Privacy Policy

Last updated: April 19, 2024

OVERVIEW

This privacy policy (“Privacy Policy”) explains how information about our customers, visitors of our sites and end users is collected and utilized by Chartboost, Inc. (“Chartboost”, “our”, or “we”). This Privacy Policy applies to the websites provided by Chartboost, including without limitation www.Chartboost.com (“Sites”) and Chartboost’s advertising services (“Chartboost Services”). The Chartboost Services allow publishers of mobile applications to show ads on their applications, and advertisers to reach audiences that could be interested in their products or services. We also work with a number of partners in the ad tech ecosystem to enable the serving of ads on publisher apps. “Customers” refers to publishers, advertisers and other ad tech partners (current and prospective) and their employees, contractors, or agents. “End Users” refers to end users of our Customers’ services. “You” and “your” refer collectively to Sites visitors, Customers and End Users. If you have any concerns about this Privacy Policy you can send an email to privacy@chartboost.com.

1. PERSONAL INFORMATION WE COLLECT

In this Section, we outline the categories of personal information (“Personal Information”) we collect and how we collect it.

a) Categories of Personal Information Collected

Customers and Sites visitors:

Contact details, such as name and email address.
Account registration information, including the company for which you work, country of residence, password.
Technical Information about your browser and device is automatically collected when you visit the Sites. These include IP address, the type and version of browser used to access the Sites, operating system, language of the browser and operating system, and type of device.
Information about how you interacted with the Sites (e.g. whether you clicked on a specific link, where you clicked, time spent on the Sites, etc.).

End Users:

Identifiers such as Advertising ID (i.e. Google Advertising ID on Android devices, and ID For Advertising, on iOS devices), IP address and other similar identifiers. The Advertising ID is a resettable persistent identifier generated by Android or iOS that allows online advertising companies to recognize a device across apps, for advertising purposes. We can also identify an End User’s device using Chartboost’s internal device ID, which is linked to an End User’s Advertising ID. We may also create a temporary identifier on an app by app basis, which would not be linked to an End User’s Advertiser ID.
Contact Information - If you contact our customer support team, we will collect your name and email address in order to respond to your request.
Technical device information, including operating system name and version, device model, the name and version of the app to which the ad is served, SDK version and information about your settings (screen size, audio settings, language settings, time zone, internet connection type (e.g. WiFi), storage space, and battery status) and other similar information.
Campaign information such as whether an ad was viewed, clicked on, and whether an app was installed and, if shared by the advertiser, actions performed within the app such as when an End User launches the app, how long the End User plays the app, and other in-app events (e.g. in-app purchases, level reached).
In addition, when an End User accesses a video ad, we and others may collect additional statistics about videos and video playback such as: start/boot-up information, amount played/session length information, memory on the device used for our video cache, videos cached on a device and complete view event.

b) How is Personal Information of Customers and Sites Visitors Collected?

We collect Customer Personal Information directly from the Customer upon:

Registration: We collect the above listed Personal Information when a Customer signs up for the Chartboost Services.
Contact/Other requests: On the Sites, we offer online forms to enable Customers to contact us. We also offer Customers the opportunity to request specific content, like newsletters and whitepapers we publish. We may ask for consent before we send information about the Chartboost Services in the future.

We automatically collect the Personal Information of a visitor of the Sites through cookies and beacons. A “cookie” is a small piece of data that is stored on your computer or mobile device. Like many websites, we use cookies and similar technologies to collect additional website usage data and to operate our Sites. We may also allow third parties to place cookies on our Sites to track use of the Sites to enable us to analyze the traffic of our marketing pages. The Sites or the emails we send may also use web beacons (also called “clear GIFs” or “pixel tags”) and similar technologies in conjunction with cookies. Our Sites also use information collected in our log files (such as Internet Protocol Address, referring URLs, etc.) about activities on the Sites to better understand how the Sites are used, resolve technical problems, and enhance the experience of Site visitors. For more information about the cookies we use, please review our Cookie Policy Notice.

c) How is Personal Information of End Users Collected?

Chartboost works with advertisers, publishers and other ad tech partners. For example, Chartboost helps advertisers promote their products and services by allowing them to bid on advertising inventory and serve ads to their desired audiences. Chartboost also works with publishers (e.g. mobile apps) that have advertising inventory available on their platform for advertisers to buy. Chartboost also works as an intermediary connecting advertisers and publishers directly as well as platforms that consolidate advertiser demand and publisher supply.

