.
Other US states: Applicable state privacy law applies for users in Colorado, Connecticut, Utah, and Virginia. Partners and clients need to provide users with notice of their “sale” and “targeted advertising” opt-out rights and the ability to exercise such rights, as applicable.
US State Privacy Addendum: The processing of US users’ personal data in connection with Quantcast’s services shall be governed by the US State Privacy Addendum, which is available here.
Access and Deletion
Under applicable law, including the EU GDPR, the UK GDPR, and the US state privacy laws, as a joint controller or third party, Quantcast will be responsible for providing users access to their personal data that is within Quantcast’s services, and for deleting personal data after it receives (or is notified of) a user’s request.
Other Matters
Sensitive data. Because Quantcast’s services are not intended for processing data regarded as “sensitive” or “special category” under applicable law or data about children under the age of 16, partners and clients must not transmit to Quantcast or cause Quantcast to collect any such data. Quantcast tags and pixels may not be deployed on content that is directed at children under the age of 16. Sensitive or special category data includes the types of data listed in Article 9 of the EU GDPR, Section 1798.140 of the CCPA (as amended by the CPRA), or any equivalent term under applicable law.
Directly identifying personal data. Quantcast’s services are not designed to process directly identifying personal data, such as names or email addresses, and partners and clients may not send such information to Quantcast or cause Quantcast to collect it. If a partner has express permission from Quantcast to use email address, phone number, or other directly identifying information, such information will be pseudonymized (usually hashed or encrypted,) according to Quantcast specifications, before transmitting to Quantcast.
Reidentification. Under no circumstances will publishers use any information collected or generated by Quantcast’s services to identify an individual user.
Laws
Effective September 11th 2023
DownloadTable of Contents
Laws that may require us to process your information
As described in our Privacy Policy, we process information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. See below the current list of laws which are enforceable in Ireland that give rise to a legal obligation for Quantcast which results in the processing of information. New laws may be enacted, or other obligations may become binding on our processing of your information which may require us to process your information, and we will update this list from time to time.
Civil and Commercial Laws:
Court orders requiring the processing of information can be issued under:
- Regulation (EU) No 1215/2012 on jurisdiction and the recognition and enforcement of judgments in civil and commercial matters.
- Council Regulation (EC) No 1206/2001 of 28 May 2001 on cooperation between the courts of the Member States in the taking of evidence in civil or commercial matters.
Criminal Laws:
Search warrants and production orders requiring the processing of information can be issued under:
- Section 10 of the Criminal Justice (Miscellaneous Provisions) Act 1997 as amended by 6(1)(a) of the Criminal Justice Act 2006
- Section 7 of the Child Trafficking and Pornography Act 1998
- Section 14 of the Criminal Assets Bureau Act 1996
- Section 63 Criminal Justice Act 1994, as amended
- Section 15 of the Criminal Justice Act 2011
- Section 7 Criminal Justice (Offences Relating to Information Systems) Act 2017
- Section 48(2) and Section 52 of the Criminal Justice (Theft and Fraud Offences) Act 2001
- Section 74 and Section 75 of the Criminal Law (Mutual Assistance) Act 2008
- Section 96 of the Garda Síochána Act 2005
- Section 51(6)(b) of the International Criminal Court Act 2006
- Section 26 of the Misuse of Drugs Act 1977, as amended
- Section 29 of the Offences Against the State Act 1939
- Section 16 of the Official Secrets Act 1963
- Section 25 of the Prevention of Corruption (Amendment) Act 2001
Consumer Laws:
Regulatory requests requiring the processing of information can be issued under:
- Section 11, Section 18 and Section 36 of the Competition and Consumer Protection Act 2014.
Corporate and Taxation Laws:
Regulatory requests requiring the processing of information can be issued under:
- Section 787 of the Companies Act 2014.
Regulatory:
Regulatory requests requiring the processing of information can be issued under:
- Chapters IV and VI of General Data Protection Regulation, Part 6 of the Data Protection Act 2018.
Quantcast Partners
Effective September 11th 2023
DownloadTable of Contents
Last Updated: December 8, 2022
We partner with other companies to help us provide and improve our services and products. Sometimes, it is necessary for us to share information that could be considered to be personal information about you with these partners. (Remember that we don’t share directly identifiable information about consumers, such as your name or address, because we do not collect that type of information, as discussed in our Products and Services Privacy Policy).
Products and Services Partners
Listed below are the partners with whom we share information in the provision of Quantcast’s products and services to our clients. This list identifies those partners, and lists links to their respective privacy policies and opt-out links so that you can learn more about their data collection and usage practices.
We are continually improving and updating our services and our partners will change over time. We will update this page to reflect those changes. Please visit our Products and Services Privacy Policy for more information about Quantcast’s data practices.
Please note that the links in the tables below are provided for your convenience. Each is solely maintained by the respective partner, and are subject to change at such partner’s discretion.
Ad Serving
The companies in this category serve digital advertisements on various digital platforms such as the web, social media, or mobile apps, and issue reports on the performance of advertising campaigns (e.g., the number of users who saw a particular ad, the particular ad type that was served, etc.). We need to use these vendors to deliver and measure the advertising campaigns that we serve. To do this, these vendors collect and use certain identifiers, such as the IP address of the visitor to the digital platform (e.g. to deliver the ad to that visitor’s browser or device) and an identifier specific to the advertisement (so they can identify the ad they need to serve and measure).
Partner | Privacy Policy | Opt-Out Link or Contact |
Advanse, LLC | ||
Google LLC (fka Doubleclick, a division of Google Inc.) | ||
Jivox Corporation |
Ad Verification
These companies provide a technology to ensure that digital advertisements appear on intended sites and reach the targeted audience; examples include measuring the viewability of an ad, brand safety and fraud (e.g., whether a site is safe for the particular advertiser’s brand or whether it is a fraudulent site). We use these vendors in order to better meet the requirements of our clients and deliver more effective advertising. These companies collect and use certain identifiers, such as the IP address of the visitor to the digital platform and an identifier specific to the advertisement (so that they can pass these details to the ad server, if they determine it is appropriate for the ad server to deliver the ad).
Partner | Privacy Policy | Opt-Out Link or Contact |
DoubleVerify, Inc. | ||
Integral Ad Science (IAS) | ||
Rockerbox, Inc. |
Data Management Platforms and Data Providers
These companies either directly license first and third party digital audience segment data from different sources (such as online, offline and mobile) to businesses or provide a platform through which Quantcast clients can collect, organize and activate such data for Quantcast’s use in connection with its advertising or analytics services. We share online identifiers (e.g., cookie IDs) with them in order to sync identifiers to effectively integrate with their services.
Partner | Privacy Policy | Opt-Out Link or Contact |
Adobe Systems Incorporated | ||
Dynata, LLC/Research Now Group, Inc. | ||
LiveRamp, Inc. | ||
Lotame Solutions, Inc. | ||
Neustar Information Services, Inc. | ||
Oracle America, Inc. | ||
Salesforce Audience Studio (formerly Krux Digital LLC) |
Real-Time Bidding Exchanges
These companies provide a platform that facilitates the buying and selling of online ad impressions through real-time auctions. Quantcast participates as a buyer on these platforms in order to deliver an ad to an end user on a webpage or app. We share online identifiers (e.g., cookie ID) with them in order to sync identifiers to effectively integrate with their services.
Partner | Privacy Policy | Opt-Out Link or Contact |
Bidswitch GmbH | ||
Google LLC (fka DoubleClick Ad Exchange, a division of Google Inc.) | ||
EMX Digital, LLC | ||
Index Exchange Inc. | ||
Lijit Networks, Inc. (Sovrn) | ||
LKQD, a division of Nexstar Digital LLC | ||
Magnite, Inc. (fka SpotX, Telaria, Inc. and The Rubicon Project, Inc.) | ||
OpenX Technologies, Inc. | ||
Outbrain Inc. | ||
Publisher First, Inc. (dba Freestar) | ||
PubMatic, Inc. | ||
Sharethrough, Inc. | ||
Smart AdServer | ||
SpotX, Inc. | ||
Taboola, Inc. | ||
Teads France SAS | ||
Triple Lift, Inc. | ||
Unruly Group, Limited | ||
Verizon Media Group (fka Oath Americas, Inc. and YahooAdTech LLC) | ||
Xandr Inc. (fka AppNexus, Inc.) |
Corporate Partners
In addition to the products and services partners listed above, Quantcast also shares information with the partners listed below in the course of its general corporate activities, such as sales, marketing, and general administration, as governed by our Website and Corporate Privacy Policy.
Infrastructure
These are companies who provide cloud-based hosting, storage and processing infrastructure and services to enable Quantcast to provide its services to clients. Quantcast may store any of the data that it collects on its own servers or through these infrastructure partners.
Partner | Privacy Policy | Opt-Out Link or Contact |
Amazon Web Services | ||
Snowflake Computing, Inc. |
Marketing and Customer Research
Quantcast works with companies to collect and analyze online behavior about Quantcast products for market research, customer satisfaction, website feedback and concept testing. To do so, Quantcast includes the tag of these companies on its webpages or other digital applications. By virtue of their tag on the Quantcast site or code in a Quantcast SDK, these vendors collect online identifiers (e.g., cookie identifiers, IP address and device identifiers). Please see their privacy policies for more information about the data they collect via their tags or SDKs.
Partner | Privacy Policy | Opt-Out Link or Contact |
Drift.com, Inc. | ||
Episerver Inc. (t/a Optimizely) | ||
Facebook, Inc. (social plugins) | ||
Flashtalking, Inc. | ||
FullStory, Inc. | ||
Google LLC (Google Analytics and Google Adwords) | ||
Heap, Inc. | ||
Hotjar Ltd. | ||
Marketo, Inc. | ||
Microsoft Corporation (Bing Advertise) | ||
OneClipboard Inc. (dba Splashthat) | ||
Qualtrics, LLC | ||
Zendesk, Inc. | ||
Zoominfo, inc. |
Quantcast Advertise Insertion Order Terms & Conditions
Effective April 3rd 2024
DownloadTable of Contents
Last Updated: September 28, 2023
j. Additional Company Representation and Warranty.
i. Company represents and warrants that it will comply with all applicable laws and has obtained all necessary licensure for performance hereunder, and that Ads will not infringe or violate any applicable laws, ordinances, rules, codes, or regulations (including, without limitation, any industry-specific ethical, professional, or self-regulatory requirements or guidelines, and Applicable Privacy Laws) or the rights of any third party. If Company is an Agency (as defined in the 4As Terms), Company also represents and warrants that it has the authority to bind its Clients to these IO Terms and each IO, and that all of Company’s actions related to these IO Terms and each IO will be within the scope of such agency.
k. For Placements Priced on a CPA basis.
i. Company agrees to pay Quantcast for the conversions and click-thru conversions as stated within the applicable placement. The conversion is defined as from both click-thru and view-thru conversions.
q. System of Record: Quantcast is the system of record and is solely responsible for calculating and reporting metrics related to inventory purchases, impressions and all amounts owed under these IO Terms.
Effective January 23rd 2024 to April 3rd 2024
DownloadTable of Contents
Last Updated: September 28, 2023
j. Additional Company Representation and Warranty.
i. Company represents and warrants that it will comply with all applicable laws and has obtained all necessary licensure for performance hereunder, and that Ads will not infringe or violate any applicable laws, ordinances, rules, codes, or regulations (including, without limitation, any industry-specific ethical, professional, or self-regulatory requirements or guidelines, and Applicable Privacy Laws) or the rights of any third party. If Company is an Agency (as defined in the 4As Terms), Company also represents and warrants that it has the authority to bind its Clients to these IO Terms and each IO, and that all of Company’s actions related to these IO Terms and each IO will be within the scope of such agency.
k. For Placements Priced on a CPA basis.
i. Company agrees to pay Quantcast for the conversions and click-thru conversions as stated within the applicable placement. The conversion is defined as from both click-thru and view-thru conversions.
q. System of Record: Quantcast is the system of record and is solely responsible for calculating and reporting metrics related to inventory purchases, impressions and all amounts owed under these IO Terms.
Effective January 23rd 2024 to January 23rd 2024
DownloadTable of Contents
Last Updated: September 28, 2023
j. Additional Company Representation and Warranty.
i. Company represents and warrants that it will comply with all applicable laws and has obtained all necessary licensure for performance hereunder, and that Ads will not infringe or violate any applicable laws, ordinances, rules, codes, or regulations (including, without limitation, any industry-specific ethical, professional, or self-regulatory requirements or guidelines, and Applicable Privacy Laws) or the rights of any third party. If Company is an Agency (as defined in the 4As Terms), Company also represents and warrants that it has the authority to bind its Clients to these IO Terms and each IO, and that all of Company’s actions related to these IO Terms and each IO will be within the scope of such agency.
k. For Placements Priced on a CPA basis.
i. Company agrees to pay Quantcast for the conversions and click-thru conversions as stated within the applicable placement. The conversion is defined as from both click-thru and view-thru conversions.
q. System of Record: Quantcast is the system of record and is solely responsible for calculating and reporting metrics related to inventory purchases, impressions and all amounts owed under these IO Terms.
Effective September 11th 2023 to January 23rd 2024
DownloadTable of Contents
Last Updated: August 25, 2023
j. Additional Company Representation and Warranty.
i. Company represents and warrants that it will comply with all applicable laws and has obtained all necessary licensure for performance hereunder, and that Ads will not infringe or violate any applicable laws, ordinances, rules, codes, or regulations (including, without limitation, any industry-specific ethical, professional, or self-regulatory requirements or guidelines, and Applicable Privacy Laws) or the rights of any third party. If Company is an Agency (as defined in the 4As Terms), Company also represents and warrants that it has the authority to bind its Clients to these IO Terms and each IO, and that all of Company’s actions related to these IO Terms and each IO will be within the scope of such agency.
k. For Placements Priced on a CPA basis.
i. Company agrees to pay Quantcast for the conversions and click-thru conversions as stated within the applicable placement. The conversion is defined as from both click-thru and view-thru conversions.
q. System of Record: Quantcast is the system of record and is solely responsible for calculating and reporting metrics related to inventory purchases, impressions and all amounts owed under these IO Terms.
