Overview
Epsilon, as with many other advertising and marketing technology companies, is registered as a vendor with the IAB Transparency and Consent Framework (TCF) for collecting and evidencing consent for its data processing purposes.
As such, Epsilon advocate the use of IAB TCF enabled CMPs, allowing IAB partners (such as Epsilon) to gather consent in a simple, standardised form.
This document serves to highlight important configuration changes required of your CMP, ensuring optimal consent collection practices and compliance across the ad-tech supply chain.
These updates are relevant whether the CMP is using the IAB TCF or not and the vendors listed are both IAB and non-IAB.
CMP Requirements
- The CMP configuration update should be relatively straightforward and can be done through a CMP UI without any need for coding or web development.
- This document specifies select partners that Epsilon work with, in order to drive business performance and value for our clients. These partners will also need declaring in your CMP so they too can gather consent in line with the IAB TCF or outside the TCF where there is no current vendor registration.
FAQ
- Why am I adding these vendors?
- To be able to identify and reach customers on the open web, Epsilon loads a selection of publisher and exchange pixels along with the Epsilon tag to perform a cookie sync. This cookie sync provides the publishers or exchanges a mechanism to notify Epsilon when there is an ad impression that Epsilon recognises. Epsilon is then able to look up in real time to identify whether this is a user who we want to message on behalf of our clients. This is standard practice for media partners as one of the steps to be able to identify and reach users through Real Time Bidding (RTB). As such, these partners need consent for their processing purposes.
- Who are these partners and what are they doing?
- These partners fall into the following groups; SSP, Ad Exchange, Fraud Detection, Audience Insights. Most partners are part of the IAB TCF but not all – however all require consent for their processing purposes.
- How can I tell which partners are being synced with on my website?
- Our recommendation is to use your CMP cookie scanner
- Do I have to amend my privacy policy?
- Yes. It is important to update your privacy policy detailing your partnership with Epsilon and includes a link to this document.
- What if I don’t want to do this?
- This will severely impact Epsilon’s ability to message your customer base and overall campaign efficiency.
IAB Global Vendor List IDs
These vendors are all part of the IAB Transparency and Consent Framework
GVL Vendor ID | IAB Vendor | Vendor Group | Cookie Domain | Privacy Policy | |||||
10 | Index Exchange, Inc | SSP / Exchange | dsum-sec.casalemedia.com | https://www.indexexchange.com/privacy/exchange-platform-privacy-policy/ | |||||
13 | Sovrn, Inc | SSP / Exchange | ap.lijit.com | https://www.sovrn.com/privacy-policy/privacy-policy/ | |||||
21 | The Trade Desk | SSP / Exchange | match.adsrvr.org | https://www.thetradedesk.com/legal/privacy | |||||
25 | Verizon Media EMEA Limited | SSP / Exchange | ups.analytics.yahoo.com | https://legal.yahoo.com/ie/en/yahoo/privacy/privacypolicy/previousversion-2-0/index.html | |||||
28 | Triplelift, Inc. | SSP / Exchange | eb2.3lift.com | https://triplelift.com/platform-privacy-policy/ | |||||
32 | Xandr, Inc. | SSP / Exchange | ib.adnxs.com | https://learn.microsoft.com/en-us/xandr/policies-regulations/ | |||||
36, 162 | Unruly Group LLC | SSP / Exchange | |||||||
52, 102 | Magnite, Inc. | SSP / Exchange | pixel.rubiconproject.com, sync.search.spotxchange.com | https://www.magnite.com/legal/advertising-platform-privacy-policy/ | |||||
69 | OpenX | SSP / Exchange | us-u.openx.net | https://www.openx.com/privacy-center/ | |||||
76 | Pubmatic, Inc. | SSP / Exchange | image8.pubmatic.com | https://pubmatic.com/legal/privacy-policy/ | |||||
80 | Sharethrough, Inc | SSP / Exchange | match.sharethrough.com | https://privacy-center.sharethrough.com/en/ | |||||
81 | PulsePoint, Inc | SSP / Exchange | bh.contextweb.com | https://www.pulsepoint.com/legal/platform-privacy-policy | |||||
97 | LiveRamp, Inc | Audience Insights | idsync.rlcdn.com | https://liveramp.uk/privacy/ | |||||
120 | Eyeota Pte Ltd | Audience Insights | ps.eyeota.net | https://www.eyeota.com/privacy-center | |||||
142 | Media.net Advertising FZ-LLC | SSP / Exchange | contextual.media.net | https://www.media.net/privacy-policy/ | |||||
165 | SpotX, Inc | SSP / Exchange | https://www.magnite.com/legal/advertising-technology-privacy-policy/ | ||||||
202 | Magnite CTV, Inc | SSP / Exchange | partners.tremorhub.com | https://www.magnite.com/legal/advertising-platform-privacy-policy/ | |||||
239 | Triton Digital | SSP / Exchange | idsync.live.streamtheworld.com | https://tritondigital.com/privacy-policies | |||||
264 | Adobe Advertising Cloud | Audience Insights | dpm.demdex.net | https://www.adobe.com/uk/privacy.html | |||||
278 | Integral Ad Science, Inc | Fraud / Verification | pixel.adsafeprotected.com | https://integralads.com/ias-privacy-data-management/policies/privacy-policy/ | |||||
285 | Comcast International France SAS | SSP / Exchange | ads.stickyadstv.com | https://corporate.comcast.com/notices/privacy | |||||
385, 772 | Oracle Data Cloud | Audience Insights | tags.bluekai.com | https://www.oracle.com/uk/legal/privacy/privacy-policy/ | |||||
506 | Salesforce | Audience Insights | match.rundsp.com, beacon.krxd.net | https://www.salesforce.com/company/legal/privacy/ | |||||
565 | Adobe Audience Manager, Adobe Experience Platform | Audience Insights | dpm.demdex.net | https://www.adobe.com/uk/privacy.html | |||||
755 | Google Advertising Products | SSP / Exchange | cm.g.doubleclick.net | https://support.google.com/adspolicy/answer/54817?hl=en | |||||
972 | Kargo Global Inc. | SSP / Exchange | crb.kargo.com | https://www.kargo.com/privacy | |||||
Non-IAB Vendors
These vendors are not part of the IAB TCF but still require consent for their processing purposes and should still be declared in your CMP.
Vendor ID | Non- IAB Vendor | Vendor Group | Cookie Domain | Privacy Policy |
1 | X | Exchange | analytics.twitter.com | https://x.com/en/privacy#update |
2 | Bright Roll | SSP / Exchange | geo-um.btrll.com | https://www.scalevp.com/privacy-policy/ |
3 | Exchange | www.facebook.com | https://www.facebook.com/privacy/policy/?locale=en_GB | |
5 | DAX | SSP / Exchange | us-east.ads.audio.thisisdax.com | https://dax.guide/privacy/ |
6 | Comscore | Performance Insights | sb.scorecardresearch.com | https://direct-support.comscore.com/hc/en-us/articles/360002579773-Comscore-Privacy-Policy |
7 | Live Intent | SSP / Exchange | i.liadm.com | https://www.liveintent.com/privacy-policy/ |
8 | Salesforce DMP | SSP / Exchange | match.rundsp.com | https://www.salesforce.com/company/legal/privacy/ |
9 | Vdopia | SSP / Exchange | cs.vdopia.com | https://chocolateplatform.com/privacy-policy/ |
10 | Optimatic | SSP / Exchange | synch.optimatic.com | https://optimatics.com/privacy-policy/ |
11 | Salesforce.com, Inc. | Audience Insights | beacon.krxd.net | https://www.salesforce.com/company/legal/privacy/ |