When an ad is served through the Chartboost Services, we may collect the above listed Personal Information either:

directly from the End Users’ devices when our software developer kit (SDK) is integrated into the publisher app on which the ad is displayed (for example, if you see an ad that was served by us on an app that you use, we would have collected your Personal Information directly from that app);
from the advertiser who would decide the Personal Information they want to share with us when creating their campaign;
from other third-parties within the ad tech ecosystem, such as third party data providers or other advertising services companies.

2. HOW WE USE PERSONAL INFORMATION

In this Section, we outline how we process the Personal Information of our Customers, Sites visitors and of End Users, including how long we retain the Personal Information for.

a) Business and Commercial Purposes of Personal Information Collection and Use

We generally collect and use the above-listed categories of Personal Information to best serve you and deliver, support, and market the Chartboost Services.

More specifically, we collect and use the Personal Information of Customers and Sites visitors for the following purposes:

To provide the Sites to our Customers.
To create, maintain, customize, and secure our Customers’ accounts with us.
To provide Customers with customized content or targeted offers.
To allow Customers to offer advertising inventory and/or bid on advertising inventory and serve ads.
To report information about a Customer’s ad campaign.
With consent, to send information, newsletters, and promotional materials from us or on behalf of our group of companies and marketing partners.

We collect and use the Personal Information of End Users for the following purposes:

To provide the Chartboost Services to our Customers. As outlined above, Chartboost works with advertisers, publishers and ad tech partners. Chartboost helps advertisers promote their products and services by allowing them to bid on advertising inventory and serve ads to their desired audiences. Chartboost works with publishers (e.g. mobile apps) that have advertising inventory available on their platform for advertisers to buy. Chartboost also works as an intermediary connecting advertisers and publishers directly as well as platforms that consolidate advertiser demand and publisher supply. Ads can be:
- personalized and based on your potential interests, the interests of users similar to you, and what you are most likely to engage with when you consent to this (taking into account the nature of ads and apps you typically engage with) - we refer to these as “personalized ads”; and/or
- served based on your device technical information, the content of the publisher platform the ad will be displayed on and current or prior geolocation (if you are in a specific country, the ads would be relevant to that location) - we refer to these as “contextual ads”.
To derive inferences from the above categories of Personal Information and create a personalized profile to better identify goods and services that could be of interest to you. The information we infer, access, and collect may determine the nature of the ad that the End User sees.
To optimize Customers’ advertising campaigns, including by re-targeting End Users based on usage patterns.
To report to our Customers information about an ad campaign, including for example, when you saw or clicked on ads, whether you downloaded an advertised app and your purchases in an advertised app.
To prevent you from seeing the same ad or similar ads too many times.

If Customers do not want to expose End Users to personalized advertising campaigns, Customers can choose to opt out of personalized advertising by following the relevant instructions as set out on the Sites.

Finally, we collect and use the Personal Information of Customers, Sites visitors and End Users for the following purposes:

To detect and prevent fraud and unauthorized transactions.
To improve the usability and design of our Sites and the Chartboost Services by analyzing user interactions, feedback, and/or navigation patterns, which allows us to understand how our Sites and the Chartboost Services are being used and to identify areas for improvement as well as to develop new products or services within the ad tech ecosystem.
To monitor, protect, and maintain the operation, security and integrity of the Sites, the Chartboost Services and our business.
To communicate with you, including by responding to your inquiries, requesting feedback from you, and sending you updates about the Sites, the Chartboost Services, and this Privacy Policy.
To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials.
To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.
To protect our rights, privacy, safety, property and/or those of others.
To fulfill any other purpose for which you provide your Personal Information or as explained to you at the point of information collection.

b) Retention

We retain Personal Information for as long as is necessary or as permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. To determine the appropriate retention period of Personal Information, we consider the amount, nature, and sensitivity of Personal Information; the potential risk of harm from unauthorized use or disclosure of the Personal Information; the purpose for which we use the Personal Information; whether we can achieve the purposes through other means; and the applicable legal requirements (e.g. legal, regulatory, tax, accounting or reporting requirements).

If you are a Customer, we retain your Personal Information for as long as you have an account with us or keep using the Chartboost Services. Please refer to Section 9 to see how you can delete your account or information.

The Personal Information of Sites visitors is retained in accordance with our cookie policy.

The Personal Information of End Users is retained for a maximum of 365 days, after which it is either anonymized or destroyed.