Effective September 11th 2023 to September 11th 2023
DownloadTable of Contents
Last Updated: August 25, 2023
j. Additional Company Representation and Warranty.
i. Company represents and warrants that it will comply with all applicable laws and has obtained all necessary licensure for performance hereunder, and that Ads will not infringe or violate any applicable laws, ordinances, rules, codes, or regulations (including, without limitation, any industry-specific ethical, professional, or self-regulatory requirements or guidelines, and Applicable Privacy Laws) or the rights of any third party. If Company is an Agency (as defined in the 4As Terms), Company also represents and warrants that it has the authority to bind its Clients to these IO Terms and each IO, and that all of Company’s actions related to these IO Terms and each IO will be within the scope of such agency.
k. For Placements Priced on a CPA basis.
i. Company agrees to pay Quantcast for the conversions and click-thru conversions as stated within the applicable placement. The conversion is defined as from both click-thru and view-thru conversions.
q. System of Record: Quantcast is the system of record and is solely responsible for calculating and reporting metrics related to inventory purchases, impressions and all amounts owed under these IO Terms.
Campaign Policy
Effective September 11th 2023
DownloadTable of Contents
Campaign Policy
Quantcast requires its Customers, Authorized Users, Clients, and Affiliates (“Clients”) using Quantcast products and/or services, including the Quantcast Platform (also, “Platform”), to comply with the standards and requirements outlined in Quantcast policies, including this Campaign Policy and, for Platform Clients, the Implementation Guide for Restricted Advertising Categories and Restricted Data, available in the Platform Help Center, to configure their campaigns and ad sets to comply with this Policy. In addition to this Campaign Policy, all users must also comply with all applicable laws, rules, ordinances, codes, and regulations, including, without limitation, applicable industry-specific ethical, professional, and/or self-regulatory requirements. In the US, Clients and advertisers must comply with the NAI Code of Conduct in effect at the time of campaign launch. By using Quantcast advertising services or technology, Client agrees to the privacy requirements posted here.
Quantcast reserves the right, in its sole discretion, to (1) review accounts, campaigns, ads, and/or usage of Quantcast products and services, including but not limited to those campaigns planned, launched, and delivered through the Platform for compliance with this Campaign Policy; and (2) suspend, require revisions to, and/or terminate accounts, campaigns, and/or creatives as a result of such review. Where possible, Quantcast will attempt to notify Clients when a violation of the policy occurs. In such cases, Clients may contact their Account Manager for assistance, but remain responsible for all actions initiated using Quantcast products and/or services, whether or not Quantcast was also involved in the selection and/or provision of campaign services and/or strategies.
Note that Quantcast classifies Clients at the Advertiser level into industry categories consistent with the Interactive Advertising Bureau (“IAB”) advertising industry categories. Accounts for advertisers operating in industries that may implicate Restricted Advertising Categories (see below) are subject to periodic review, and campaigns may be held prior to launch.
Prohibited Content and Practices
A given campaign or ad set may implicate one or more Prohibited Content and Practice and/or Restricted Data types: all campaigns and ad sets must comply with all implicated restrictions.
Campaigns that promote and/or contain the following content are prohibited:
- Products, services, or activities that are illegal or of questionable legality, such as sites that sell fake identification cards or academic cheating services;
- Use of Quantcast products or services to discriminate against specific groups of people through affirmative targeting or exclusion; or use of discriminatory content/creatives;
- Use of Quantcast products or services to exploit vulnerable populations;
- Sexually explicit or pornographic content (excluding campaigns for undergarments, adult products, and other products that meet certain restrictions);
- Outside of North America, campaigns for healthcare products and services (excluding personal hygiene, cosmetic, first aid, and wellness products);
- Hate speech, which is defined as abusive or threatening speech or writing that expresses prejudice against a protected class, e.g., race, religion, or sexual orientation; intolerance, discrimination, profanity, or inciting violence;
- False advertising and/or content that is unfair, misleading, deceptive, abusive, or false, through claims, imagery, or suggestion;
- Illegal drugs, recreational drugs, and/or or products that facilitate their use, even in geographies where such substances or products may be legal; content that promotes or glamorizes the consumption of illegal drugs;
- Tobacco, nicotine, and/or products that facilitate their use, including e-cigarettes;
- Personal weapons and ammunition (excluding cooking equipment, kitchen and hunting knives, hunting equipment other than guns, airsoft guns, non-functioning antique and replica guns, decorative swords, paintball guns and accessories, gun ranges, and publications related to guns unless prohibited by law);
- Content that infringes on intellectual property rights of others;
- Content that includes or disseminates malware, spyware, and/or computer viruses; and/or
- Content or advertising that is designed to reach children under 16.
Restricted Data Types
In connection with the use of any Quantcast product or service, where prohibited by applicable law (or where enhanced/heightened consent is required), Clients may not collect, use, or provide to Quantcast personal data revealing a restricted attribute or characteristic (Restricted Characteristics) explicitly, by inference, or otherwise, including in creatives and/or strategies like targeting and/or tagging. Restricted Characteristics are defined by applicable law and include but are not limited to:
- Race or ethnicity/ethnic origin, color, and national origin, including citizenship or immigration status
- Religious and/or philosophical beliefs
- Political opinions or affiliations
- Health or concerning health (including mental health, genetic, and biometric data/information)
- Sexual life and/or sexual orientation
- Marital and/or familial status
- Disability or handicap
- Trade union membership
- Criminal convictions or offenses
Restricted Advertising Categories
Accounts and campaigns in the following categories are subject to periodic review; campaigns may be held prior to launch.
Quantcast permits the use of its products and services for the following categories, which may be updated from time to time at Quantcast’s sole discretion. For the avoidance of doubt, Clients remain responsible for compliance with all laws, regulations, and reasonable industry customs, including but not limited to campaign content and strategy.
In certain geographies, the collection of information about certain user attributes or characteristics, or the inference thereof, is not permitted by law. For all Quantcast Campaigns, Clients are prohibited from targeting audiences, tagging pages, or otherwise using Quantcast products or services in a way that would collect information from users, or would allow inferences about users to be made, relating to attributes or characteristics prohibited by law or self-regulatory codes (see Restricted Data Types). Similarly, Platform clients are prohibited from inputting Interests while creating an audience that could lead to reaching users based on one or several Restricted Characteristic(s).
Alcohol
- Advertising is supported for Alcohol campaigns, including alcohol products such as beer, wine, spirits, non-alcoholic drinks used as mixers, alcohol-related destinations such as vineyards, bars, and distilleries, and to a limited extent, alcohol delivery services, where available and permitted by law. Campaign restrictions vary by geography, and Clients remain responsible for compliance with all laws, regulations, and industry standards, including procuring and maintaining valid licensure, where required.
- Creatives must contain a responsible drinking disclosure as required by laws of the geography where the ads are displayed and/or self-regulatory codes, such as: “Please drink responsibly”; "For legal drinking age: 21+" [or other age as required].
- Where required by law, landing pages must include age self-verification for visitors (age varies by geography).
- Ad delivery must be tailored to a permissible age group. For example, in the United States, site delivery locations must meet a minimum visitor composition of 21+ (other variations by geography). Additionally, some geographies may have display time prohibitions, such as requiring that ad timing avoids placement during, before, or after childrens’ programming.
- Campaigns must not: appeal to minors; include athletes or portray characters who appear under the age of 25; make health, therapeutic, or social status claims (e.g., by claiming to reduce stress levels or improve sex life); and/or depict irresponsible or dangerous consumption or irresponsible activities while drinking (e.g., driving, operating machinery).
Cannabis and Products Related to its Use
- Campaigns for Cannabis and Products related to its use are limited to audiences in Canada. Clients remain responsible for compliance with all applicable regulations.
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request.
- Clients must undertake reasonable steps to ensure that the ad cannot be viewed or accessed by young persons;
- Only information or brand preference campaigns are permitted.
- Cannabis and related products ad campaigns must not: contain any direct or implied health, curative, drug, or other therapeutic claims (including claims of physical, mental health benefits or cosmetic benefits); be directed to, attract or appeal to minors (such as with cartoons, child-friendly public figures, showing CBD as toys, marketing CBD as candy, etc.); be by means of a testimonial or endorsement; associate the promotion with an alcoholic beverage, tobacco or vaping product.
Cannabidiol (“CBD”)
- Cannabidiol campaigns are limited to certain geographies within the United States and Canada. Clients remain responsible for compliance with all applicable regulations.
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request.
- Some geographies may have display time prohibitions, such as requiring that ad timing avoids placement during, before, or after childrens’ programming.
- For any permitted CBD product campaigns, Clients must confirm: the CBD product is derived solely from hemp and not from cannabis plants; and the CBD has a THC composition below the locally mandated requirement (0.3% or less* in most geographies, but lower elsewhere, e.g., in Idaho, 0%).
- All campaigns related to vaping or vapable CBD are prohibited, including vapable CBD oil, cartridges, and products related to their use (including vaporizers, pens, pipes, etc.). Campaigns for Delta-8 are also prohibited.
- Landing pages for permitted CBD campaigns may not include sale of prohibited products, even if the campaign is promoting a permitted product. For example, a campaign advertising CBD gummy bears with a landing page that also sells smokable CBD cartridges and e-cigarettes is not permitted.
- CBD ad campaigns must not: contain any direct or implied health, curative, drug, or other therapeutic claims (including claims of physical or mental health benefits); or attract or appeal to minors (such as with cartoons, child-friendly public figures, showing CBD as toys, marketing CBD as candy, etc.).
Casinos and Gambling
- Where permitted by law, campaigns for casinos and gambling services are supported, including for sports betting, fantasy sports betting, online casinos, state lotteries, online horse race betting, and brick and mortar casinos.
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request.
- Creatives must contain a responsible gambling message, such as: “If you or someone you know has a gambling problem, help is available”; as well as other disclosures as required, for example, providing information about the addictive risks of the advertised games of chance, the prohibition of participation by minors, and the availability of counseling and therapy.
- Landing pages must include age self-verification for visitors (age requirement varies by geography).
- Ad delivery must be generally tailored to a permissible age group (which varies by geography).
- Some geographies and publishers may have display time prohibitions, such as avoiding placement during, before, or after childrens’ programming and/or live sporting events, sexual, religious, and/or political media.
- Campaigns must not: appeal to minors, portray characters who appear under the age of 25; advertise casinos or gambling activities for which the Client is not licensed in each geography in which the ads shall be displayed; target individuals self-identifying as gambling addicts on “self-exclusion lists” or seeking help for gambling addictions; encourage problem gambling, promise to fix problems (social, educational, professional, or personal), or suggest gambling is an alternative to employment; and/or suggest that skill can influence games of chance.
Charitable Organizations
- Advertising campaigns for Charitable Organizations are supported at Quantcast for advocacy campaigns (to create support for specific policies, like legal reform), awareness campaigns (which focus on education about causes to raise support), and fundraising campaigns.
- Campaigns may only be run on behalf of charities that have been formally registered as nonprofit organizations in the geographies within which the Clients wish to run their campaign(s).
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request, (such as proof of 501(c)(3) nonprofit status with the IRS in the United States or registration on the Charity Register in the United Kingdom).
Cryptocurrency
- Where permitted by law, cryptocurrency campaigns are supported for Clients with required licensure for cryptocurrencies, cryptocurrency exchanges, and products and services associated with cryptocurrency mining, including facilitating use of computing resources (such as hardware products designed for cryptocurrency mining, cloud-based cryptocurrency mining services, and guides for mining cryptocurrency).
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request.
- Campaigns for initial coin offerings and new token sales are prohibited.
Defense Industry
- Advertising for the Defense Industry is permitted in certain circumstances.
- Campaigns must not: depict firearms.
Employment
- Advertising is supported for Employment campaigns, including campaigns for recruiting, hiring, job sites, job fairs and events, and internships.
- Campaigns must not: engage in or have the effect of discrimination of legally-protected class demographics as set forth in applicable civil rights, privacy, or other laws and self-regulatory codes. The prohibition also applies to targeting criteria that may be a proxy for protected classes, sometimes including zip codes. Protected classes vary by geography but generally include:
- Race, color, ethnicity, or national origin;
- Religion and/or political or philosophical belief;
- Sex, gender or gender affiliation/identity, or sexual orientation;
- Marital status and/or familial status;
- Age (provided the applicant has the capacity to contract);
- An applicant’s receipt of income (if derived from any public assistance program);
- An applicant’s exercise, in good faith, of any right under a consumer protection law.
Healthcare Products & Services (North America Only)
- Advertising for certain healthcare products and services is permitted in North America.
- Note that globally, campaigns for first aid, personal hygiene, beauty products, wellness, and over-the-counter products for general consumption are not considered healthcare and are supported, so long as products are not offered as a treatment for any specific condition or diagnosis.
- Example: Band-aids are considered a first-aid product.
- Example: Toothpaste for general consumption is considered personal hygiene, i.e., not for the treatment of gingivitis or other conditions or diagnosis.
- Example: Shampoo for general consumption, i.e., not for the treatment of alopecia, dandruff, or other conditions or diagnosis.
- Example: Beauty creams and serums, i.e., not for the treatment of eczema.
- Example: Tylenol for general household use.
- Where permitted:
- Clients may not provide to Quantcast any Sensitive Personal Information of consumers or users;
- Campaigns must not involve any sensitive health condition (as defined by the NAI Code of Conduct);
- Campaigns must include required disclaimers; adhere to applicable content restrictions (limitations on creatives); adhere to audience targeting requirements and restrictions.
- Clients must have and maintain pre-clearance; authorization and/or licensure where required by law, and make such licensure available to Quantcast upon request.
