Skip to main content
Oath Inc.

Video SSP

GDPR and Video SSP

Video SSP is compliant with the requirements of the General Data Protection Regulation, or GDPR. Our compliance is delivered through adoption of the IAB Transparency and Consent framework.

One of the requirements of the IAB framework is to support passing of user consent preferences throughout the advertising ecosystem. This can be done via macros in ad tags and URL-based services, including Video SSP’s ad tags for Marketplace Connections and Inventory Sources.

There are two macros that we will support:

Macro Macro Type Definition Expected Input
gdpr Boolean This value signals whether GDPR is applicable for a given user.

0 or 1 only.

  • 0 = user is not subject to GDPR,
  • 1 = user is subject to GDPR
gdpr_consent String This string represents a user’s consent preferences. The construction and encoding of this string is defined in the IAB Transparency and Consent framework.
  • base64 encoded web safe string
  • Generated by an IAB Transparency and Consent Framework-compliant Consent Management Platform

These macros will be populated with data from an IAB framework-compliant Consent Manager Provider, or CMP.

Example:

http://ads.adaptv.advertising.com/a/h/iveKWUo6VtIbutX4_6ersvt6TVk6EpL1?cb=[CACHE_BREAKER]&gdpr=[GDPR]&gdpr_consent=[GDPR_CONSENT]&pet=preroll&pageUrl=EMBEDDING_PAGE_URL&eov=eov

Note: Please download and implement new ad tags including these macros today and populate consent information by May 25th 2018 or reach out to your Oath representative for more information.

RTB integration guide

The RTB integration guide provides technical details for developers and sales engineers regarding supported Video SSP RTB API specifications.

See the Video SSP Technical Requirements for Integration Guide (must be logged in to view) for full details.

User Object

Object Name Included Type Description
ext When available object Our platform will include “consent” extension for GDPR compliance (see below).

User Object Extension

Object Name Included Type Description
consent When available string Encoded value of the user consent. Base 64 web safe. Our platform would only pass the consent string if regs.ext.gdpr=1 and Oath has been given the vendor level consent by the user.

User Syncing

There are two methods of user syncing, and the DSP may choose to do either or both.

Push Method (When DSP initiates the user sync URL)

The account team will provide the full user syncing URLs. The buyer sends an HTTPS request from the user’s browser to a User Sync URL with the following parameters.

http://pixel.advertising.com/ups/UMS_PIXEL_ID/sync?uid=[DSP_USER_ID]&_origin=1&gdpr=[GDPR_JURISDICTION]&gdpr_consent=[consent_str_based_on_iab_specification]

Parameter Included Type Description
uid Always string The DSP should substitute for DSP_USER_ID with their unique user ID for the user that the request originates from. The maximum length for the DSP_USER_ID is 128 characters Expiration for User ID The DSP must specify the Time To Live (TTL) of the user ID, after which time our platform will no longer use the ID when sending bid requests
origin Optional Boolean
  • 0 = Oath initiated user sync
  • 1 = DSP initiated user sync
gdpr Always Boolean
  • 0=GDPR does not apply
  • 1=GDPR applies

Oath SSP plans to adhere to the IAB Tech Lab - GDPR Consent passing for URL-based services.

gdpr_consent When available string

URL-safe base64-encoded GDPR consent string.

Only meaningful if gdpr=1

The HTTPS request will return a response code 204 (No Content) with an empty body.

Pull Method (When Oath SSP initiates the user sync URL)

Our client code will send an HTTPS request from the user’s browser to a URL specified by the DSP. Oath SSP will append the following parameters to the DSP’s User Sync URL. An example is provided below:

http://pixel.dsp.com/pixel?partner=adaptv&gdpr=[GDPR_JURISDICTION]&gdpr_consent=[consent_str_based_on_iab_specification]

The DSP should then return a 302 redirect, with where the redirect URL is the User Sync URL provided below with origin=0.

http://pixel.advertising.com/ups/UMS_PIXEL_ID/sync?uid=[DSP_USER_ID]&_origin=0&gdpr=[GDPR_JURISDICTION]&gdpr_consent=[consent_str_based_on_iab_specification]

Please reference the parameters table above.

GDPR

Oath SSP will not initiate a user sync request in the following cases: 1. First or third party jurisdiction is in the EU, and first or third party consent shows no consent. 2. First or third party jurisdiction is in the EU, and first or third party consent is missing. Oath SSP requires DSP partners to follow the same GDPR logic.

Regs Object

The Regs object contains the COPPA flag, which signals whether or not the request falls under the United States Federal Trade Commission’s regulations for the United States Children’s Online Privacy Protection Act (“COPPA”). 

Object Name Included Type Description
coppa always integer

Flag indicating if this request is subject to the COPPA regulations established by the USA FTC, where

  • 0 = no,
  • 1 = yes
ext When available object Our platform will include “gdpr” extension for GDPR compliance (see below).