We will store information for longer periods when complying with our legal and regulatory obligations, to defend Chartboost interests (in case of a dispute), for archiving or statistical purposes in which case we will take appropriate measures to ensure that the information is used solely for this purpose.

More information, including a description of your legal rights, can be found below in the “Privacy Rights and Requests” Section.

3. LEGAL BASIS FOR PROCESSING

Some jurisdictions require a legal basis for processing personal data. In this Section, we outline the different legal bases we rely on depending on the processing activity.

DATA SUBJECT	PROCESSING ACTIVITY	LEGAL BASIS	PERSONAL INFORMATION USED
End Users	Displaying personalized advertising on publisher platforms (e.g. mobile applications).	Consent obtained by the publisher	Identifiers Technical device information Campaign information
End Users	Displaying contextual advertising - i.e. advertising based on the content of the publisher platform you visit, technical parameters of the device or current or prior geolocation.	Legitimate Interest	IP address Technical device information Campaign information
End Users	Attribution - i.e. matching user conversions (e.g. purchases, app installs) to campaign events, like clicks and displays.	Legitimate Interest	Identifiers Technical device information Campaign information
End Users	Improvement of the Chartboost Services	Legitimate Interest	Identifiers Technical device information Campaign information
End Users, Customers and Sites visitors	Fraud prevention and detection	Legitimate Interest	Identifiers Technical device information Campaign information Technical Information Information about Sites interactions
End Users	Reporting	Legitimate Interest	Identifiers Technical device information Campaign information
End Users	Frequency capping	Legitimate Interest	Identifiers Technical device information Campaign information
Customers	Provision of the Chartboost Services to Customers	Performance of a contract	Contact details Account registration information Technical Information
Customers	Marketing communications	Consent	Contact details Technical Information Sites interaction

4. INFORMATION DISCLOSURE

In this Section we outline who we may disclose your Personal Information with:

Processors and service providers. We contract with vendors to provide some part of the Sites and the Chartboost Services or to assist us in analyzing our services or information. Chartboost may provide Personal Information to such processors and service providers, or they may collect information from you on our behalf or on behalf of our Customers.

Marketing, advertising, and analytics partners. When we collect or receive End User data, we disclose this information to third parties with whom we have a strategic relationship with, including on behalf of our Customers, to provide the Chartboost Services. These partners include advertisers, ad networks, exchanges, demand side platforms, and ad optimization and measurement/attribution partners. The Personal Information disclosed to these partners can be used to measure how effective ads are, to track ad conversions, to offer advertising inventory, bid on advertising inventory, to serve ads, to analyze traffic and other ad activity to improve the advertising experience, for industry analysis and to create personalized profiles.

These partners may collect information about your online activities over time and across different websites and applications.

Public authorities. We may be required to disclose information about you in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will disclose such information to government or law enforcement officials as we, in our sole discretion, believe necessary or appropriate to respond to legal process (including but not limited to subpoenas), to protect the property and rights of Chartboost, our Customers, End Users, or any third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable.

Relevant third parties as part of a corporate transaction. In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding), we may disclose or transfer your Personal Information to certain third parties, such as the acquiring entity and its advisers.

Our subsidiaries and affiliates. We may transmit your Personal Information to our subsidiaries and affiliates for processing in accordance with this Privacy Policy.

Other third parties. We will disclose your Personal Information to third parties if you or our Customers direct us to do so or you consent to such sharing. In addition, we will disclose your Personal Information as we believe necessary or appropriate to: (a) comply with applicable law; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or those of you or others; (e) allow us to pursue available remedies or limit damages that we may sustain; or (f) private parties in response to a subpoena or other valid legal process.

Aggregate or anonymous data. We may disclose aggregate or anonymous information about End Users to our Customers and other advertisers, publishers, business partners, sponsors, or third parties.

5. PRIVACY PRACTICES OF CUSTOMERS AND THIRD PARTIES

End Users should review that Customers’ privacy policies. We do not control and are not responsible for the privacy practices of any Customer or other third party, and any website or service that links to or from our Sites or the Chartboost Services. This Privacy Policy applies solely to information collected by Chartboost.

6. INTERNATIONAL TRANSFERS

Chartboost is a company based in the United States. In the context of the provision of the Chartboost Services, your Personal Information is processed, transferred and stored in the United States and other countries that may not have privacy laws equivalent to the country where you reside.

When your information is in another country, it may be accessed by the courts, law enforcement, and national security authorities pursuant to the laws of that country. If you reside in the UK, EU, EEA or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission (available at: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en) and/or other approved legal mechanisms to transfer personal data from the UK, EU, EEA or Switzerland to countries located outside of these locations (as applicable).

