Effective Date: February 2, 2021
Table of Contents:
- About us
- Information we collect
- How we use the information we collect
- Maximum information retention period
- How we share your information
- How to control your information
- International transfers
- Contact us
ironSource Mobile Ltd. (“ironSource Mobile”) operates 3 main services:
- Ad Network – We have a network that connects app developers with advertisers, and helps app developers to serve ads on their apps. App developers means the company or individual that developed and operates the mobile app that is integrated with or otherwise sends information to ironSource Mobile. Advertiser is a company or an individual that advertises its products or services within the app.
- Mediation Platform – A platform that helps app developers to manage all the ad providers with which they have a direct relationship (e.g. ironSource Mobile ad network, third party ad networks, additional online advertising companies, etc.) that serve ads on their apps.
- Marketing Platform – We help advertisers to create and optimize advertising campaigns.
We collect information in either of 2 ways:
- Directly – from your device through our SDK integrated by app developers in their apps. SDK, or a Software Development Kit, is a software component that allows us to serve ads in a mobile app, and to collect information directly from the end users of such app.
- Indirectly – through other ad networks with which we engage in order to serve you with ads, or by receiving information from our advertisers.
Information We Collect
- Information collected directly from you through our SDK, and information provided to us by a third party ad network (“Ad Network Information”) –
Identifiers: Your Advertising ID, an additional unique identifier of available solely from within the app of the app developer which cannot be used to identify you on other apps, IP address, information about your browser settings. The term Advertising ID refers to the Google Advertising ID on Android devices, and ID For Advertising (“IDFA”) or ID For Vendor (“IDFV”) on iOS devices. The Advertising ID is a resettable persistent identifier generated by Android or iOS that allows online advertising companies to recognize your device across non-affiliated apps, for purposes such as frequency capping, attribution, fraud detection, personalized advertising, and whitelisting. You can find additional information about how to limit our use of your Advertising ID under “How to Control Your Information”.
General technical information about your device: The ironSource Mobile SDK version, your time zone, the amount of free memory on your device, the name and version of the app to which the ad is served, battery status (on Android devices only), limit ad tracking status, operating system name and version, timestamp, the name of the manufacturer of the device, the language of the operating system, the name of the mobile carrier, internet connection type (e.g. WiFi).
Interaction with our ads: An indication if you viewed or clicked on an ad.
- Information received (through our SDK) from app developers that are integrated with our mediation platform (“Mediation Information”) – your age, gender, in-app purchases, advance in the game, and such other information provided by the app developer.
- Information received from advertisers (through the advertiser itself or through a third party in behalf of such advertiser) (“Advertiser Information”)
Identifiers: Your advertising ID, IP address, a unique identifier of your device available solely with respect to the advertiser, information about your browser settings.
Campaign information: an indication that you installed the advertiser’s app following a click on or a view of an ad served by us or otherwise; information about actions you performed within an advertiser’s app following such an install, such as in-app purchases, level in the game, and the number of times you opened the app; and other information that the advertiser decides to share with us.
How We Use the Information We Collect
As stated above, we perform 3 main services. For each such service, we use the information we collect in different ways. Below is a general description of how we use your information across our services:
- Serving Ads on App Developers’ Apps – We use the Ad Network Information collected from your device to serve ads on app developers’ apps. More specifically, we use such information for the following purposes:
- Ad delivery: we use your Ad Network Information to technically enable the delivering of ads to your device.
- Reporting, billing and attribution: We use your Ad Network Information to generate reports for our publishers and bill advertisers and publishers, including for ensuring that if you interacted with our ads, we will receive payment for our service.
- Internal Operations: We use your Ad Network Information for internal operations, such as debugging, support, security, and improving our services.
- Fraud detection and prevention: We use your Ad Network Information for detecting and preventing fraud, and for ensuring viewability of our ads.
- Optimization and frequency capping: We use your Ad Network Information for optimizing advertising campaigns, including for limiting the number of times you view a specific campaign across our network, or the number of ads you view in a specific app.
- Personalized advertising: Our corporate affiliates and advertisers may use your Ad Network Information for personalized advertising (i.e. ads that are based on your interest or profile).
- Operating our Mediation Platform – We use your Advertising ID, IP address, and Mediation Information collected from your device to operate our mediation platform. More specifically, we use such information for the following purposes:
- Reporting: We generate reports for the app developers using our mediation platform in order to allow them to better understand their audience in terms of interaction with ads.