- Campaigns must not: seek to target audiences based on condition diagnosis, or other Sensitive Personal Information; make false treatment claims; and/or promote products subject to recalls or significant government actions (e.g., OxyContin).
Hunting Equipment
- Advertising for limited hunting equipment is supported unless prohibited by applicable law. Advertising for firearms, even if solely for hunting, is not permitted, regardless of whether permitted by law.
Housing
- Advertising is supported for Housing campaigns, including campaigns selling residential and commercial real estate, purchasing residential and commercial real estate, residential commercial real estate services (agents, transactions, listings), residential real estate mortgage loans (APR < 36%), residential real estate home improvement loans (APR < 36%), residential real estate insurance (homeowners’, renters’), residential and commercial real estate development, retirement and disability housing opportunities, and home improvement services.
- Non-discrimination: campaigns must not engage in or have the effect of discrimination of legally-protected classes. The prohibition extends to targeting criteria that may be a proxy for protected classes, sometimes including zip codes. Protected classes vary by geography but generally include:
- Race, color, ethnicity, or national origin;
- Religion and/or political or philosophical belief;
- Sex, gender, or gender affiliation;
- Marital status and/or familial status;
- Age (provided the applicant has the capacity to contract);
- The applicant’s receipt of income (if derived from any public assistance program);
- The applicant’s exercise, in good faith, of any right under a consumer protection law.
Financial products and services
- Advertising is supported for Financial Services campaigns, including for credit cards (with APR < 36%), personal loans (with terms of at least 90 days and APR < 36%), loans for homes, RVs, and boats (with terms of at least 90 days and APR < 36%), nonprofit debt services (where the Client is an approved nonprofit budget and credit counseling agency or a national nonprofit association representing nonprofit credit counseling agencies), banking, financial planning and annuities, insurance (including car, home, RV, boat, and life), tax planning services, and credit monitoring services (excluding credit repair services).
- Clients must have and maintain licensure where required by law, and make such licensure available to Quantcast upon request.
- Clients must include specific disclosures required by local law.
- Campaigns must not promote: short-term loans with a repayment schedule of less than 90 days; high-interest loans or credit cards (i.e., with an APR of 36% or higher); credit repair services; payday loans or for-profit debt services.
- Non-discrimination: campaigns must not engage in or have the effect of improper discrimination of legally-protected class demographics as set forth in applicable civil rights, privacy, or other laws and self-regulatory codes. The prohibition also applies to targeting criteria that may be a proxy for protected classes, sometimes including zip codes. Protected classes vary by geography but generally include:
- Race, color, ethnicity, or national origin;
- Religion and/or political or philosophical belief;
- Sex, gender, or gender affiliation;
- Marital status and/or familial status;
- Age (provided the applicant has the capacity to contract);
- The applicant’s receipt of income (if derived from any public assistance program)
- The applicant’s exercise, in good faith, of any right under a consumer protection law.
Candidate and Issue Campaigns
- Responsible advertising for Political Campaigns may be permitted in limited circumstances in the United States only on a case-by-case basis.
- Clients must have and maintain licensure where required by law, and make such licensure available.
- Campaign content must include disclosures and disclaimers as required by applicable law, including a “paid for” disclaimer to show the entity or the person responsible for the ad.
- Campaigns must not be funded by or otherwise involve foreign national interference; incite violence; encourage lawlessness or insurrection; include hate speech; constitute the distribution of “fake news”; or discriminate or suggest discrimination based on any protected class characteristics or otherwise.
Restricted Characteristics
- Regardless of the industry or product category, ad sets and creatives that could reveal or reasonably allow making an inference about a Restricted Characteristic of a user who showed an interest in said creative (i.e., clicking the ad) are not permitted.
- Where prohibited by law or self-regulatory code, targeting users based on a known and/or inferred Restricted Characteristic is not permitted.
- Tagging or placing pixels on websites and pages featuring content that could reasonably allow making an inference about the Restricted Characteristic of a visitor is not permitted.
This policy is not and should not be construed as legal advice and solely reflects Quantcast’s policy. Clients of Quantcast products and services must seek independent advice from their own counsel regarding compliance with applicable laws, regulations, codes, and industry standards. Quantcast reserves the right to update, modify, and change these policies at any time, at its sole discretion. For the avoidance of doubt, Clients always remain liable for their campaign content and strategies, and for all activities they undertake with the use of Quantcast’s products and/or services.
Quantcast Website and Corporate Privacy Policy
Effective September 11th 2023
DownloadTable of Contents
- When you visit our website(s) we collect information about your visit, including IP address, cookie or other identifiers, geolocation, your browsing history and other activity on the site, and how you got to our site.
- We collect your contact information when you provide it to us, including name, email address, address, phone, and any other information you provide.
- If you are a client or partner we may receive your business contact information from you or your employer as part of the business relationship.
- We may collect information from marketing or other informational emails that we send you, using cookies and/or pixels to measure, for example, open rates.
- We collect information for recruiting and business-to-business marketing from third-party sources where it is made available for these purposes, including social media sites like LinkedIn or marketing lead lists.
- When you apply for a job at Quantcast we might collect a variety of personal information about you, your qualifications and experience, and your eligibility to work for us, including information like degrees, licenses and certifications, references, and more.
- We may match information across different sources in order to advance the purposes described in this policy, including that we may match information like your email to information about your activity on our website.
- We may work with partners who collect information from our website(s) or other sources, for the purposes described here.
- We use website activity to better understand and improve the usability and effectiveness of our site and for fraud or crime prevention or debugging.
- We also use website activity to enhance our marketing to existing and potential customers, including by matching it with other personal information to improve our marketing.
- We and partners we work with may collect information from your visits to our website or from other information we have collected from or about you for marketing and advertising purposes, and we may use automated processes to make inferences about you in order to make our marketing more relevant and effective.
- We use information about you to respond to queries and requests, and if you are a customer, send you administrative emails and product updates.
- We or our vendors may use information for event planning and management, recruiting, marketing and advertising.
- We use information for recruiting and hiring purposes, such as to find, contact, and evaluate potential employees, or to respond to your applications for employment; however, this policy does not cover personal information in the context of current or former employment relationships.
- We may use information as reasonably needed to protect our business interests or as required by law.
- We may use information for other corporate administrative functions consistent with the purposes above.
- We may use and disclose information about you to government or law enforcement officials or private parties as we believe necessary: (i) to comply with any applicable laws, regulations, and valid subpoenas, warrants, and court orders; (ii) to protect the rights, property, and safety of ourselves, third parties, or the public in general; and (iii) to prevent or stop activity we consider to be illegal, harmful, or unethical.
- We may sell, transfer, or otherwise share some or all of our assets, including information we collect about you, in connection with a merger, acquisition, reorganization, or sale of assets or in the event of bankruptcy. We may also make certain information available to a potential investor or purchaser (and their advisers) in advance of any such transaction completion.
- If you are a customer, we may share the information as needed to provide and operate our products and services.
- We may share information among our affiliated companies.
- We share information with vendors, service providers, and partners for the purposes described in this policy, including that we may share information with partners who help us advertise our products and services on other websites, apps, or other locations.
- We may share information with other third parties at your request or with your permission, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or to any other third party with your prior consent to do so.
- We do not sell the personal information described in this policy, as that term (sell) is defined by the California Consumer Protection Act.
- As business records reasonably retained in the normal course of business;
- To respond to any questions, complaints or claims that may be made by you or on your behalf; or
- To keep records required by law.
If you are a resident of the EEA, you also have the right to lodge a complaint against us with our lead supervisory authority, the Irish Data Protection Commission, or your local supervisory authority in the country in which you reside.
Quantcast Products and Services Privacy Policy
Effective June 11th 2024
DownloadTable of Contents
Products and Services Privacy Policy
This Policy takes effect on June 6 2024.
Products and Services Privacy Policy
Information use and legal basis
Additional information for EEA, UK, and Switzerland residents
Additional information for residents of certain U.S. states
Changes to this Privacy Policy
Capitalised terms used in this Products and Services Privacy Policy (the “Privacy Policy”) are defined in Key Terms unless otherwise defined herein.
To exercise your Data Subject Rights (described in the Your choices and legal rights below), please visit the Quantcast Privacy Choices page.
Who we are and what we do
Quantcast (“we”, “our”, or “us”) is a global digital advertising technology group of companies. Quantcast offers products and services that help digital advertisers and publishers (collectively, “Clients”) understand and grow their client base. Through Quantcast Advertise Solutions, advertiser Clients can plan, activate, and measure the performance of their advertising campaigns seamlessly in a single audience platform, which helps them to place their ads to maximise results. Through Quantcast Measure Solutions, digital publisher Clients leverage insights to better understand the makeup of their audiences, how audiences spend their time across their digital properties, and what audiences care about, all of which help these digital businesses better connect their content and Audiences with the right advertising. We will refer to all of these services as “Solutions.”
To provide the Solutions, Quantcast collects and uses Personal Information for various purposes, such as measuring and understanding audiences, targeting and delivering ads, measuring ad performance, and similar related purposes. As described in the Information Collection section below, we may join or match Personal Information about you, which may include your Online Data from your visits across different digital properties, like websites,mobile apps, or streaming media devices (such as connected TVs (“CTVs”)), that have implemented Quantcast Pixels, Tags or SDKs (which is sometimes called “tracking” in the industry) or Offline Data . This allows us, for example, to enrich our existing data sets and provide meaningful reports for our Clients regarding the effectiveness of their ads or content. We may also combine Personal Information that we collect in order to probabilistically link media consumption to a single user, which is sometimes called Cross-Media Matching/Linking. To the extent that we combine Personal Information that we collect from and about you in connection with our performance of the Solutions, we will use such combined information only as described in this Privacy Policy.
This Privacy Policy describes in more detail how we collect, use, disclose, and protect Personal Information, otherwise obtain and Process it in connection with the delivery of the Solutions, and the controls we provide you to manage such information and exercise your choices and legal rights. As noted in the Information use and legal basis section below, we use the Transparency and Consent Framework (“TCF”) standard to facilitate compliance with applicable laws in Europe, primarily in accordance with the EU and UK General Data Protection Regulation (“GDPR”). Because the TCF is one means of explaining Processing activities, and because our Processing activities are consistent globally, the TCF Purposes are applicable to all Personal Information that we Process (regardless of the information’s country of origin).
In the United States, the Solutions are provided by Quantcast Corporation, located at 795 Folsom Street, San Francisco, CA 94107. Personal Information relating to individuals located within the United States provided to or gathered by us in connection with the delivery of the Solutions is controlled by Quantcast Corporation.
Outside of the United States, the Solutions are provided by Quantcast International Limited, located at Beaux Lane House, Lower Mercer Street, Dublin 2, Ireland. In so far as Quantcast acts as a “controller” (as defined under applicable law), Quantcast International Limited is the controller of your Personal Information if you reside in the European Economic Area (EEA), United Kingdom (UK), Switzerland, or any other jurisdiction outside of the United States.
Scope of this Privacy Policy
See Key Terms for definitions of capitalized terms.
This Privacy Policy covers Quantcast’s use of Personal Information for the Solutions only. This Privacy Policy does not cover:
- Personal Information collected from our website, www.quantcast.com, except to the extent that we use our own Solutions on our website. It also does not pertain to the collection and use of Personal Information in connection with our corporate functions, such as marketing, recruiting, people management, business-to-business communications, and so forth. For our privacy policy relating to our website and our corporate functions, please click here.
- Any third parties’ handling of Personal Information, unless explicitly stated otherwise. We encourage you to review the privacy policies of any other companies that you engage or interact with to understand their information handling and privacy practices.
We use some phrases in this Privacy Policy that are unique to our business and/or the digital advertising industry. For a list of defined terms that you should familiarise yourself with to make it easier to review this Privacy Policy, please review the Key Terms.
California Notice at Collection: We collect the categories of Personal Information listed in the Additional information for residents of certain U.S. states section below. As further described in the Information use and legal basis section below, we collect this information in order to deliver the Solutions and conduct our business. To learn more, please see the Additional information for residents of certain U.S. states section.
Self-regulatory standards
See Key Terms for definitions of capitalized terms.
Quantcast supports and participates in several digital advertising self-regulatory organisations, as further described below.
- We are members of the Network Advertising Initiative (NAI).
- We participate in the Digital Advertising Alliance (DAA) and adhere to the DAA Self-Regulatory Principles.
- We participate in the European Interactive Digital Advertising Alliance (EDAA) and are certified under the EDAA Principles.
- We participate in, and comply with, the policies and technical specifications of the IAB Transparency and Consent Framework (TCF) as a vendor. Quantcast’s IAB Europe-assigned identification number is Vendor ID #11.
Please see the Your choices and legal rights section of this Privacy Policy for more information about the opt-out tools offered by the NAI, DAA, and EDAA.
Do Not Track (“DNT”) is a preference that you can set in certain web browsers to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services. We do not honor DNT at this time, due to the lack of a clear industry standard. Please visit the Quantcast Privacy Choices page for your opt-out options.
Information collection
See Key Terms for definitions of capitalized terms.
We collect or receive Personal Information about or relating to you in various ways, including from digital properties, like websites, mobile apps, or streaming media devices (such as connected TVs (“CTVs”), and other sources of digital content. Details about the categories of Personal Information we collect and receive, the source or manner in which we obtain each category of Personal Information, the purpose(s) for which we Process each category of Personal Information, and the retention period for each category of Personal Information we Process can be found in the table below. As described in the Who we are and what we do section, where applicable the Processing purposes identified in the table below are tied to the TCF Purposes outlined in the Information use and legal bases section.
