Opt-out and privacy

The Web SDK respects the consent preferences set using the setConsent command. When consent is set to "out", the Web SDK stops forwarding all events, including streaming media tracking calls, to the Edge Network. Consent state persists in browser storage between sessions.

Before implementing opt-out, ensure that your Web SDK is configured with the Streaming Media component. For more information, see Set up Web SDK.

Set consent to opted out using the Adobe 2.0 consent standard:

alloy("setConsent", {
  consent: [{
    standard: "Adobe",
    version: "2.0",
    value: {
      collect: { val: "n" }
    }
  }]
});

Consent values:

• "y": Opted in (data collection allowed)
• "n": Opted out (data collection suppressed)
• "p": Pending (awaiting user decision; no data collected until resolved)

To restore tracking, call setConsent again with "y" as the collect.val value.

See the setConsent command in the Web SDK documentation for other formats, including IAB TCF 2.0.

The Adobe Experience Platform Mobile SDK respects the privacy status set using MobileCore.setPrivacyStatus(). Setting the status to .optedOut suppresses all data collection across all AEP extensions, including Streaming Media. The status persists across app sessions.

MobileCore.setPrivacyStatus(.optedOut)

To restore tracking, set the privacy status back to .optedIn:

MobileCore.setPrivacyStatus(.optedIn)

For more information, see Privacy and GDPR in the AEP Mobile SDK documentation.

The Adobe Experience Platform Mobile SDK respects the privacy status set using MobileCore.setPrivacyStatus(). Setting the status to MobilePrivacyStatus.OPT_OUT suppresses all data collection across all AEP extensions, including Streaming Media. The status persists across app sessions.

MobileCore.setPrivacyStatus(MobilePrivacyStatus.OPT_OUT)

To restore tracking, set the privacy status back to MobilePrivacyStatus.OPT_IN:

MobileCore.setPrivacyStatus(MobilePrivacyStatus.OPT_IN)

For more information, see Privacy and GDPR in the AEP Mobile SDK documentation.

The AEP Roku SDK uses setConsent() with the Adobe 2.0 consent standard. Setting collect.val to "n" immediately stops all data collection, including streaming media events.

Consent values:

• "y" — Opted in (data collection allowed)
• "n" — Opted out (data collection suppressed)
• "p" — Pending (awaiting user decision; no data collected until resolved)

currentDate = CreateObject("roDateTime")
timestampInISO8601 = currentDate.ToISOString("milliseconds")

collectConsentNo = {
  "consent": [{
    "standard": "Adobe",
    "version": "2.0",
    "value": {
      "metadata": { "time": timestampInISO8601 },
      "collect": { "val": "n" }
    }
  }]
}

m.aepSdk.setConsent(collectConsentNo)

To restore tracking, set collect.val to "y" and call setConsent() again.

You can also set a default consent value at SDK initialization using updateConfiguration() with the ADB_CONSTANTS.CONFIGURATION.CONSENT_DEFAULT key. For more information, see the AEP Roku SDK documentation.

The Media Edge API is a server-side implementation. No SDK layer automatically enforces consent — your application must check user consent status before making any API calls and suppress requests for opted-out users.

For full opt-out, do not POST to the /va/v2/sessions endpoint (or any subsequent event endpoints) for users who have opted out:

// Check consent status before initiating a media session
if (userHasOptedOut) {
  // Do not call the Media Edge API
  return;
}

// Only call the API for users who have not opted out
fetch("https://edge.adobedc.net/va/v2/sessions", {
  method: "POST",
  body: JSON.stringify(sessionStartPayload)
});

For more information, see the Media Edge API reference.

The Media SDK JS 3.x library defers to the Adobe Visitor API (Identity Service) opt-out state. When a user opts out using the Visitor API, the Media SDK automatically suppresses all tracking calls.

var visitor = Visitor.getInstance("YOUR_ORG_ID@AdobeOrg");
visitor.setOptOut(true);

Replace YOUR_ORG_ID@AdobeOrg with your organization ID from Adobe Admin Console.

To restore tracking, pass false to setOptOut().

For more information, see Adobe Experience Platform Identity Service.

The Chromecast Media SDK 3.x respects the privacy status set using ADBMobile.config.setPrivacyStatus(). Setting the status to PRIVACY_STATUS_OPT_OUT suppresses all data collection.

ADBMobile.config.setPrivacyStatus(ADBMobile.config.PRIVACY_STATUS_OPT_OUT);

To restore tracking, set the status back to opted in:

ADBMobile.config.setPrivacyStatus(ADBMobile.config.PRIVACY_STATUS_OPT_IN);

You can also set the default privacy status at SDK initialization in your ADBMobileConfig object:

var ADBMobileConfig = {
  "analytics": {
    "privacyDefault": "optedout"
  }
};

The Media Collection API is a server-side implementation. Your application must check user consent status before making API calls and suppress requests for opted-out users.

For full opt-out, do not POST to the sessions endpoint for users who have opted out.

For partial opt-outs under CCPA, include opt-out flags in the params object of your sessionStart request:

{
  "playerTime": { "playhead": 0, "ts": 1699523820000 },
  "eventType": "sessionStart",
  "params": {
    "analytics.optOutServerSideForwarding": true,
    "analytics.optOutShare": true
  }
}

• analytics.optOutServerSideForwarding: Set to true to opt out of data being shared between Adobe Analytics and other Experience Cloud solutions (such as Audience Manager).
• analytics.optOutShare: Set to true to opt out of federated data sharing with other Adobe Analytics clients.

For a full list of available parameters, see the Media Collection API request parameters reference.