- Segmentation: We allow app developers to create segments based on parameters they configure in our mediation platform. Such segmentation allows them to use different ad networks and different ad units for different segments of users. However, this feature does not allow them to serve you with personalized advertising, as app developers cannot control the content of the ads served by different networks.
- Sending ad requests on behalf of the app developer: In addition to the other information used to operate the mediation platform, we use the Ad Network Information in order to send ad requests on behalf of the app developer to ad networks with which the app developer has direct contractual relationship, but due to technical reasons, we are in the best position to populate the ad request with the Ad Network Information.
- Operating our Marketing Platform – We use the Advertiser Information received from our advertisers to operate our marketing platform. More specifically, we use such information for the following purposes:
- Optimizing advertising campaigns: We optimize campaigns for our advertisers based, for example, on events that happen in their app or indications of installs received from other apps.
- Suppression: We use device IDs of users of an advertiser’s app in order not to serve advertising campaigns of such advertiser to such users, as they already have the advertiser’s app.
- Whitelisting/blacklisting: We allow advertisers to upload lists of device IDs to include/exclude in their advertising campaigns.
- Compliance with legal obligations – We may use your Ad Network Information, Mediation Information, and Advertiser Information to comply with applicable legal obligations.
The GDPR Angle:
- We act as a processor – When we process Ad Network Information, Mediation Information and Advertiser Information on behalf of app developers, we act as their processors. For any request to exercise your individual rights related to such processing (including the rights of access, rectification, erasure, portability, and the right to restriction and/or object to processing), you should contact the relevant app developer.
- We also act as controllers and process personal data on the basis of legitimate interest – When we process Ad Network Information for the purposes of optimization and frequency capping (to ensure you are not seeing the same ad too many times), fraud detection and prevention (to ensure that our ads are not viewed by bots, and/or any other fraudulent means), and internal operations, as detailed above (to ensure you receive smooth and secured experience), we process such personal data on the basis of our legitimate interest or the legitimate interests of our app developers.
- Personalized Advertising in the European Economic Area, United Kingdom, and Switzerland – At the moment, we do not serve personalized ads (also known as “interest based advertising”) to users who are located in the European Economic Area, United Kingdom, and Switzerland. However, as a result of technical considerations, on certain occasions, we may be included in consent pop-ups operated by app developers and ad networks that are engaged with us. If we start serving personalized advertising to users who are located in the European Economic Area, United Kingdom, and Switzerland, we will ask you for your consent (typically through consent pop-ups managed by app developers and ad networks with which we work).
- Further processing of Advertiser Information and Ad Network Information – When we process Advertiser Information, we may further process Advertiser Information and Ad Network Information for optimization of our network based on our legitimate interest.
- Legal necessity – We may process your Ad Network Information, your Mediation Information, and your Advertiser Information for compliance with applicable legal obligations.
The CCPA Angle:
- We act as “service providers” – In many cases, we act as a service provider to collect personal information from, or on behalf of, customers who use our services. These customers have their own privacy policies that describe how they use information. To the extent that we are processing personal information subject to the CCPA on behalf of a customer in our role as a service provider, you should reach out to that customer directly to exercise your rights under the CCPA.
- The remainder of this section provides disclosures for users for cases where we are not acting as a service provider to a customer.
- Personal Information We Collect, Disclose for a Business Purpose, and Sell – We collect the categories of personal information about California users identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed and sold personal information about California users to third parties for business or commercial purposes.
|Categories of Personal Information||Categories of sources from which information is collected:||Business or commercial purposes for collection, use, and sharing:||Disclosed for business purposes to the following categories of third parties:||Sold to the following categories of third parties:|
|Personal and online identifiers (such as first and last name, email address, or unique online identifiers)||See the “About Us” Section||See the “How We Use the Information We Collect” Section||See the “How We Share Your Information” Section||All categories listed below.|
|Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)||See the “About Us” Section||See the “How We Use the Information We Collect” Section||See the “How We Share Your Information” Section||All categories listed below.|
|Geolocation information||See the “About Us” Section||See the “How We Use the Information We Collect” Section||See the “How We Share Your Information” Section||All categories listed below.|
|Other information about you that is linked to the personal information above||See the “About Us” Section||See the “How We Use the Information We Collect” Section||See the “How We Share Your Information” Section||All categories listed below.|
- Recipients of California Personal Information – Although we do not sell personal information for monetary consideration, we do sell personal information, subject to the choices with respect to “sale” of personal information communicated to us by the app developer from which our services are available, to the categories of third parties listed below, under the definition of “sale” in the CCPA:
- Advertising/marketing companies;
- Advertising networks;
- Game publishers;
- App developers; and
- Attribution companies.