Category and Description of Personal Information | Source of Personal Information | Purpose for Processing (including where relevant the TCF Purpose) and Retention Period | |
---|---|---|---|
Pseudonymous Identifiers: unique values that distinguish your browser profile(s) or device(s). Examples include a Cookie ID, device IP Address, hashed email addresses, 3rd party identifiers, or other Device Identifiers or Device Configuration/ Information. | Usually generated when Pixels, Tags, or SDKs are loaded by a Client on its digital property (i.e., website, mobile app, or device) and sends information to us. Different kinds of Pixels, Tags, or SDKs are used for different purposes, but the types of information generated are the same. Such information may also be received through a server- to- server connection, such as when receiving a Bid Request. | Pseudonymous Identifiers will be retained for up to 13 months for the following purposes (NOTE: storing/accessing data on a device is the cookie lifespan - up to 13 months each time the cookie is reset): Store and/or access information on a device (TCF Purpose 1) Use limited data to select advertising (TCF Purpose 2) Create profiles for personalised advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Measure advertising performance (TCF Purpose 7) Measure content performance (TCF Purpose 8) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve services (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose ) Deliver and present advertising and content (TCF Special Purpose 2) Match and combine data from other data sources (TCF Feature 1) Link different devices (TCF Feature 2) Identify devices based on information transmitted automatically (TCF Feature 3) Recording consent choices made by users | |
Imprecise/Approximate Location Information: The time zone and approximate geolocation (e.g., postal code or city) of your device. | Inferred or derived by Quantcast from your device’s IP Address or included in Bid Requests. | Imprecise/Approximate Location Information will be retained for up to 30 days for the following Purposes: Use limited data to select advertising (TCF Purpose 2) Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Measure advertising performance (TCF Purpose 7) Measure content performance (TCF Purpose 8) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) Match and combine data from other data Link different devices (TCF Feature 2) Identify devices based on information transmitted automatically (TCF Feature 3) | |
Event Data: Information relating to your Online Data, which may include Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, and Browsing Data. | Generated when Pixels, Tags or SDKs, installed by a Client on its digital property, loads and sends information to us. Different kinds of Pixels, Tags or SDKs are used for different purposes, but the types of information generated are the same. | Event Data will be retained for up to 13 months for the following Purposes: Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Measure advertising performance (TCF Purpose 7) Measure content performance (TCF Purpose 8) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) Deliver and present advertising and content (TCF Special Purpose 2) Link different devices (TCF Feature 2) Identify devices based on information transmitted automatically (TCF Feature 3) | |
Bid Request Data: A bid request is an offer from a digital publisher, like a website, mobile app, or streaming media owner, to show an ad on their property. Bid Request Data includes information about your visit to the publisher’s digital property, which helps us understand where an ad will be displayed, Device Information, and who might see it. Bid Request Data also commonly includes a Pseudonymous Identifier (if available), the content that the ad would serve into, the type of device the ad would be served on, the Imprecise / Approximate Location Information of the device, the size of the ad, and consent information. Because Bid Requests include information about the content you are visiting, over time, accumulated Bid Requests may show your browsing behavior. | Received from a digital publisher. | Bid Request Data will be retained for up to 13 months for the following Purposes: Use limited data to select advertising (TCF Purpose 2) Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Measure advertising performance (TCF Purpose 7) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) Deliver and present advertising and content (TCF Special Purpose 2) Link different devices (TCF Feature 2) Identify devices based on information transmitted automatically (TCF Feature 3) | |
Imported Data (Client): Pseudonymised Information, which may include Online Data, and/or Offline Data that may be apportioned by Browsing Data, Attributes, Segments, Label Data and Interests. | Uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”) by a particular Client for use on its behalf. | Imported Data (client) will be retained for up to 30 days for the following Purposes: Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud (TCF Special Purpose 1) | |
Imported Data (Third Party/Segment): Pseudonymised Information, which may include Online Data, and/or Offline Data that may be apportioned by Browsing Data, Attributes, Segments, Label Data and Interests. | Uploaded to the Quantcast platform or provided to us via an API by third-party Data Management Platforms or Data Providers. | Imported Data (Third Party/Segment) will be retained for up to 30 days for the following Purposes: Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) TUnderstand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) | |
Inferences/Inferred Data: Information drawn from the above-listed categories of information (i.e., Event Data, Bid Request Data, Imported Data (Client), and Imported Data (Third Party/Segment)). We may, for example, use information that we have collected to infer your interests, age, gender, marital status, or income range. These Inferences may include Interests and Attributes. | Derived by Quantcast from previously collected Event Data, Bid Request Data, Imported Data (Client), and/or Imported Data (Third Party/Segment). | Inferences/Inferred Data will be retained for up to 13 months for the following Purposes: Create profiles for advertising (TCF Purpose 3) Use profiles to select personalised advertising (TCF Purpose 4) Measure advertising performance (TCF Purpose 7) Measure content performance (TCF Purpose 83) Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) Develop and improve products (TCF Purpose 10) Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) | |
Training Data: Pseudonymous Information used to improve Quantcast’s algorithms and measure how well they are working. | Received from third-party data providers and matched to Pseudonymous Identifiers. | Training Data will be retained for up to 30 days for the following Purposes: TCF Purpose 3: Create profiles for advertising (TCF Purpose 3) TCF Purpose 8: Measure content performance (TCF Purpose 8) TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) TCF Purpose 10: Develop and improve products (TCF Purpose 10) TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) | |
Information you provide: This may include your contact details, (e.g., name, email address, or phone number) and any commentary or other information you provide when you contact Quantcast. | Provided by you when you contact Quantcast. | Carrying out our legitimate business purposes. Retention Period: up to 18 months |
Additionally, any of the categories of Personal Information described above may be Processed and retained for the following purposes.
Establishing, bringing, or defending against complaints, legal claims (including threatened or anticipated legal claims), and regulatory inquiries | Retained as needed for these purposes, including as required by applicable law. Otherwise, categories of Personal Information and associated retention periods are determined by the underlying purpose for which the Personal Information is Processed. |
---|---|
Responding to legal requests | |
Complying with relevant laws and regulations | |
Conducting research | Categories of Personal Information and associated retention periods are determined by the underlying purpose for which the Personal Information is Processed. |
Hosting of Personal Information for above-listed purposes | Categories of Personal Information and associated retention periods are determined by the underlying purpose for which the Personal Information is Processed. |
Sensitive information
We generally do not seek or permit sensitive Personal Information (e.g., information revealing an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic or biometric data that is Processed for the purpose of uniquely identifying an individual; information concerning an individual’s health, sex life, or sexual orientation; and information relating to criminal convictions and offenses) to be used in the Solutions. Outside of the EEA, UK, and Switzerland, to the extent that applicable laws and regulations recognize and allow collection of non-sensitive health information, we may collect and Process such information. If we were to Process sensitive Personal Information, we would seek and obtain your consent and/or otherwise Process such information in accordance with applicable laws and rules.
Children’s information
We do not knowingly process Personal Information about data subjects considered to be children under applicable law. If a parent or guardian becomes aware that Quantcast has received Personal Information about his or her child, the parent or guardian should contact us at privacy[at]quantcast[dot com. If we become aware that we have received Personal Information about data subjects considered to be children under applicable law, we will take all reasonable steps to delete such information from our files.
Contractual commitments from our Clients and third-party Data Providers:
We contractually require other companies that provide or make available to us Personal Information to take steps to ensure that we can lawfully Process such information, which include: (i) posting complete and accurate privacy policies that comply with applicable laws and rules and describe their Personal Information collection, use, and sharing practices; (ii) obtaining all legally-required consents and necessary permissions; and (iii) providing individuals with appropriate choices and the ability to opt out of the Processing of their Personal Information, where necessary or appropriate.
Information use and legal basis
See Key Terms for definitions of capitalized terms.
As described in the Who we are and what we do section, we generally use the TCF as the mechanism for describing our Processing activities, and in Europe specifically for establishing our legal basis for Processing and managing users’ preferences for online personalised advertising and related activities. The TCF is designed to allow a digital business to present information and choices to users on its website relating to the Processing of their Personal Information.
We Process Personal Information for the purposes for which it was collected or provided to us. The table below describes the specific purposes for which we Process the Personal Information we collect or otherwise obtain about you. This table includes:
- the purposes for which Quantcast Processes Personal Information ,which are tied to the defined purposes for Processing, special purposes, and features set forth in the TCF Policies and official technical documentation disseminated by IAB Europe where applicable(see Appendix A of the TCF Policies for examples and illustrations of the purposes, special purposes and features)
- a description of each Processing activity using TCF-specific terminology (to the extent applicable), and
- the legal basis that we rely on to perform each of our Processing activities.
Please note that in Europe, where we indicate that “Legitimate Interests” in accordance with the GDPR is the legal basis for Processing, we carry out the Processing in reliance on our legitimate interests or those of a third party (e.g., our Clients), provided that such interests are not outweighed by your interests or fundamental rights and freedoms.
Processing Purpose / TCF Purpose (where TCF is applicable) | Description of Processing Activity (using TCF Purpose terms) | Legal Basis for Processing for EU/UK | |
---|---|---|---|
Storing and/or accessing information on a device (TCF Purpose 1) | Cookies, Device Identifiers, or other information more fully described in association with the purposes below and in the tables above can be stored or accessed on your device for the purposes presented to you. | Consent | |
Use limited data to select advertising (TCF Purpose 2) | Ads can be shown to you based on the content you’re viewing, the app you’re using, your device’s Imprecise/Approximate Location Information, or your device type. When selecting “Use limited data to select advertising”, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our advertiser Clients meet their objectives of finding new customers and growing their brands through the delivery of relevant ads. | |
Creating profiles for personalised ads (TCF Purpose 3) | A profile can be built about you and your Interests to show you personalised ads that are relevant to you. To create or edit a profile for use in personalised advertising, Quantcast will:
| Consent | |
Using profiles to select personalised ads (TCF Purpose 4) | When serving personalised ads, Quantcast will select personalised ads based on Personal Information collected from or about you, such as your prior activity, Interests, visits to websites or mobile apps or streaming media, Imprecise/Approximate Location Information, demographic information or Inferences. | Consent | |
Measuring advertising performance (TCF Purpose 7) | Quantcast will measure the performance and effectiveness of ads that you see or interact with. In particular, to measure whether and how ads were delivered to you and how you interacted with them, Quantcast will:
In the provision of the Solutions to some Clients, Quantcast may correlate information between entries within its own datasets that have the same Pseudonymous Identifier or with information obtained from Ad Serving, Ad Verification, or Data Management Platforms/Data Providers. We do this to provide aggregated reporting to Clients about the number of visitors to their digital properties. Quantcast does not apply Panel or similarly derived Audience Insights data to ad measurement data without a separate legal basis to apply market research to generate Audience Insights. | Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our advertiser Clients meet their objective of ascertaining, measuring, and improving the effectiveness of their ad campaigns. | |
Measuring content performance (TCF Purpose 8) | The performance and effectiveness of content that you see or interact with can be measured. To measure content performance, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our Clients meet their objective of executing their digital content strategies more effectively. | |
Understanding audiences through statistics or combinations of data from different sources i.e., applying market research to generate Audience Insights (TCF Purpose 9) | Market research can be used to learn more about the Audiences who visit websites, mobile apps, or streaming media, and view ads. To generate Audience Insights, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our Clients meet their objectives of finding new customers and growing their brands through the delivery of relevant ads and/or executing their digital content strategies more effectively. | |
Developing and improving services (TCF Purpose 10 ) | Your information can be used to improve Quantcast’s existing systems and software and to develop new products. To develop and improve its products, Quantcast will:
For example, Quantcast matches its datasets with Training Data, which usually includes Event Data, Bid Request Data, Imported Data (Client), and/or Imported Data (Third Party/Segment). Quantcast primarily uses Training Data to train its algorithms how to infer individuals’ Attributes and Interests in the context of the Solutions. | Consent or Legitimate Interest, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to meet our organisational objective of continuously improving the Solutions for our Clients. | |
Ensuring security, preventing and detecting fraud, and fixing errors (TCF Special Purpose 1) | Your information can be used to monitor for and prevent fraudulent activity and ensure our systems and processes work properly and securely. To ensure security, prevent fraud, and debug, Quantcast will:
| Legitimate Interests We conduct the Processing to meet organisational objectives such as to maintain our IT systems; to ensure the electronic security of our business; and to detect and prevent against malicious, fraudulent, invalid, and illegal activity. | |
Technically deliver ads or content (TCF Special Purpose 2) | Your device can receive and send information that allows you to see and interact with ads and content. To deliver information and respond to technical requests, Quantcast will:
Quantcast may also match Pseudonymous Identifiers with third parties in order to deliver ads to Audiences. | Legitimate Interests We carry out the Processing to help our advertiser Clients meet their objective to ascertain, measure, and improve the effectiveness of their ad campaigns. | |
Matching and combining data from other sources i.e. offline data (TCF Feature 1) | Offline Data can be combined with your online activity in support of one or more purposes or special purposes outlined in this table. | The legal basis will depend on the TCF Purpose pursued. | |
Linking different devices (TCF Feature 2) | Different devices can be determined as belonging to you or your household in support of one or more purposes. Through Cross-Media Matching/Linking, Quantcast will:
| The legal basis will depend on the TCF Purpose pursued. | |
Receiving and using automatically sent device characteristics for identification (TCF Feature 3) | Your device will be distinguished from other devices based on information it automatically sends, such as IP Address or browser type. In particular, Quantcast will:
| The legal basis will depend on the TCF Purpose pursued. | |
Establishing, bringing, or defending against complaints, legal claims (including threatened or anticipated legal claims), and regulatory inquiries | We Process, preserve, and share Personal Information when we seek legal advice or seek to protect ourselves in the context of litigation and other disputes. | Legitimate Interests We carry out the Processing to meet our objective of protecting ourselves and others, including in connection with investigations, litigation, and regulatory inquiries. | |
Responding to legal requests | We preserve and share Personal Information in response to legal requests from law enforcement and other government officials, to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure of such information is necessary to comply with a judicial proceeding or court order. | Legitimate Interests We carry out the Processing to meet our objective of protecting ourselves and others, including in connection with investigations and regulatory inquiries. | |
Complying with relevant laws and regulations | We Process Personal Information to comply with our legal obligations under applicable law. Examples of Irish and EU laws enforceable in Ireland that could give rise to an obligation requiring us to Process Personal Information we hold about you are:
See https://legal.quantcast.com/#laws for the current list of laws which are enforceable in Ireland that give rise to a legal obligation for Quantcast which results in the Processing of Personal Information. As new laws may be enacted or other obligations may require us to Process your Personal Information, we will update this list from time to time. | Compliance with a legal obligation. | |
Conducting research | We use Personal Information to conduct research, surveys, product testing, and troubleshooting to help us operate and improve our products and services. | Legitimate Interests We carry out the Processing to meet our organisational objective of delivering and continuously improving the Solutions for our Clients. | |
Hosting information | We Process Personal Information to manage our business, which includes hosting Personal Information in our on-premise data centers and/or cloud computing services. | Legitimate Interests We carry out the Processing to meet our organisational objective of delivering the Solutions to our Clients. |
Information sharing
See Key Terms for definitions of capitalized terms.