Regs Object Extension

Object Name Included Type Description
gdpr Always boolean
  • We’ll send “1” as the gdpr value if the user is from Europe
  • “0” means outside Europe

PMP Object and Deal ID

Sample Bid Requests  

IPv6 Desktop Ad Opportunity

(EU User, Impacted by GDPR compliance)

{  
   "id":"718a9c73-3f27-4fda-b58b-5ca04ac420e7",
   "bcat": [ "IAB25", "IAB7-39", "IAB8-18", "IAB8-5" ],
   "badv": [  abc.com, xyz.com],
   "imp":[  {  
         "id":"1",
         "video":{  
            "mimes":[  
               "video/x-flv",
               "video/mp4",
               "application/x-shockwave-flash"
            ],
            "linearity":1,
            "minduration":5,
            "maxduration":30,
            "protocols":[  
               2,
               3,
               5,
               6
            ],
            "api":[  
               1,
               2
            ],
            "startdelay":0,
            "playbackmethod":[  
               3
            ],
            "ext":{  
               "viewability":-1
            }
         },
         "pmp":{  
            "private_auction":0,
            "deals":[  {  
                  "id":"532",
                  "bidfloor":7.58,
                  "bidfloorcur":"USD",
                  "at":3,
                  "wseat":[  "AgencyAA", "AgencyCC" ]
               } ],
            "ext":{  
               "marketplaceid":56
            }
         },
         "secure":0
      } ],
   "site":{  
      "page": "test1.com",
      "publisher": {  
         "id":"5544"
      },
      "content":{  
         "cat":[  
            "IAB1",
            "IAB3",
            "IAB11",
            "IAB11-4",
            "IAB12"
         ],
         "language":"en"
      },
      "cat":[  
         "IAB1",
         "IAB3",
         "IAB11",
         "IAB11-4",
         "IAB12"
      ],
      "ext":{  
         "mpcid":"95265"
      }
   },
   "device":{  
      "ipv6":"2600:1700:1d90:3b90:b1:78c2:576f:b55e",
      "ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.99 Safari/537.36",
      "language":"en",
      "os":"Mac OS X",
      "devicetype":2,
      "geo":{  
         "country":"FRA",
         "lat":48.86,
         "lon":2.34,
         "type":2
      }
   },
   "user":{  
      "id":"7320731778973028548",
      "ext":{  
         "consent":"3FDF299BE572"
      }
   },
   "regs":{  
      "coppa":0,
      "ext":{  
         "gdpr":"1"
      }
   },
   "cur":[  
      "EUR"
   ],
   "tmax":150
}

IPv6 Desktop Ad Opportunity

(Non-EU User: No impact of GDPR)

{  
   "id":"718a9c73-3f27-4fda-b58b-5ca04ac420e7",
   "bcat": [ "IAB25", "IAB7-39", "IAB8-18", "IAB8-5" ],
   "badv": [ abc.com, xyz.com],
   "imp": [  {  
         "id":"1",
         "video":{  
            "mimes":[  
               "video/x-flv",
               "video/mp4",
               "application/x-shockwave-flash"
            ],
            "linearity":1,
            "minduration":5,
            "maxduration":30,
            "protocols":[  
               2,
               3,
               5,
               6
            ],
            "api":[  
               1,
               2
            ],
            "startdelay":0,
            "playbackmethod":[  
               3
            ],
            "ext":{  
               "viewability":-1
            }
         },
         "pmp":{  
            "private_auction":0,
            "deals":[  
               {  
                  "id":"532",
                  "bidfloor":7.58,
                  "bidfloorcur":"USD",
                  "at":3,
                  "wseat": [ "AgencyAA", "AgencyCC" ]
               }
            ],
            "ext":{  
               "marketplaceid":56
            }
         },
         "secure":0
      }
   ],
   "site":{  
      "page":"test1.com",
      "publisher":{  
         "id":"5544"
      },
      "content":{  
         "cat":[  
            "IAB1",
            "IAB3",
            "IAB11",
            "IAB11-4",
            "IAB12"
         ],
         "language":"en"
      },
      "cat":[  
         "IAB1",
         "IAB3",
         "IAB11",
         "IAB11-4",
         "IAB12"
      ],
      "ext":{  
         "mpcid":"95265"
      }
   },
   "device":{  
      "ipv6":"2600:1700:1d90:3b90:b1:78c2:576f:b55e",
      "ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.99 Safari/537.36",
      "language":"en",
      "os":"Mac OS X",
      "devicetype":2,
      "geo":{  
         "country":"USA",
         "region":"FL",
         "lat":28.74,
         "lon":-81.86,
         "type":2
      }
   },
   "user":{  
      "id":"7320731778973028548"
   },
   "regs":{  
      "coppa":0,
      "ext":{  
         "gdpr":"0"
      }
   },
   "cur":[  
      "USD"
   ],
   "tmax":150
}