AtLupon Media / AdxPremium accessible from adxpremium.services, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by adxpremium.services and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at
in...@luponmedia.com This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in adxpremium.services. This policy is not applicable to any information collected offline or via channels other than this website. Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms. Information we collect The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number. How we use your information We use the information we collect in various ways, including to: Provide, operate, and maintain our website Improve, personalize, and expand our website Understand and analyze how you use our website Develop new products, services, features, and functionality Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the webste, and for marketing and promotional purposes
Send you emailsFind and prevent fraudLog Files
adxpremium.services follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information. Our Privacy Policy was created with the help of the Privacy Policy Generator and the Online Privacy Policy Generator.
Cookies and Web Beacons Like any other website, adxpremium.services uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information. Third Party Privacy Policies AdxPremium's Privacy Policy does not apply to other advertisers or websites. You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.
CCPA Privacy Rights (Do Not Sell My Personal Information) Under the CCPA, among other rights, California consumers have the right to:Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.Request that a business delete any personal data about the consumer that a business has collected.Request that a business that sells a consumer's personal data, not sell the consumer's personal data.If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Another part of our priority is adding protection for children while usin g the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. adxpremium.services does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Adalytics asked a simple question - what happens if a user only provides partial consent? What happens if someone takes the time to actually read all the cookie options, and only consents to basic ads from one ad tech vendor? Or, what happens when a person explicitly disallows personalization and behavioral profiling? Have the hundreds of ad tech companies set up their servers and systems to correctly modulate their behavior when a user says: "I don't consent to this vendor processing my information"?
Observational studies conducted by several EU citizens from Belgian, German, French, and Italian IP addresses suggest that several ad tech vendors, both large and small, continue to build personalised profiles on EU citizens, even when a consumer has explicitly objected to a vendor processing their data for targeted ads.
The TCF is a set of standards and software tools that take a user's inputs, such as clicks on a cookie banner, convert them into an encoded string, and transmit that string to servers or APIs that can then modulate their behavior in response to what type of consent a user has provided.
The TCF framework also allows consumers to select which data brokers or ad tech companies process their information. There are approximately 791 vendors who participate in the IAB TCF system, which can be viewed here and here. This list is referred to as the IAB Europe Global Vendor List (GVL)
The vendors include the European affiliates of well-known tech companies such as Google, Amazon, and Yahoo, as well as companies headquartered in Europe, Singapore, Japan, US, Canada, and other locations.
This study set out to determine what happens if a user only provides partial consent - meaning, they only consent to say, basic ads from Google and Amazon, but no personalised ads, no cookies, and no data processing from the other 789 ad tech vendors that participate in the TCF.
Adalytics obtained crawler data from 48,698 different publisher domains, ranging from large international news sites to small community forums and blogs. All crawl data was obtained from an EU IP address, either in Germany or in Finland. In each page visit, the crawler did not trigger any motions, clicks, or interactions; it just passively observed page load behavior.
The table below shows the top domains which were observed receiving HTTPS requests when a TCF string did not provide any consent or legitimate interest. Some, but not all, of these domains were observed setting cookies or triggering user IDs syncs despite the default TCF string specifically forbidding any tracking.
For example, on
laprovinciadilecco.it, the default TCF configuration disallows all purposes and legitimate interests, yet there are still unique user ID cookies being used by
gum.criteo.com (owned by French ad tech company Criteo).
Yet, when the advertiser checked where their 47 million ads were served by using an IP address geo-location lookup service, it found that the majority were served to users based in Spain, Croatia, Italy, France, and other EU countries.
This section details examples of where users in various EU countries visited specific publisher websites, waited for the consent banners to load, and provided partial consent - only for basic ads, with no personalization allowed. Additional tests and case studies are available in the Appendix section at the end of the article.
An EU citizen with a German IP address installs Google Chrome on their desktop for the first time. This new instance of Chrome is not logged into any accounts or emails, and has no cookies or local storage.
The user sees that many firms have been toggled on, giving them consent by default. The user clicks on all the buttons (there are hundreds), to ensure that all toggle buttons have been de-activated to remove vendor-specific consent.
This example with
wsj.com and a German IP address user shows that several ad tech vendors are sending and receiving data, and storing cookies, without consent or legitimate interest. These patterns are observed even after the user has navigated through several pages on the
wsj.com website post-consent selection.
The domain with which
id5-sync.com was observed exchanging user IDs with was
rtb-csync.smartadserver.com - owned by Smart AdServer, a French advertising technology offering ad serving and programmatic monetization solutions.
This study tried to account for that possibility in some ways. For example, in manual experiments, the users generally made sure to disallow legitimate interests for all purposes beyond showing basic ads.
To recap, this study observed several instances where an ad tech vendor was receiving TCF strings that stated the user was objecting to personalised ads, and that the user had not provided consent (or legitimate interest) to specific vendors, such as Linkedin, Amazon, Yahoo, AppNexus, or The Trade Desk.
Adalytics reached out to a top five global agency executive for comment on how they would react when SSPs, DMPs, and/or DSPs claim to have lawfully obtained consent from consumers, but it turns out, the consumers did not provide consent.
Furthermore, this individual request also appears to trigger further User ID syncs with Taiwan-based ad vendor Appier, London-based Crimtan (
ctnsnet.com), US-based TowerData (
idsync.rlcdn.com), and US-based MediaMath (
mathtag.com).
California-based Krush Media also receives header bidding requests containing the restricted TCF string set by Nicolas. Despite this,
krushmedia.com sets a cookie called "krm_usr", which appears to contain a unique user identifier.
3a8082e126