In connection with one or more of the purposes outlined in the Information use and legal basis section above, we may share your Personal Information with the categories of third parties described below.
Category of Recipient | Description and Purpose of Sharing | Categories of Personal Information Shared |
---|---|---|
Quantcast-affiliated companies | We share your Personal Information with Quantcast-affiliated companies in order to provide the Solutions. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Our vendors (including service providers/data processors) Visit the Quantcast Partner Page for a list of some of our vendors. | We share your Personal Information with vendors who act on our behalf and are subject to binding contractual obligations and restrictions on the Processing of Personal Information we share with them. For example, these companies assist with information hosting, information Processing, database management, and administrative tasks. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Our partners, such as Data Management Platforms and Data Providers and Advertising Exchanges Visit the Quantcast Partner Page for a list of some of our partners | We share Pseudonymous Identifiers with companies that we partner with to support the operation of the Solutions. Specifically, Quantcast shares Pseudonymous Identifiers with 1) data providers via Data Management Platforms for the purpose of performing Cookie Syncing/Matches with Imported Data (Client) and Third Party/Segment Data, and 2) and Advertising Exchanges for the purpose of serving ads. | Pseudonymous Identifiers. |
Relevant third parties as part of a corporate transaction | In the event of a reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding), we may share your Personal Information with (or transfer your Personal Information to) certain third parties, such as the acquiring entity and its advisors. We may also make certain information available to a potential investor or purchaser (and their advisers) in advance of any such transaction’s completion. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Competent governmental and public authorities | We may share your Personal Information with governmental and law enforcement authorities, in each case to comply with legal or regulatory obligations or requests. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Other third parties | We will share your Personal Information with other third parties at your direction or with your consent. Additionally, we may share your Personal Information as necessary or appropriate or where otherwise permitted by law to:
| All or certain categories of Personal Information are shared only as necessary or appropriate. |
We also create and share with our Clients insights or reports regarding the makeup of the Audiences that visit their digital properties or the performance of their advertising campaigns. These insights and reports may contain aggregated data from which individual users cannot be uniquely identified or data from which Quantcast has removed Pseudonymous Identifiers.
Information security
See Key Terms for definitions of capitalized terms.
We employ appropriate organisational and technical security safeguards designed to keep Personal Information secure when it is transmitted to us and once we receive it. These measures may include encryption and employment of information storage security technologies to restrict access to our network. However, please be aware that no method of transmitting information over the internet or storing information is completely secure.
Information retention
See Key Terms for definitions of capitalized terms.
We retain your Personal Information for as long as necessary for the purposes for which it was collected, as described in the Information Collection section above and in the tables below, except where we are required to retain the information for a longer period of time. Once Personal Information has reached its retention period, as applicable, we may either de-identify it (for State Privacy Law purposes, defined below), anonymise it (for GDPR purposes), or permanently delete it.
Category of Personal Information | Maximum retention period for all TCF Purposes |
---|---|
Pseudonymous Identifiers | Up to 13 months (NOTE: storing/accessing data on a device is the cookie lifespan - up to 13 months each time the cookie is reset) |
Imprecise/Approximate Location Information | Up to 30 days |
Event Data | Up to 13 months |
Bid Request Data | Up to 13 months |
Imported Data (Client) | Up to 30 days |
Imported Data (Third Party/Segment) | Up to 30 days |
Inferences/Inferred Data | Up to 13 months |
Training Data | Up to 30 days |
Information you provide | Up to 18 months |
International transfers
See Key Terms for definitions of capitalized terms.
Quantcast operates a global service, and we engage vendors located around the world to help us deliver the Solutions. Accordingly, your Personal Information may be transferred outside of the country or region in which you reside, including to the United States and other countries where either our data centers, vendors, affiliates, or other partners are located. Where we transfer your Personal Information internationally, we do so in accordance with applicable law.
If you are based in the EEA, UK, or Switzerland, please note that we may need to transfer your Personal Information to countries that have not been recognised by the European Commision and/or the UK government as providing an adequate level of protection for Personal Information. We generally use EU Standard Contractual Clauses (to facilitate both controller-to-controller and controller-to-processor transfers) or other government-approved contracts that provide appropriate safeguards for Personal Information that is transferred to countries that have not been recognised as providing an adequate level of protection. You can contact us at privacy[at]quantcast[dot]com to request a copy of our Standard Contractual Clauses.
In certain limited circumstances, we rely on other lawful mechanisms for international transfers of Personal Information or rely on derogations, such as the contractual necessity derogation.
Your choices and legal rights
See Key Terms for definitions of capitalized terms.
Under applicable law, you may have certain rights in relation to your Personal Information. Additional details about the rights that you may have and how to exercise such rights can be found below.
- Right of access: The right to request access to your Personal Information and receive certain information, including the categories of your Personal Information we collect and disclose. To exercise this right, see our Data Subject Request Form.
- Right of rectification/correction: The right to request that we rectify (or correct) inaccurate Personal Information about you. In practice, if you seek to exercise your right of rectification/correction, due to the limited Personal Information we Process, we satisfy this right by providing you with the option to request deletion of your Personal Information. To request the deletion of your Personal Information, see our Data Subject Request Form.
- Right of erasure/deletion: The right, in certain cases, to request that we delete your Personal Information, provided there are valid grounds for doing so and subject to applicable law and exceptions. To exercise this right, see our Data Subject Request Form.
- Right to data portability: The right, in certain cases, to receive a copy of your Personal Information in a structured, commonly used, and machine-readable format and transmit such information to another controller. To exercise this right, see our Data Subject Request Form.
- Right to object (marketing): The right to object to the Processing of your Personal Information for direct marketing purposes. In practice, we satisfy this right by providing you with the option to opt out of our Processing of your Personal Information for advertising purposes. To exercise this right, see our Privacy Choices Page.
- Right to object (legitimate interests): The right to object to the Processing of your Personal Information where we Process it on the basis of our legitimate interests, as described in the Information Use and Legal Bases section above. Unless we have compelling legitimate grounds or the information is needed for the establishment, exercise or defense of legal claims, we will cease Processing your Personal Information when you object. To exercise this right, see our Privacy Choices Page.
- Right to restrict Processing: The right, in certain cases, to temporarily restrict our Processing of your Personal Information, provided there are valid grounds for doing so. In practice, if you seek to exercise your right to restrict the Processing of your Personal Information, we will treat it as an exercise of the right on an ongoing, rather than temporary, basis (i.e., the request will be treated as you exercising the right to object to the Processing of your Personal Information). To exercise this right, see our Privacy Choices Page.
- Right to withdraw your consent: The right to withdraw the consent you have provided at any time, where we Process your Personal Information on the basis of your consent. Please note that the lawfulness of any Processing undertaken prior to your withdrawal of consent shall not be affected by the withdrawal. To exercise this right, see our Privacy Choices Page.
- Right to lodge a complaint: The right to complain to the relevant authority regarding the Processing of your Personal Information by us or on our behalf. In the EU, the lead supervisory authority is the Irish Data Protection Commissioner. See the section Contact Us below.
Please note that the rights listed above may not be exercised in certain circumstances, such as when the Processing of your Personal Information is necessary to comply with a legal obligation to which we are subject or for the exercise or defense of legal claims. Additionally, in order to protect your privacy, we may require proof of your identity before we can act on your request but only where it is necessary and proportionate to request this information.
If you are based in the EEA, UK, or Switzerland and have issues or questions about the above-listed rights, you may contact our European Data Protection Officer via dpo [at] quantcast [dot] com.
If certain jurisdictions, including the EEA, UK, or Switzerland, you also generally have the right not to be subject to a decision when it is based on automated Processing (i.e., an operation that is performed without any human intervention), if it produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). Please note that Quantcast does not make decisions based solely on automated Processing that produce a legal effect or similarly significantly affect individuals.
We will not discriminate against you for exercising your privacy rights.
Additional information for EEA, UK, and Switzerland residents
See Key Terms for definitions of capitalized terms.
If you are located in the EEA, UK, or Switzerland, please note that the Solutions are provided by our European entity, Quantcast International Limited. In Processing Personal Information in the context of providing the Solutions to our Clients, Quantcast Internal Limited generally acts as a data controller. More specifically, Quantcast International Limited is a joint controller along with its Client when we jointly determine the purposes for which your Personal Information will be Processed. For example, we are joint controllers with Advertisers and Publishers for Personal Information that is collected as Quantcast Cookies, or using Pixels, Tags and SDKs deployed by our Clients on their digital properties, and for the Processing of other Personal Information introduced into the Solutions directly by the Client. This is because both Quantcast and the Client have influence over whether and how we collect and Process the Personal Information. In limited situations, Quantcast is the sole data controller of Personal Information when we are Processing it for our own independent purposes, for instance when we use a Quantcast Pseudonymous Identifier or we derive aggregated analytics for modeling, developing our algorithms, or improving the Solutions.
Your choices and legal rights
Under applicable law, you may have certain rights in relation to your Personal Information. Additional details about the rights that you may have and how to exercise such rights can be found in the Your choices and legal rights section above.
If you are based in the EEA, UK, or Switzerland and have issues or questions about the above-listed rights, you may contact our European Data Protection Officer via dpo [at] quantcast [dot] com.
If you are based in the EEA, UK, or Switzerland, under applicable law, you also generally have the right not to be subject to a decision when it is based on automated Processing (i.e., an operation that is performed without any human intervention), if it produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). Please note that Quantcast does not make decisions based solely on automated Processing that produce a legal effect or similarly significantly affect individuals.
Additional information for residents of certain U.S. states
See Key Terms for definitions of capitalized terms.
Certain U.S. states* have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures (“State Privacy Laws”). If you are a resident of one of these states, this section applies to you.
*California, Colorado, Connecticut, Florida, Montana, Oregon, Texas, Utah, Virginia
Additional Disclosures
Above, in the Information Collection, Information Use and Legal Basis, Information Sharing, and Information Retention sections, we explain how we collect, use, disclose, and retain information about you. As required by certain State Privacy Laws, below, we use a table to explain this same information, including the categories of personal information we collect, the types of entities to which we disclose it, and the ways we use each category of information. The table explains our practices today and over the preceding 12 months.
Collection, Use, and Disclosure of Personal Information for Business Purposes
Category of Personal Information We collect…. | Categories of Recipients We may disclose personal data to…. | Use of Personal Information We use personal data… |
---|---|---|
|
|
|
Other Details About Our Information Practices
- We do not “sell” the personal information of any individuals as those terms are defined in State Privacy Laws.
- We do not knowingly collect personal information about consumers considered to be children under applicable laws.
Your Privacy Rights
Opting Out of Targeted Advertising and Sharing
Some of the activities described in the Information Sharing section may be considered processing of your information for “targeted advertising” purposes under the State Law that applies to you. You can opt out of Quantcast identifier/cookie-based ad targeting by following the prompts at our Privacy Choices Page. You may also opt out of web-based ad targeting by enabling legally-recognized opt-out preference signal, such as the Global Privacy Control (“GPC”), a preference that you can set in certain web browsers to inform the websites you visit that you do not want information about your online activity sold or used for targeted advertising as such terms are defined under State Privacy Laws. Please visit our Privacy Choices Page for more information about GPC.
Access, Deletion, Correction
Depending on your state of residence, you may have the right to request access to, or deletion or correction of, your personal information. If you are interested in exercising one or more of the rights outlined above, please click the relevant link in the Your choices and legal rights section above. You may also submit requests by contacting us via email at privacy [at] quantcast [dot] com. We will attempt to verify your identity and respond to your request consistent with the State Privacy Laws.
Appeals
If we deny your request, you may have the right to appeal our decision by contacting us at privacy [at] quantcast [dot] com. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.
Authorized Agents
Depending upon where you reside, you may work with a natural person or business entity (an “Authorized Agent”) to submit rights requests on your behalf. If you are submitting a rights request as an Authorized Agent, you are required to submit proof of your authorization to make the request, such as a valid power of attorney or signed permission from the individual who is the subject of the request. We may also require you to verify your identity directly with us.
Nondiscrimination
We will not discriminate against you for exercising your privacy rights.
CCPA Annual Report
The California Consumer Privacy Act (CCPA) Regulations require businesses such as Quantcast to disclose metrics regarding the number of requests to know, delete, and opt-out. Information about annual data requests is available in the CCPA Annual Report.
Contact us
If you have any questions about this Privacy Policy or our information handling practices, please feel free to contact us.
Individuals located in the United States, please contact us at:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Email: privacy[at]quantcast[dot]com
Individuals located outside of the United States, please contact us at:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street
Dublin 2, Ireland
Email: privacy.qil [at] quantcast [dot] com
The Data Protection Officer (DPO) for Quantcast International Limited can be contacted at dpo [at] quantcast [dot] com.
If you have contacted us or our DPO about a privacy or information use concern and feel that we have not addressed it satisfactorily, you may contact our US-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
If you are a resident of the EEA, UK, or Switzerland, you also have the right to lodge a complaint against us with our lead supervisory authority, the Irish Data Protection Commission, or the supervisory authority in your country of residence.