- Maximum Information Retention Period:
We will retain your Ad Network Information, Mediation Information, and Advertiser Information for the longer of: (i) a period of up to 2 years from the date such information is first stored in our systems; or (ii) a period of 3 months from the last appearance of your Advertising ID in our systems.
How We Share Your Information:
- We share your Ad Network Information with:
- Other advertising partners – for the purpose of receiving advertising campaigns from such advertising partners.
- Our corporate affiliates – from which we receive services, such as IT, security, storage, delivery of advertising campaigns, personalized advertising, and other internal operations.
- Advertisers – for the purposes of attribution and whitelisting/blacklisting, as stated above.
- Service providers – We share your Ad Network Information, Mediation Information, and Advertiser Information with our service providers for the purpose of receiving services such as fraud detection and prevention, viewability measurement, reporting, and storage.
How to Control Your Information
- Opt out from personalized ads – If you do not want us to transfer your information to corporate affiliates and third parties for personalized ads, please follow the below instructions:
- iOS devices: go to Settings > Privacy > Advertising > enable Limit Ad Tracking. Please note that if you use more than one device, you need to opt-out separately in each device.
- Android devices: Please follow the instructions set forth at: https://support.google.com/ads/answer/2662922?hl=en. Please note that if you use more than one device, you need to opt-out separately in each device.
- Scope of the opt-out – Note that if you reset your advertising ID through your device’s platform settings, you should follow the steps above to reset your opt-out choice. In addition, opting out may not stop data from being collected from your device or transferred for other, non-personalized advertising purposes such as optimization, reporting, frequency capping, internal operations, and fraud prevention. If you become aware of any third party that received your Ad Network Information from us, and that does not respect your choices, please let us know by contacting us at: firstname.lastname@example.org.
The GDPR Angle:
- Data subject rights – Please note that you have the right to request from us access to and rectification or erasure of your personal data we process as controllers, or to restrict or to object to processing of your personal data in accordance with the provisions of the GDPR. To submit a request for exercising your rights, please use one of the following ways:
- For access and erasure requests, submit your request through our online form, which can be accessed at https://ironsrc.formtitan.com/Data_Subject_Request
- For other data subject requests, please send an email with your request to the following address: email@example.com
Please note that we will process your request subject to verification of your identity.
- Complaint to supervisory authority – You also have the right to file a complaint with the relevant supervisory authority (e.g. of your country or domicile) where ironSource has not addressed your concerns.
The CCPA Angle:
- Your Rights Regarding Personal Information – California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
- The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information.
- The right to request that we delete the personal information we have collected from you or maintain about you.
- The right to opt out of our sale(s) of your personal information. Please note that if you opt out of certain types of sales, we will be unable to provide you with the services that rely on such sales.
- The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.
- Exercise your rights – To exercise any of the above rights, please use one of the following ways:
- For exercising your rights to know or to delete personal information, submit your request through our online form, which can be accessed at https://ironsrc.formtitan.com/Data_Subject_Request
- Alternatively, you may send an email with your request to the following address: firstname.lastname@example.org
For more information on how you can exercise your rights you may also call our toll-free phone number: +1(888)244-7212
- Verification Process and Required Information – Note that we may need to request additional information from you to verify your identity or process your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your email address. We will also collect information that identifies your device when you submit a request, in order to help verify your identity.
- Authorized Agent – You may designate an authorized agent to make a CCPA request on your behalf by verifying your identity and providing the agent with written permission to make the request on your behalf.
The Nevada Angle:
- Although we do not currently conduct sales of personal information (covered by the relevant Nevada law), Nevada residents may submit a request directing us to not sell personal information we maintain about them if our practices change in the future, by sending the request to the following email address: email@example.com.
The GDPR Angle:
- We do not collect or otherwise process personal data from individuals in the European Economic Area, the United Kingdom, and Switzerland whom we know to be under 16 years of age, except to comply with law or to support our legitimate interests or the legitimate interests of our app developers as described above.
The CCPA Angle:
- We do not sell the personal information of minors under 16 years of age.
We store information that we collect from your device on our Amazon Web Services servers in the United States. Accordingly, please note that if you do not live in the United States, we will transfer your information to and store it in, the United States.
The GDPR Angle:
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we will transfer your information to the United States based on the Standard Contractual Clauses. If you wish to receive a copy of these clauses, please contact us through the below contact details.
ironSource Mobile Ltd.
121 Menachem Begin Rd., Tel Aviv, Israel
Attn: Data Protection Officer