7. CONFIDENTIALITY AND SECURITY

We follow generally accepted industry standards and maintain appropriate safeguards to help protect the security, integrity, and privacy of the information we collect about you. These security measures are designed to protect against the accidental or unlawful destruction, loss, misuse, alteration, and unauthorized disclosure of, or access to, the information under our control. However, no system can be 100% secure and we cannot guarantee our security measures.

8. END USER CHOICES

Sites visitors/Customers:
You can control how your browser responds to cookies by adjusting the privacy and security settings of your web browser. However, some features of our Sites, including certain features made available to Customers may not function properly if you disable cookies.

End Users:
To learn more about interest-based advertising, and to access the opt-outs of certain online advertising companies, visit the Network Advertising Initiative at http://www.networkadvertising.org/choices/#completed or Digital Advertising Alliance (DAA) at http://www.aboutads.info/choices/. For individuals from the UK, EU, EEA or Switzerland, you can visit Your Online Choices at http://www.youronlinechoices.eu/. You can opt out of interest-based advertisements by adjusting the settings on your mobile device. Each device and browser you use may have separate settings.

For iOS mobile devices, go to “Settings” from the device’s home screen; scroll down to “Privacy”; select “Advertising”; and turn on “Limit Ad Tracking.”
For Android mobile devices, go to “Google Settings” on the device; select “Ads”; and check the box labeled “Opt Out of Interest-Based Ads.”
At the app level, check the (Privacy) Settings section of the app. This setting and the language may vary by app and by where you are located. You may have to perform this action on each app.

You can review http://www.networkadvertising.org/mobile-choices for more information regarding how you can opt out via the mobile platform. If you would like to disable the collection of your mobile device geolocation information, you can make this selection on your mobile device.

You should complete the opt-out process for all devices and browsers you use. If you opt-out of interest-based advertising, you will still receive general advertisements but these might not be as relevant to you.

9. PRIVACY RIGHTS AND REQUESTS

If you are a resident of the EU, Switzerland, or other jurisdictions with similar rules for data protection, Chartboost recognizes that you may have privacy rights listed below in relation to your Personal Information. Privacy rights that you may have include:

The right to obtain, at reasonable intervals and free of charge, confirmation as to what personal data about you Chartboost processes.
The right to object to the processing of your personal data for direct marketing purposes or based on your particular situation.
The right to have your personal data rectified or corrected, blocked or deleted if the data are incorrect, incomplete, irrelevant, outdated or processed unlawfully.
The right to receive the personal data Chartboost processes about you in a structured and commonly used format and to transmit those data to another controller.
The right to obtain information about how your data has been shared with third-parties.
The right to revoke consent and have data processed on such a basis to be erased.

Chartboost Services interface tools. If you are a Customer, some of your Personal Information can be changed or deleted by following the process provided in your Chartboost Services account, unless we must keep the information for legitimate business or legal reasons. If you delete certain portions of your information, your account may become deactivated.

Support requests. If the request you wish to make is not possible through your Chartboost Services account, you can file a support request by visiting: https://docs.chartboost.com/en/support/contact-us/.

Identity verification. We may request evidence of your identity for verification purposes. We will respond to your request within the applicable statutory term.

End User request. If an End User exercises any of their rights with you with respect to the processing of their Personal Information by us, please use the tools in your Chartboost Services Account to accommodate their request, or, if this is not possible, please visit: https://docs.chartboost.com/en/support/contact-us/.

U.S. STATE PRIVACY RIGHTS

A. Summary of Categories of Personal Information Collected, Sold, and Shared for End Users

Category of Personal Information Collected	Is this Category Sold or Shared?
Contact information, including your name, email address.	No
Other identifiers, including Advertising ID (i.e. Google Advertising ID on Android devices, and ID For Advertising, on iOS devices), IP address and other similar identifiers.	Yes
Technical app and device information, including operating system name and version, Bundle ID, device model, the name and version of the app to which the ad is served, SDK version and information about your settings (screen size, audio settings, language settings, time zone, internet connection type (e.g. WiFi), storage space, and battery status) and other similar information.	Yes
Coarse geolocation data (derived from IP address), including the location of the device you use and your country.	Yes
Campaign information and statistics, including whether you view and how you interacted with an ad and/or publisher app.	Yes
Inferences, meaning inferences that we draw from the above categories of Personal Information to create a personalized profile so we can better identify goods and services that could be of interest to you.	No