Changes to this Privacy Policy
We may revise this Privacy Policy from time to time to reflect changes in our practices with respect to the collection, use, and/or disclosure of Personal Information or changes in applicable law. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last updated. Any changes will become effective when we post a revised version of this Privacy Policy unless otherwise specified.
Some of our changes will be minor, but if we make significant changes to how we use or share your Personal Information, we will:
- inform you in advance by posting a notice on our website
- wait for a period of time before implementing the changes
We encourage you to review this Privacy Policy periodically to remain informed about our information handling and privacy practices.
Effective February 14th 2024 to June 11th 2024
DownloadTable of Contents
Products and Services Privacy Policy
This Policy takes effect on March 1 2024. See Policy effective September 11 2023 until that date.
Products and Services Privacy Policy
Information use and legal basis
Additional information for EEA, UK, and Switzerland residents
Additional information for California residents
Changes to this Privacy Policy
Capitalised terms used in this Products and Services Privacy Policy (the “Privacy Policy”) are defined in Key Terms unless otherwise defined herein.
To exercise your Data Subject Rights (described in the Your choices and legal rights below), please visit the Quantcast Privacy Choices page.
Who we are and what we do
Quantcast (“we”, “our”, or “us”) is a global digital advertising technology group of companies. Quantcast offers products and services that help digital advertisers and publishers (collectively, “Clients”) understand and grow their audiences (the “Solutions”). Through Quantcast Advertise Solutions, advertiser Clients can plan, activate, and measure the performance of their advertising campaigns seamlessly in a single audience platform, which helps them to place their ads to maximise results. Through Quantcast Measure Solutions, digital publisher Clients leverage insights to better understand the makeup of their audiences, how audiences spend their time across their digital properties, and what audiences care about, all of which help these digital businesses better connect their content and Audiences with the right advertising.
To provide the Solutions, Quantcast collects and uses Personal Information for various purposes, such as measuring and understanding audiences, targeting and delivering ads, measuring ad performance, and similar related purposes. As described in the “Information Collection” section below, we may join or match Personal Information about you, which may include your Online Data from your visits across different digital properties, like websites,mobile apps, or streaming media devices (such as connected TVs (“CTVs”)), that have implemented Quantcast Pixels, Tags or SDKs (which is sometimes called “tracking” in the industry) or Offline Data . This allows us, for example, to enrich our existing data sets and provide meaningful reports for our Clients regarding the effectiveness of their ads or content. We may also combine Personal Information that we collect in order to probabilistically link media consumption to a single user, which is sometimes called Cross-Media Matching/Linking. To the extent that we combine Personal Information that we collect from and about you in connection with our performance of the Solutions, we will use such combined information only as described in this Privacy Policy.
This Privacy Policy describes in more detail how we collect, use, disclose, and protect Personal Information, otherwise obtain and Process it in connection with the delivery of the Solutions, and the controls we provide you to manage such information and exercise your choices and legal rights. As noted in the “Information use and legal basis” section below, we use the Transparency and Consent Framework (“TCF”) standard to facilitate compliance with applicable laws in Europe, primarily in accordance with the EU General Data Protection Regulation (“GDPR”). Because the TCF is one means of explaining Processing activities, and because our Processing activities are consistent globally, the TCF Purposes are applicable to all Personal Information that we Process (regardless of the information’s country of origin).
In the United States, the Solutions are provided by Quantcast Corporation, located at 795 Folsom Street, San Francisco, CA 94107. Personal Information relating to individuals located within the United States provided to or gathered by us in connection with the delivery of the Solutions is controlled by Quantcast Corporation.
Outside of the United States, the Solutions are provided by Quantcast International Limited, located at Beaux Lane House, Lower Mercer Street, Dublin 2, Ireland. In so far as Quantcast acts as a “controller” (as defined under applicable law), Quantcast International Limited is the controller of your Personal Information if you reside in the European Economic Area (EEA), United Kingdom (UK), Switzerland, or any other jurisdiction outside of the United States.
Scope of this Privacy Policy
This Privacy Policy covers Quantcast’s use of Personal Information for the Solutions only. This Privacy Policy does not cover:
Personal Information collected from our website, www.quantcast.com, except to the extent that we use our own Solutions on our website. It also does not pertain to the collection and use of Personal Information in connection with our corporate functions, such as marketing, recruiting, people management, business-to-business communications, and so forth. For our privacy policy relating to our website and our corporate functions, please click here.
Any third parties’ handling of Personal Information, unless explicitly stated otherwise. We encourage you to review the privacy policies of any other companies that you engage or interact with to understand their information handling and privacy practices.
We use some phrases in this Privacy Policy that are unique to our business and/or the digital advertising industry. For a list of defined terms that you should familiarise yourself with to make it easier to review this Privacy Policy, please review the Key Terms.
California Notice at Collection: We collect the categories of Personal Information listed in the “Categories of personal information collected” subsection of the “California privacy rights” section below. As further described in the “Information use and legal basis” section below, we collect this information in order to deliver the Solutions and conduct our business. To learn more, please see the “California privacy rights” section.
Self-regulatory standards
Quantcast supports and participates in several digital advertising self-regulatory organisations, as further described below.
We are members in good standing of the Network Advertising Initiative (NAI) and adhere to the NAI 2020 Code of Conduct.
We participate in the Digital Advertising Alliance (DAA) and adhere to the DAA Self-Regulatory Principles.
We participate in the European Interactive Digital Advertising Alliance (EDAA) and are certified under the EDAA Principles.
We participate in, and comply with, the policies and technical specifications of the TCF, as a vendor. Quantcast’s IAB Europe-assigned identification number ia Vendor ID #11.
Please see the “Your choices and legal rights” section of this Privacy Policy for more information about the opt-out tools offered by the NAI, DAA, and EDAA.
Do Not Track (“DNT”) is a preference that you can set in certain web browsers to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services. We do not honor DNT or other similar signals at this time, due to the lack of a clear industry standard. Please visit the Quantcast Privacy Choices page for your opt-out options.
Global Privacy Control (“GPC”) is a preference that you can set in certain web browsers to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services. We honor GPC for all data subjects in the United States. Please visit the Quantcast Privacy Choices page for more information about GPC.
Information collection
We collect or receive Personal Information about or relating to you in various ways, including from digital properties, like websites, mobile apps, or streaming media devices (such as connected TVs (“CTVs”), and other sources of digital content. Details about the categories of Personal Information we collect and receive, the source or manner in which we obtain each category of Personal Information, the purpose(s) for which we Process each category of Personal Information, and the retention period for each category of Personal Information we Process can be found in the table below. As described in the “Who we are and what we do” section, where applicable the Processing purposes identified in the table below are tied to the TCF Purposes outlined in the “Information use and legal bases” section.
Category and Description of Personal Information | Source of Personal Information | Purpose for Processing (including where relevant the TCF Purpose) and Retention Period | |
---|---|---|---|
Pseudonymous Identifiers: unique values that distinguish your browser profile(s) or device(s). Examples include a Cookie ID, device IP Address, hashed email addresses, 3rd party identifiers, or other Device Identifiers or Device Configuration/ Information. | Usually generated when Pixels, Tags, or SDKs are loaded by a Client on its digital property (i.e., website, mobile app, or device) and sends information to us. Different kinds of Pixels, Tags, or SDKs are used for different purposes, but the types of information generated are the same. Such information may also be received through a server- to- server connection, such as when receiving a Bid Request. . | Pseudonymous Identifiers will be retained for up to 13 months for the following Purposes (NOTE: storing/accessing data on a device is the cookie lifespan - up to 13 months each time the cookie is reset): TCF Purpose 1: Store and/or access information on a device TCF Purpose 2: Use limited data to select advertising TCF Purpose 3: Create profiles for personalised advertising TCF Purpose 4: Use profiles to select personalised advertising TCF Purpose 7: Measure advertising performance TCF Purpose 8: Measure content performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve services TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors TCF SpecialPurpose 2: Deliver and present advertising and content TCF Feature 1: Match and combine data from other data sources TCF Feature 2: Link different devices TCF Feature 3: Identify devices based on information transmitted automatically Recording consent choices made by users | |
Imprecise/Approximate Location Information: The time zone and approximate geolocation (e.g., postal code or city) of your device. | Inferred or derived by Quantcast from your device’s IP Address or included in Bid Requests. | Imprecise/Approximate Location Information will be retained for up to 30 days for the following Purposes: TCF Purpose 2: Use limited data to select advertising TCF Purpose 3: Create profiles for advertising TCF Purpose 4: Use profiles to select personalised advertising TCF Purpose 7: Measure advertising performance TCF Purpose 8: Measure content performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors TCF Feature 1: Match and combine data from other data sources TCF Feature 2: Link different devices TCF Feature 3: Identify devices based on information transmitted automatically | |
Event Data: Information relating to your Online Data, which may include Pseudonymous Identifiers, Imprecise/Approximate Location Information, HTTP Request Header Information, Device Information, and Browsing Data. | Generated when Pixels, Tags or SDKs, installed by a Client on its digital property, loads and sends information to us. Different kinds of Pixels, Tags or SDKs are used for different purposes, but the types of information generated are the same.
| Event Data will be retained for up to 13 months for the following Purposes: TCF Purpose 3: Create profiles for advertising TCF Purpose 7: Measure advertising performance TCF Purpose 8: Measure content performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors TCF SpecialPurpose 2: Deliver and present advertising and content TCF Feature 2: Link different devices TCF Feature 3: Identify devices based on information transmitted automatically | |
Bid Request Data: A bid request is an offer from a digital publisher, like a website, mobile app, or streaming media owner, to show an ad on their property. Bid Request Data includes information about your visit to the publisher’s digital property, which helps us understand where an ad will be displayed, Device Information, and who might see it. Bid Request Data also commonly includes a Pseudonymous Identifier (if available), the content that the ad would serve into, the type of device the ad would be served on, the Imprecise / Approximate Location Information of the device, the size of the ad, and consent information. Because Bid Requests include information about the content you are visiting, over time, accumulated Bid Requests may show your browsing behavior. | Received from a digital publisher. | Bid RequestData will be retained for up to 13 months for the following Purposes: TCF Purpose 2: Use limited data to select advertising TCF Purpose 3: Create profiles for advertising TCF Purpose 7: Measure advertising performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors TCF SpecialPurpose 2: Deliver and present advertising and content TCF Feature 2: Link different devices TCF Feature 3: Identify devices based on information transmitted automatically | |
Imported Data (Client): Pseudonymised Information, which may include Online Data, and/or Offline Data that may be apportioned by Browsing Data, Attributes, Segments, Label Data and Interests. | Uploaded to the Quantcast platform or provided to us via an Application Programming Interface (“API”) by a particular Client for use on its behalf.
| Imported Data (client) will be retained for up to 30 days for the following Purposes: TCF Purpose 3: Create profiles for advertising TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, | |
Imported Data (Third Party/Segment): Pseudonymised Information, which may include Online Data, and/or Offline Data that may be apportioned by Browsing Data, Attributes, Segments, Label Data and Interests. | Uploaded to the Quantcast platform or provided to us via an API by third-party Data Management Platforms or Data Providers.
| Imported Data (Third Party/Segment) will be retained for up to 30 days for the following Purposes: TCF Purpose 3: Create profiles for advertising TCF Purpose 4: Use profiles to select personalised advertising TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors | |
Inferences/Inferred Data: Information drawn from the above-listed categories of information (i.e., Event Data, Bid Request Data, Imported Data (Client), and Imported Data (Third Party/Segment)). We may, for example, use information that we have collected to infer your interests, age, gender, marital status, or income range. These Inferences may include Interests and Attributes. | Derived by Quantcast from previously collected Event Data, Bid Request Data, Imported Data (Client), and/or Imported Data (Third Party/Segment).
| Inferences/Inferred Data will be retained for up to 13 months for the following Purposes: TCF Purpose 3: Create profiles for advertising TCF Purpose 4: Use profiles to select personalised advertising TCF Purpose 7: Measure advertising performance TCF Purpose 8: Measure content performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors | |
Training Data: Pseudonymous Information used to improve Quantcast’s algorithms and measure how well they are working. | Received from third-party data providers and matched to Pseudonymous Identifiers. | Training Data will be retained for up to 30 days for the following Purposes: TCF Purpose 3: Create profiles for advertising TCF Purpose 8: Measure content performance TCF Purpose 9: Understand audiences through statistics or combinations of data from different sources TCF Purpose 10: Develop and improve products TCF Special Purpose 1: Ensure security, prevent and detect fraud, and fix errors | |
Information you provide: This may include your contact details, (e.g., name, email address, or phone number) and any commentary or other information you provide when you contact Quantcast. | Provided by you when you contact Quantcast. | Carrying out our legitimate business purposes. Retention Period: up to 18 months |
Additionally, any of the categories of Personal Information described above may be Processed for the following purposes.
Establishing, bringing, or defending against complaints, legal claims (including threatened or anticipated legal claims), and regulatory inquiries | Categories of Personal Information and associated retention periods are determined by the underlying purpose for which the Personal Information is Processed. |
Responding to legal requests | |
Complying with relevant laws and regulations | |
Conducting research | |
Hosting of Personal Information for above-listed purposes | Technically, all Personal Information is Processed in the course of being hosted on a server or in cloud computing service. Retention periods for each category of Personal Information Processed are disclosed above. |
Sensitive information: We generally do not seek or permit sensitive Personal Information (e.g., information revealing an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic or biometric data that is Processed for the purpose of uniquely identifying an individual; information concerning an individual’s health, sex life, or sexual orientation; and information relating to criminal convictions and offenses) to be used in the Solutions. However, as allowed by applicable laws and rules, we may collect and Process non-sensitive health-related information (outside of the EEA, UK, and Switzerland) in connection with the delivery of the Solutions. We provide a list of standard health segments and a representative sample of custom health segments that we use for targeted advertising here. Please note that where we Process any of your sensitive Personal Information, we seek and obtain your consent and/or otherwise Process such information in accordance with applicable laws and rules.
