ATT Requirements for Showing Non-Personalised Ads when using CMP

[bellissimo]

Currently on iOS we simply show the ATT prompt with an explainer message, and if the user consents to tracking then Personalised ads are shown, and if the user declines then Non-Personalised ads are shown. 

So when we switch to a Google Certified CMP, if the user somehow agrees to Non-Personalised Ads (using Google's UMP for example), but then declines the ATT (Ask App Not to Track), will Non-Personalised ads still be shown?

[Mobile Ads SDK Forum Advisor]

Hi,

Thank you for reaching out to us.

As per this article (https://support.google.com/admob/answer/10115027?hl=en&sjid=6409788409933810109-AP), kindly check the following scenarios that may occur

• Is not in the EEA -> The IDFA explainer message
• Is in the EEA and has already consented to GDPR -> The IDFA explainer message
• Is in the EEA and has not yet made an EU consent decision -> The GDPR consent message

If you consented the non personalized ads, they you may get a non personalized ads in your app. For more information, kindly check this article (https://support.google.com/admob/answer/9956625?hl=en&sjid=6409788409933810109-AP).

This message is in relation to case "ref:_00D1U1174p._5004Q2olHKY:ref"

Thanks,
 

Mobile Ads SDK Team

[bellissimo]

Thanks for your response, but I'm afraid you did not actually answer my question, and neither do those articles. The scenario is:

• GDPR consent message -> User consents to Non-Personalised Ads -> IDFA explainer message -> User chooses 'Ask App Not to Track'

So in this scenario (bearing in mind that the IDFA is not available), can Non-Personalised Ads still be shown?

[Mobile Ads SDK Forum Advisor]

Hi Bellissimo,

Thank you for responding back.

For your use case, your user should see a non-personalized ads.

[bellissimo]

Great, thanks for clarifying, that does lead to one more question though...

If the IDFA is not required for Non-Personalised Ads, what exactly is the personal data that you store on a mobile device that requires consent from the user?

[Mobile Ads SDK Forum Advisor]

Hi,

Thank you for your response. As per this article (https://support.google.com/admob/answer/7676680?hl=en&sjid=6409788409933810109-AP), although non-personalized ads don’t use cookies or mobile ad identifiers for ad targeting, they do still use cookies or mobile ad identifiers for frequency capping, aggregated ad reporting, and to combat fraud and abuse. Therefore, you must obtain consent to use cookies or mobile ad identifiers for those purposes where legally required, per the ePrivacy Directive in certain EEA countries. 

[bellissimo]

Yes, I understand that.

However in this scenario the mobile identifier is not available, so can't be used. A cookie or the like would typically use an identifier of some sort to match the user for purposes of ad-reporting and the like. As the IDFA identifier is not available in this scenario, I would like to know what exactly is the personal data that is being used to identify the user in this scenario?

[Mobile Ads SDK Forum Advisor]

Hello,

For more information what information is collected, you can refer to this document: https://support.google.com/admob/answer/9755590?hl=en.

You can also refer to this document on which data is needed for personalized ads or non-personalized ads: https://support.google.com/admob/answer/9760862?hl=en&sjid=2418371235660772237-AP.