B. Summary of Categories of Personal Information Collected, Sold, and Shared for Sites Visitors and Customers

Category of Personal Information Collected	Is this Category Sold or Shared?
Identifiers, including your name, email address, IP address, or other similar identifiers.	Yes (IP address)
Internet or other electronic network activity information, such as IP address, cookie information and how you interacted with the Sites (e.g. whether you clicked on a specific link, where you clicked, time spent on the Sites, etc.)	Yes
Technical information, including the type and version of browser used to access the Sites, operating system, language of the browser and operating system, and type of device.	Yes
Coarse geolocation data, including the location of the device you use and your country.	No
Professional or employment-related information, including the company you work for.	No

As indicated in the chart, we “sell” or “share” (as such terms are defined in California law and other applicable laws) some of these categories to business partners and third parties, such as data analytics providers, advertising technology vendors, and social media platforms for marketing purposes and as otherwise described in this Privacy Policy. We do not knowingly sell or share Personal Information about persons under the age of 16. Please click here to opt out of the sale or sharing of your Personal Information by Chartboost.

Depending on your U.S. state of residences, you may have the following rights:

Right to Know: The right to know what Personal Information we have collected about you, including the categories of Personal Information and the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you. Please note that we may not be required to respond to your requests “to know” or access specific pieces of Personal Information more than twice in any 12-month period.
Right to Data Portability: The right to access your Personal Information in a portable format.
Right to Delete: The right to request that we delete Personal Information that we have collected from you, subject to certain exceptions.
Right to Correct: The right to correct inaccurate Personal Information that we may maintain about you, subject to appropriate verification.
Right to Opt Out of Certain Types of Personal Information Uses and Disclosures: We use and disclose to third parties’ Personal Information for analytics and advertising purposes. Accordingly, you may have the right to opt out of the “sale” or "sharing” of your Personal Information, or the use and disclosure of your Personal Information for “targeted advertising” (as these terms are defined in applicable law).

If you are interested in exercising any of the above-listed rights, please visit: https://docs.chartboost.com/en/support/contact-us/.

To protect your privacy, we may require the matching of up to three pieces of Personal Information provided with your request with Personal Information we maintain to verify that it is you making the request. Where applicable, we will use the requested information for verification purposes only. Please note that we can decline a request where we are unable to verify your identity and confirm the Personal Information we maintain relates to you.

Exercising Your Sale and Sharing Opt-Out Right
As detailed in the table above, we “sell” and “share” certain categories of Personal Information to and with third parties. If you are 16 years of age or older, in addition to the rights described above, you have the right to direct us to not “sell” or “share” your Personal Information at any time. To exercise your opt-out right, you can submit a request to us by clicking on the “Do Not Sell or Share My Personal Information” link at the bottom of any of the Sites’ web pages or completing and submitting the form available here.

Upon receipt of your request, we will endeavor to honor it based on the information that we collect and maintain.

Authorized Agents. Residents of certain U.S. states may also use an authorized agent to submit the requests described above. The agent will need to provide us with signed permission from you to act on your behalf. Please note that we may contact you to verify your identity and/or request from you or the agent documentation demonstrating that they have the authority to act on your behalf.

Appeals. Depending on your U.S. state of residence, you may have the right to appeal a decision we have made in connection with your privacy rights request. To appeal a decision, please contact us at privacy@chartboost.com.

Complaints. If you do not agree with this Privacy Policy or the way Chartboost processes information about you, you can also lodge a complaint to a competent supervisory authority in your country of residence.

10. COMMUNICATIONS

We may provide notice to our Customers via e-mail, written or hard copy, or through posting on our Sites, as determined by us in our sole discretion.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy at any time, at our sole discretion. Any relevant changes or modifications to this Privacy Policy will be notified to you by the posting of a notice on the Sites and, if you are a Customer, you may also be notified by either e-mail or other means of communication, as set out in Section 10. If you access the Chartboost Services after the new version of the Privacy Policy is published and/or communicated to you, you agree to its new terms; should you disagree with the terms of the new version, you must cease using the Sites and the Chartboost Services. If we make any changes to this Privacy Policy, we will change the “Last Updated” date above.

12. CONTACT

If you have any questions or suggestions regarding this Privacy Policy, or have any concerns about privacy, please contact us at:

Address: Chartboost, Inc., One Sansome Street, Floor 21, San Francisco, CA 94104
Email: privacy@chartboost.com
Attn: Data Protection Officer

Legal

Privacy Policy