Children’s information: We do not seek or permit Personal Information from children under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with Personal Information, that parent or guardian should contact us at privacy [at] quantcast [dot] com. If we become aware that a child has provided us with Personal Information, we will take all reasonable steps to delete such information from our files.
Contractual commitments from our Clients and third-party Data Providers: We contractually require other companies that provide or make available to us Personal Information to take steps to ensure that we can lawfully Process such information, which include: (i) posting complete and accurate privacy policies that comply with applicable laws and rules and describe their Personal Information collection, use, and sharing practices; (ii) obtaining all legally-required consents and necessary permissions; and (iii) providing individuals with appropriate choices and the ability to opt out of the Processing of their Personal Information, where necessary or appropriate.
Information use and legal basis
As described in the “Who we are and what we do” section, we generally use the TCF as the mechanism for describing our Processing activities, and in Europe specifically for establishing our legal basis for Processing and managing users’ preferences for online personalised advertising and related activities. The TCF is designed to allow a digital business to present information and choices to users on its website relating to the Processing of their Personal Information.
We Process Personal Information for the purposes for which it was collected or provided to us. The table below describes the specific purposes for which we Process the Personal Information we collect or otherwise obtain about you. This table includes:
the purposes for which Quantcast Processes Personal Information ,which are tied to the defined purposes for Processing, special purposes, and features set forth in the TCF Policies and official technical documentation disseminated by IAB Europe where applicable(see Appendix A of the TCF Policies for examples and illustrations of the purposes, special purposes and features,
a description of each Processing activity using TCF-specific terminology (to the extent applicable), and
the legal basis that we rely on to perform each of our Processing activities.
Please note that in Europe, where we indicate that “Legitimate Interests” in accordance with the GDPR is the legal basis for Processing, we carry out the Processing in reliance on our legitimate interests or those of a third party (e.g., our Clients), provided that such interests are not outweighed by your interests or fundamental rights and freedoms.
Processing Purpose / TCF Purpose (where TCF is applicable) | Description of Processing Activity (using TCF Purpose terms) | ||
---|---|---|---|
Storing and/or accessing information on a device (TCF Purpose 1) | Cookies, Device Identifiers, or other information more fully described in association with the purposes below can be stored or accessed on your device for the purposes presented to you. | Consent | |
Use limited data to select advertising (TCF Purpose 2) | Ads can be shown to you based on the content you’re viewing, the app you’re using, your device’s Imprecise/Approximate Location Information, or your device type. When selecting “Use limited data to select advertising”, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our advertiser Clients meet their objectives of finding new customers and growing their brands through the delivery of relevant ads. | |
Creating profiles for personalised ads (TCF Purpose 3) | A profile can be built about you and your Interests to show you personalised ads that are relevant to you. To create or edit a profile for use in personalised advertising, Quantcast will:
| Consent | |
Using profiles to select personalised ads (TCF Purpose 4) | When serving personalised ads, Quantcast will select personalised ads based on Personal Information collected from or about you, such as your prior activity, Interests, visits to websites or mobile apps or streaming media, Imprecise/Approximate Location Information, demographic information or Inferences. | Consent | |
Measuring advertising performance (TCF Purpose 7) | Quantcast will measure the performance and effectiveness of ads that you see or interact with. In particular, to measure whether and how ads were delivered to you and how you interacted with them, Quantcast will:
In the provision of the Solutions to some Clients, Quantcast may correlate information between entries within its own datasets that have the same Pseudonymous Identifier or with information obtained from Ad Serving, Ad Verification, or Data Management Platforms/Data Providers. We do this to provide aggregated reporting to Clients about the number of visitors to their digital properties. Quantcast does not apply Panel or similarly derived Audience Insights data to ad measurement data without a separate legal basis to apply market research to generate Audience Insights. | Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our advertiser Clients meet their objective of ascertaining, measuring, and improving the effectiveness of their ad campaigns. | |
Measuring content performance (TCF Purpose 8) | The performance and effectiveness of content that you see or interact with can be measured. To measure content performance, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our Clients meet their objective of executing their digital content strategies more effectively. | |
Understanding audiences through statistics or combinations of data from different sources i.e. applying market research to generate Audience Insights (TCF Purpose 9) | Market research can be used to learn more about the Audiences who visit websites, mobile apps, or streaming media, and view ads. To generate Audience Insights, Quantcast will:
| Consent or Legitimate Interests, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to help our Clients meet their objectives of finding new customers and growing their brands through the delivery of relevant ads and/or executing their digital content strategies more effectively. | |
Developing and improving services (TCF Purpose 10 ) | Your information can be used to improve Quantcast’s existing systems and software and to develop new products. To develop and improve its products, Quantcast will:
For example, Quantcast matches its datasets with Training Data, which usually includes Event Data, Bid Request Data, Imported Data (Client), and/or Imported Data (Third Party/Segment). Quantcast primarily uses Training Data to train its algorithms how to infer individuals’ Attributes and Interests in the context of the Solutions. | Consent or Legitimate Interest, depending on the choice of the Client that is using the TCF. Where we rely on Legitimate Interests, we carry out the Processing to meet our organisational objective of continuously improving the Solutions for our Clients. | |
Ensuring security, preventing and detecting fraud, and fixing errors (TCF Special Purpose 1) | Your information can be used to monitor for and prevent fraudulent activity and ensure our systems and processes work properly and securely. To ensure security, prevent fraud, and debug, Quantcast will:
| Legitimate Interests We conduct the Processing to meet organisational objectives such as to maintain our IT systems; to ensure the electronic security of our business; and to detect and prevent against malicious, fraudulent, invalid, and illegal activity. | |
Technically deliver ads or content (TCF Special Purpose 2) | Your device can receive and send information that allows you to see and interact with ads and content. To deliver information and respond to technical requests, Quantcast will:
Quantcast may also match Pseudonymous Identifiers with third parties in order to deliver ads to Audiences. | Legitimate Interests We carry out the Processing to help our advertiser Clients meet their objective to ascertain, measure, and improve the effectiveness of their ad campaigns. | |
Matching and combining data from other sources i.e. offline data (TCF Feature 1) | Offline Data can be combined with your online activity in support of one or more purposes or special purposes outlined in this table. | The legal basis will depend on the TCF Purpose pursued. | |
Linking different devices (TCF Feature 2) | Different devices can be determined as belonging to you or your household in support of one or more purposes. Through Cross-Media Matching/Linking, Quantcast will:
| The legal basis will depend on the TCF Purpose pursued. | |
Receiving and using automatically sent device characteristics for identification (TCF Feature 3) | Your device will be distinguished from other devices based on information it automatically sends, such as IP Address or browser type. In particular, Quantcast will:
| The legal basis will depend on the TCF Purpose pursued. | |
Establishing, bringing, or defending against complaints, legal claims (including threatened or anticipated legal claims), and regulatory inquiries | We Process, preserve, and share Personal Information when we seek legal advice or seek to protect ourselves in the context of litigation and other disputes. | Legitimate Interests We carry out the Processing to meet our objective of protecting ourselves and others, including in connection with investigations, litigation, and regulatory inquiries. | |
Responding to legal requests | We preserve and share Personal Information in response to legal requests from law enforcement and other government officials, to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure of such information is necessary to comply with a judicial proceeding or court order. | Legitimate Interests We carry out the Processing to meet our objective of protecting ourselves and others, including in connection with investigations and regulatory inquiries. | |
Complying with relevant laws and regulations | We Process Personal Information to comply with our legal obligations under applicable law. Examples of Irish and EU laws enforceable in Ireland that could give rise to an obligation requiring us to Process Personal Information we hold about you are:
See quantcast.com/privacy/laws for the current list of laws which are enforceable in Ireland that give rise to a legal obligation for Quantcast which results in the Processing of Personal Information. As new laws may be enacted or other obligations may require us to Process your Personal Information, we will update this list from time to time. | Compliance with a legal obligation. | |
Conducting research | We use Personal Information to conduct research, surveys, product testing, and troubleshooting to help us operate and improve our products and services. | Legitimate Interests We carry out the Processing to meet our organisational objective of delivering and continuously improving the Solutions for our Clients. | |
Hosting information | We Process Personal Information to manage our business, which includes hosting Personal Information in our on-premise data centers and/or cloud computing services. | Legitimate Interests We carry out the Processing to meet our organisational objective of delivering the Solutions to our Clients. |
Information sharing
In connection with one or more of the purposes outlined in the “Information use and legal basis” section above, we may share your Personal Information with the categories of third parties described below.
Category of Recipient | Description and Purpose of Sharing | Categories of Personal Information Shared |
---|---|---|
Quantcast-affiliated companies | We share your Personal Information with Quantcast-affiliated companies in order to provide the Solutions. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Our vendors (including service providers/data processors) Visit the Quantcast Partners page for a list of our vendors. | We share your Personal Information with vendors who act on our behalf and are subject to binding contractual obligations and restrictions on the Processing of Personal Information we share with them. For example, these companies assist with information hosting, information Processing, database management, and administrative tasks. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Our partners, such as Data Management Platforms and Data Providers and Advertising Exchanges Visit the Quantcast Partners page for a list of our Partners | We share Pseudonymous Identifiers with companies that we partner with to support the operation of the Solutions. Specifically, Quantcast shares Pseudonymous Identifiers with 1) data providers via Data Management Platforms for the purpose of performing Cookie Syncing/Matches with Imported Data (Client) and Third Party/Segment Data, and 2) and Advertising Exchanges for the purpose of serving ads. | |
Relevant third parties as part of a corporate transaction | In the event of a reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding), we may share your Personal Information with (or transfer your Personal Information to) certain third parties, such as the acquiring entity and its advisors. We may also make certain information available to a potential investor or purchaser (and their advisers) in advance of any such transaction’s completion. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Competent governmental and public authorities | We may share your Personal Information with governmental and law enforcement authorities, in each case to comply with legal or regulatory obligations or requests. | All or certain categories of Personal Information are shared only as necessary or appropriate. |
Other third parties | We will share your Personal Information with other third parties at your direction or with your consent. Additionally, we may share your Personal Information as necessary or appropriate or where otherwise permitted by law to:
| All or certain categories of Personal Information are shared only as necessary or appropriate. |
We also create and share with our Clients insights or reports regarding the makeup of the Audiences that visit their digital properties or the performance of their advertising campaigns. These insights and reports may contain aggregated data from which individual users cannot be uniquely identified or data from which Quantcast has removed Pseudonymous Identifiers.
Information security
We employ appropriate organisational and technical security safeguards designed to keep Personal Information secure when it is transmitted to us and once we receive it. These measures may include encryption and employment of information storage security technologies to restrict access to our network. However, please be aware that no method of transmitting information over the internet or storing information is completely secure.
Information retention
We retain your Personal Information for as long as necessary for the purposes for which it was collected, as described in the “Information Collection” section above and in the tables below, except where we are required to retain the information for a longer period of time. Once Personal Information has reached its retention period, as applicable, we may either de-identify it (for CCPA purposes), anonymise it (for GDPR purposes), or permanently delete it.
Category of Personal Information | Maximum retention period for all purposes |
Pseudonymous Identifiers | Up to 13 months (NOTE: storing/accessing data on a device is the cookie lifespan - up to 13 months each time the cookie is reset) |
Imprecise/Approximate Location Information | Up to 30 days |
Event Data | Up to 13 months |
Bid Request Data | Up to 13 months |
Imported Data (Client) | Up to 30 days |
Imported Data (Third Party/Segment) | Up to 30 days |
Inferences/Inferred Data | Up to 13 months |
Training Data | Up to 30 days |
Information you provide | Up to 18 months |
Categories of Personal Information used for this purpose | Maximum retention period | |
---|---|---|
Store and/or access information on a device (TCF Purpose 1) | Cookie life span is up to 13 months each time it’s reset | |
Use limited data to select advertising (TCF Purpose 2) | Pseudonymous Identifiers Imprecise/Approximate Location Information | Up to 30 days |
Create profiles for personalised advertising (TCF Purpose 3) | Pseudonymous Identifiers Imprecise/Approximate Imported Data (Third Party/Segment) Inferences/Inferred Data | Up to 30 days |
Use profiles to select personalised advertising (TCF Purpose 4) | Pseudonymous Identifiers Imprecise/Approximate Location Information Imported Data (Third Party/Segment) Inferences/Inferred Data | Up to 13 months |
Measure advertising performance (TCF Purpose 7) | Up to 13 months | |
Measure content performance (TCF Purpose 8) | Up to 13 months | |
Understand audiences through statistics or combinations of data from different sources (TCF Purpose 9) | Pseudonymous Identifiers Imprecise/Approximate Imported Data (Third Party/Segment) Inferences/Inferred Data | Up to 13 months |
Develop and improve services (TCF Purpose 10 ) | Up to 13 months | |
Ensure security, prevent and detect fraud, and fix errors (TCF Special Purpose 1) | Pseudonymous Identifiers Imprecise/Approximate Imported Data (Third Party/Segment) Inferences/Inferred Data | Up to 13 months |
Deliver and present advertising and content (TCF Special Purpose 2) | Up to 30 days | |
Match and combine data from other data sources (TCF Feature 1) | Pseudonymous Identifiers Imprecise/Approximate Location Information | The retention period will depend on the TCF Purpose pursued. |
Link different devices (TCF Feature 2) | Pseudonymous Identifiers Imprecise/Approximate Location Information | The retention period will depend on the TCF Purpose pursued. |
Identify devices based on information transmitted automatically (TCF Feature 3) | Pseudonymous Identifiers Imprecise/Approximate Location Information | The retention period will depend on the TCF Purpose pursued. |
Establishing, bringing, or defending against complaints, legal claims (including threatened or anticipated legal claims), and regulatory inquiries | Categories of Personal Information and associated retention periods are determined by the underlying purpose for which the Personal Information is Processed. | |
Responding to legal requests | ||
Complying with relevant laws and regulations | ||
Conducting research | ||
Hosting information | Technically, all Personal Information is Processed in the course of being hosted on a server or in cloud computing service. Retention periods for each category of Personal Information Processed are disclosed above. |
International transfers
Quantcast operates a global service, and we engage vendors located around the world to help us deliver the Solutions. Accordingly, your Personal Information may be transferred outside of the country or region in which you reside, including to the United States and other countries where either our data centers, vendors, affiliates, or Partners are located. Where we transfer your Personal Information internationally, we do so in accordance with applicable law.
