CCPA Compliance

1. Overview

OnlyMedia is an ad network, SSP and agency. This page explains what personal information we collect about consumers, why, what we disclose, and how to use your rights. Nothing here limits rights the Privacy Policy gives you.

2. Scope and applicability

It covers consumer data reaching us through this website, the ad platform and business operations. It does not cover employee, applicant or contractor data, business-to-business information where exemptions apply, or non-personal information such as publicly available, de-identified or aggregate data.

3. Categories of personal information collected

In the preceding twelve months we have collected:

• Identifiers: cookie IDs, device IDs, mobile advertising IDs such as IDFA and Android Advertising ID, connected TV device IDs and synced identifiers.
• Internet and network activity: IP address, user agent, URLs and ad slots of impressions, bid request context, ad views, clicks and video completion.
• Geolocation data: approximate location at country or metro level, and precise location only where a publisher enables it and you grant permission.
• Commercial and account information: names, business emails, domains, traffic profiles and billing data you give us as a publisher, advertiser or partner.
• Inferences: coarse audience or contextual segments supplied by publishers or vetted partners; never sensitive characteristics.

4. Sources of personal information

Directly from you through forms and accounts; automatically through tags and cookies; from publishers and demand partners under contract; from data, identity and verification partners; and from public sources during vetting.

5. Business and commercial purposes

Ad-tech services; ad serving, targeting and personalisation; measurement and attribution; fraud, brand safety and security; account management and transactions; marketing communications; research and product development; legal compliance; ad-impression auditing; short-term transient use such as bid-stream routing; and service quality and safety.

6. Disclosure, sale and sharing of personal information

We disclose identifiers and ad-interaction data to publishers for their own reporting, and to media buyers, DSPs, curated SSP and direct partners through real-time bid requests and contracted pathways. Such disclosures for cross-context behavioural advertising may constitute a sale or sharing under California law; you may opt out as described in section 7. Disclosures to service providers and contractors bound by CCPA-compliant written contracts are not sales or sharing. We do not sell personal information in the everyday sense of handing a name-and-contact list to anyone.

7. Your California privacy rights

• Know and access: the categories and specific pieces of personal information we hold.
• Delete: subject to legal retention needs.
• Correct: inaccurate information.
• Opt out of sale or sharing: through [email protected] or a Global Privacy Control signal, which we honour as a valid request.
• Limit sensitive personal information: we process precise geolocation only with permission, solely for location-relevant advertising and regional reporting, and never to infer characteristics.
• Non-discrimination: exercising rights never degrades your service or the economics of your inventory.

8. How to exercise your rights

Email [email protected] with your request and enough detail to identify the account or identifiers involved. We verify identity before acting, confirm receipt within ten business days, respond substantively within forty-five days with one forty-five day extension where needed, and act free of charge unless requests are excessive or repetitive. Authorised agents need your written permission plus their own verification.

9. Sensitive personal information

The only sensitive category we may touch is precise geolocation, and only under the publisher-enabled, user-permitted conditions above. We do not use it to infer characteristics about you.

10. Retention of personal information

We keep personal information no longer than reasonably necessary for the purposes above: request-level ad data no longer than 13 months, website analytics up to 26 months, and account and billing records per statutory periods. See Privacy Policy section 14.

11. Financial incentives

We currently offer no financial incentives tied to personal information. If we ever introduce a loyalty or similar program, it will come with a separate notice and opt-in.

12. Minors

We do not knowingly sell or share personal information of consumers under 16, and we do not knowingly process it for children's properties within COPPA's scope. If such data reaches us, we delete it.

13. Annual request metrics

We publish, at least annually, the number of know, delete, correct and opt-out requests we received, honoured and denied, and the mean and median response times.

14. Other U.S. state privacy laws

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia receive equivalent rights, including opt-outs of targeted advertising, sale and profiling. Where a state grants an appeal right for denied requests, reply to our decision email to start the appeal, which a different team reviews; you may also contact your state attorney general afterwards.

15. Contact us

[email protected] for rights requests and appeals. OnlyMedia, Attn: Privacy Team, 420 W 19th, Cheyenne, WY 82001, United States. General enquiries: [email protected].