If you are based in the EEA, UK, or Switzerland, please note that we may need to transfer your Personal Information to countries that have not been recognised by the European Commision and/or the UK government as providing an adequate level of protection for Personal Information. We generally use EU Standard Contractual Clauses (to facilitate both controller-to-controller and controller-to-processor transfers) or other government-approved contracts that provide appropriate safeguards for Personal Information that is transferred to countries that have not been recognised as providing an adequate level of protection. You can contact us at privacy@quantcast.com to request a copy of our Standard Contractual Clauses.
In certain limited circumstances, we rely on other lawful mechanisms for international transfers of Personal Information or rely on derogations, such as the contractual necessity derogation.
Your choices and legal rights
Under applicable law, you may have certain rights in relation to your Personal Information. Additional details about the rights that you may have and how to exercise such rights can be found below.
Right of access: The right to request access to your Personal Information and receive certain information, including the categories of your Personal Information we collect and disclose. To exercise this right, see our Data Subjcet Request Formrequest form here.
Right of rectification/correction: The right to request that we rectify (or correct) inaccurate Personal Information about you. In practice, if you seek to exercise your right of rectification/correction, due to the limited Personal Information we Process, we satisfy this right by providing you with the option to request deletion of your Personal Information. To request the deletion of your Personal Information, see our Data Subject Request Form request form here.
Right of erasure/deletion: The right, in certain cases, to request that we delete your Personal Information, provided there are valid grounds for doing so and subject to applicable law and exceptions. To exercise this right, see our Data Subject Request Form request form here.
Right to data portability: The right, in certain cases, to receive a copy of your Personal Information in a structured, commonly used, and machine-readable format and transmit such information to another controller. To exercise this right, see our Data Subject Request Form request form here.
Right to object (marketing): The right to object to the Processing of your Personal Information for direct marketing purposes. In practice, we satisfy this right by providing you with the option to opt out of our Processing of your Personal Information for advertising purposes. To exercise this right, see our Privacy Choices (opt-out) Page opt-out page here. Additionally, as noted in the “Self Regulatory Standards” section above, we are a member of the NAI and a DAA and EDAA participating company. Each of these self-regulatory bodies offers a tool that allows individuals to opt out of receiving targeted advertising from Quantcast and other participating companies. These links will take you to the NAI opt-out page and the DAA opt-out page. If you are located in Europe, you may prefer to visit the EDAA opt-out page.
Right to object (legitimate interests): The right to object to the Processing of your Personal Information where we Process it on the basis of our legitimate interests, as described in the “Information Use and Legal Bases” section above. Unless we have compelling legitimate grounds or the information is needed for the establishment, exercise or defense of legal claims, we will cease Processing your Personal Information when you object. To exercise this right, see our Privacy Choices (opt-out) Page opt-out page here.
Right to restrict Processing: The right, in certain cases, to temporarily restrict our Processing of your Personal Information, provided there are valid grounds for doing so. In practice, if you seek to exercise your right to restrict the Processing of your Personal Information, we will treat it as an exercise of the right on an ongoing, rather than temporary, basis (i.e., the request will be treated as you exercising the right to object to the Processing of your Personal Information). To exercise this right, see our Privacy Choices (opt-out) Page opt-out page here.
Right to withdraw your consent: The right to withdraw the consent you have provided at any time, where we Process your Personal Information on the basis of your consent. Please note that the lawfulness of any Processing undertaken prior to your withdrawal of consent shall not be affected by the withdrawal. To exercise this right, see our Privacy Choices (opt-out) Page opt-out page here.
Right to lodge a complaint: The right to complain to the relevant authority regarding the Processing of your Personal Information by us or on our behalf. In the EU, the lead supervisory authority is the Irish Data Protection Commissioner. See the section “ Contact Us” below.
Please note that the rights listed above may not be exercised in certain circumstances, such as when the Processing of your Personal Information is necessary to comply with a legal obligation to which we are subject or for the exercise or defense of legal claims. Additionally, in order to protect your privacy, we may require proof of your identity before we can act on your request but only where it is necessary and proportionate to request this information.
If you are based in the EEA, UK, or Switzerland and have issues or questions about the above-listed rights, you may contact our European Data Protection Officer via dpo@quantcast.com.
If you are based in the EEA, UK, or Switzerland, under applicable law, you also generally have the right not to be subject to a decision when it is based on automated Processing (i.e., an operation that is performed without any human intervention), if it produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). Please note, however, that Quantcast does not make decisions based solely on automated Processing that produce a legal effect or similarly significantly affect individuals.
Additional information for EEA, UK, and Switzerland residents
If you are located in the EEA, UK, or Switzerland, please note that the Solutions are provided by our European entity, Quantcast International Limited. In Processing Personal Information in the context of providing the Solutions to our Clients, Quantcast Internal Limited generally acts as a data controller. More specifically, Quantcast International Limited is a joint controller along with its Client when we jointly determine the purposes for which your Personal Information will be Processed. For example, we are joint controllers with Advertisers and Publishers for Personal Information that is collected as Quantcast Cookies, or using Pixels, Tags and SDKs deployed by our Clients on their digital properties, and for the Processing of other Personal Information introduced into the Solutions directly by the Client. This is because both Quantcast and the Client have influence over whether and how we collect and Process the Personal Information. In limited situations, Quantcast is the sole data controller of Personal Information when we are Processing it for our own independent purposes, for instance when we use a Quantcast Pseudonymous Identifier or we derive aggregated analytics for modeling, developing our algorithms, or improving the Solutions.
Your choices and legal rights
Under applicable law, you may have certain rights in relation to your Personal Information. Additional details about the rights that you may have and how to exercise such rights can be found in the Your choices and legal rights section above. .
If you are based in the EEA, UK, or Switzerland and have issues or questions about the above-listed rights, you may contact our European Data Protection Officer via dpo@quantcast.com.
If you are based in the EEA, UK, or Switzerland, under applicable law, you also generally have the right not to be subject to a decision when it is based on automated Processing (i.e., an operation that is performed without any human intervention), if it produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services). Please note, however, that Quantcast does not make decisions based solely on automated Processing that produce a legal effect or similarly significantly affect individuals.
Additional information for California residents
The California Consumer Privacy Act (“CCPA”) provides California residents with certain rights. Pursuant to the CCPA, we are providing the following additional details regarding the categories of Personal Information about California residents that we collect, use, and disclose.
Categories of personal information collected: We have collected the following categories of Personal Information from California residents within the last twelve (12) months:
Identifiers, such as IP Address and other similar Pseudonymous Identifiers.
Internet or other electronic network activity information, including browsing history and information regarding individuals’ interactions with websites or mobile apps or streaming media.
Geolocation data, such as Imprecise/Approximate Location Information derived from device IP Addresses.
Inferences, which refers to inferences drawn from any of the information in these categories of Personal Information to predict the individual’s characteristics.
Categories of sources of personal information: As described in the “Information collection” section above, we collect the above-listed categories of Personal Information directly from individuals; through automated means (e.g. Pixels, Tags and SDKs, Cookies or Bid Requests); and from third parties (e.g., our Clients).
Disclosures of personal information: As described in the “Information sharing” section above, in the preceding twelve (12) months, we have disclosed Personal Information about California residents in all of the above-listed categories of Personal Information to our affiliates and vendors. Additionally, in the preceding twelve (12) months, we have disclosed Identifiers to our partners.
Sale of personal information: Quantcast does not “sell” (as defined in the CCPA) Personal Information and has not “sold” Personal Information in the preceding twelve (12) months in relation to operating the Solutions.
Individual rights and requests: If you are a California resident, you have the right to request that we:
Disclose to you the following information covering the 12 months preceding your request:
the categories of Personal Information we have collected about you and the categories of sources from which we collected such information;
the specific pieces of Personal Information we have collected about you;
the business or commercial purpose for collecting Personal Information about you;
the categories of third parties with whom we shared or to whom we disclosed such Personal Information; and
if we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:
sales, identifying the Personal Information categories that each category of recipient received; and
disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
Delete the Personal Information we have collected from you.
If you are interested in exercising one or more of the rights outlined above, please click the relevant link in the “Your choices and legal rights” section above. You may also submit requests by contacting us via email at privacy [at] quantcast [dot] com. We will attempt to verify your identity and respond to your request consistent with the CCPA.
If you authorise a natural person or business entity to submit a request on your behalf (an “Authorised Agent”), the Authorised Agent may use the submission methods noted above. As part of our verification process, we will require proof concerning their status as an Authorised Agent, which may include proof of their registration with the California Secretary of State to conduct business in California and/or proof that they have power of attorney in accordance with California probate law. We may also require you to verify your identity directly with us or directly confirm with us that you provided the agent with permission to submit the request.
Information about annual data requests is available in the CCPA Annual Report..
We will not discriminate against you if you decide to exercise your rights under the CCPA.
Global Privacy Control (“ GPC ”) is a preference that you can set in certain web browsers to inform the websites you visit that you do not want information about your online activity collected over time and across third-party websites or online services. We honor GPC for all data subjects in the United States. Please visit the Quantcast Privacy Choices page for more information about GPC.
Contact us
If you have any questions about this Privacy Policy or our information handling practices, please feel free to contact us.
Individuals located in the United States, please contact us at:
Quantcast Corp.
795 Folsom Street
San Francisco, CA 94107
Email: privacy [at] quantcast [dot] com
Individuals located outside of the United States, please contact us at:
Quantcast International Limited
Beaux Lane House
Lower Mercer Street
Dublin 2, Ireland
Email: privacy.qil [at] quantcast [dot] com
The Data Protection Officer (DPO) for Quantcast International Limited can be contacted at dpo@quantcast.com.
If you have contacted us or our DPO about a privacy or information use concern and feel that we have not addressed it satisfactorily, you may contact our US-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
If you are a resident of the EEA, UK, or Switzerland, you also have the right to lodge a complaint against us with our lead supervisory authority, the Irish Data Protection Commission, or the supervisory authority in your country of residence.
Changes to this Privacy Policy
We may revise this Privacy Policy from time to time to reflect changes in our practices with respect to the collection, use, and/or disclosure of Personal Information or changes in applicable law. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last updated. Any changes will become effective when we post a revised version of this Privacy Policy unless otherwise specified.
Some of our changes will be minor, but if we make significant changes to how we use or share your Personal Information, we will:
inform you in advance by posting a notice on our website
wait for a period of time before implementing the changes
We encourage you to review this Privacy Policy periodically to remain informed about our information handling and privacy practices.
Effective February 13th 2024 to February 14th 2024
DownloadTable of Contents
Products and Services Privacy Policy
This Policy takes effect on March 1 2024. See Policy effective September 11 2023 until that date.
Products and Services Privacy Policy
Information use and legal basis
Additional information for EEA, UK, and Switzerland residents
Additional information for California residents
Changes to this Privacy Policy
Capitalised terms used in this Products and Services Privacy Policy (the “Privacy Policy”) are defined in Key Terms unless otherwise defined herein.
To exercise your Data Subject Rights (described in the Your choices and legal rights below), please visit the Quantcast Privacy Choices page.
Who we are and what we do
Quantcast (“we”, “our”, or “us”) is a global digital advertising technology group of companies. Quantcast offers products and services that help digital advertisers and publishers (collectively, “Clients”) understand and grow their audiences (the “Solutions”). Through Quantcast Advertise Solutions, advertiser Clients can plan, activate, and measure the performance of their advertising campaigns seamlessly in a single audience platform, which helps them to place their ads to maximise results. Through Quantcast Measure Solutions, digital publisher Clients leverage insights to better understand the makeup of their audiences, how audiences spend their time across their digital properties, and what audiences care about, all of which help these digital businesses better connect their content and Audiences with the right advertising.
To provide the Solutions, Quantcast collects and uses Personal Information for various purposes, such as measuring and understanding audiences, targeting and delivering ads, measuring ad performance, and similar related purposes. As described in the “Information Collection” section below, we may join or match Personal Information about you, which may include your Online Data from your visits across different digital properties, like websites,mobile apps, or streaming media devices (such as connected TVs (“CTVs”)), that have implemented Quantcast Pixels, Tags or SDKs (which is sometimes called “tracking” in the industry) or Offline Data . This allows us, for example, to enrich our existing data sets and provide meaningful reports for our Clients regarding the effectiveness of their ads or content. We may also combine Personal Information that we collect in order to probabilistically link media consumption to a single user, which is sometimes called Cross-Media Matching/Linking. To the extent that we combine Personal Information that we collect from and about you in connection with our performance of the Solutions, we will use such combined information only as described in this Privacy Policy.
This Privacy Policy describes in more detail how we collect, use, disclose, and protect Personal Information, otherwise obtain and Process it in connection with the delivery of the Solutions, and the controls we provide you to manage such information and exercise your choices and legal rights. As noted in the “Information use and legal basis” section below, we use the Transparency and Consent Framework (“TCF”) standard to facilitate compliance with applicable laws in Europe, primarily in accordance with the EU General Data Protection Regulation (“GDPR”). Because the TCF is one means of explaining Processing activities, and because our Processing activities are consistent globally, the TCF Purposes are applicable to all Personal Information that we Process (regardless of the information’s country of origin).
In the United States, the Solutions are provided by Quantcast Corporation, located at 795 Folsom Street, San Francisco, CA 94107. Personal Information relating to individuals located within the United States provided to or gathered by us in connection with the delivery of the Solutions is controlled by Quantcast Corporation.
Outside of the Un