DocumentationTarget Developer Guide

Privacy

Last update: Wed Aug 30 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Developer

Adobe Target has enabled processes and settings that allow you to use Target in compliance with applicable data privacy laws.

Collection of IP addresses and Personally Identifiable Information (PII)

The IP address of a visitor to your website is transmitted to an Adobe Data Processing Center (DPC). Depending on the network configuration for the visitor, the IP address does not necessarily represent the IP address of the visitor’s computer. For example, the IP address could be the external IP address of a Network Address Translation (NAT) firewall, HTTP proxy, or Internet gateway.

IMPORTANT
Target does not store any IP addresses of the user or any Personally Identifiable Information (PII). IP addresses are used only by Target during the session (in-memory, never persisted).

Replacement of last octet of IP addresses

Adobe has developed a “privacy by design” setting that users can enable for Adobe Target. When enabled, Adobe Target immediately obfuscates the last octet (the last portion) of the IP address at the time the IP address is collected. This anonymization is performed before any processing of the IP address, including before an optional geo-lookup of the IP address.

When this feature is enabled, the IP address is made sufficiently anonymous so it is no longer identifiable as personal information. As a result, Target can be used in compliance with data privacy laws in countries that do not permit the collection of personal information. Obtaining city-level information will likely be significantly impacted by the obfuscation of the IP address. Obtaining region- and country-level information should only be slightly impacted.

The following settings are available in the Target UI by navigating to Administration > Implementation:

  • Last octet obfuscation: Target hides the last octet of the IP address.

  • Entire IP obfuscation: Target hides the entire IP address.

  • None: Target does not hide any part of the IP address.

    obfuscate-ip-options

Target receives the full IP address and obfuscates it (if set to Last octet or Entire IP) as specified. Target then holds the obfuscated IP address in memory only during the current session.

Datastream-level IP obfuscation when using the Adobe Experience Platform Web SDK aep

When using the Platform Web SDK (version 23.4 or later), the datastream-level IP obfuscation setting takes precedence over any IP obfuscation option set in Target. For example, if the datastream-level IP obfuscation option is set to Full and the Target IP obfuscation option is set to Last octet obfuscation, Target receives a fully obfuscated IP.

For more information, see IP Obfuscation in Configure a datastream in the Adobe Experience Platfrom Datastreams Guide.

GeoSegmentation

If you enable the replacement of the last octet of the IP address, the remaining values of the IP address can be analyzed using reports in Target. If the last octet of the IP address has not been obfuscated, then the full IP address can be analyzed in Target. You can use the GeoSegmentation feature to map out visitor location by geographic area. GeoSegmentation data is granular only to the city level or zip code level, and not to the individual level.

If IP addresses are completely obfuscated, GeoSegmentation and geo targeting is not available.

You can add an opt-out link to your sites to enable visitors to opt-out of all counting and content delivery.

  1. Add the following link to your site:

    <a href="https://clientcode.tt.omtrdc.net/optout"> Your Opt Out Language Here</a>

  2. (Conditional) If you are using CNAME, the link should contain the "client=clientcode parameter, for example:
    https://my.cname.domain/optout?client=clientcode.

  3. Replace clientcode with your client code, and add the text or image to be linked to the opt-out URL.

Any visitor who clicks this link is not included in any mbox requests called from their browsing sessions until they delete their cookies, or for two years, whichever comes first. This works by setting a cookie for the visitor called disableClient in the clientcode.tt.omtrdc.net domain.

Even if you use a first-party cookie implementation, the provided opt-out is set via a 3rd-party cookie. If the client is using a first-party cookie only, Target checks whether an opt-out cookie is set.

Privacy and data protection regulations

See Privacy and data protection regulations for information about the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other international privacy requirements, and how these regulations impact your organization and Target.

Collection of feature-usage data

Individual feature-usage data is collected for internal Adobe purposes to identify whether Target features are performing as intended or to identify features that are being under-utilized. Various measurements of latency are collected to help address performance concerns. Personal data is not collected.

You can opt out of reporting usage data in our SDKs by setting telemetryEnabled to false in the client initialization options. For more information, see telemetryEnabled in targetGlobalSettings.

recommendation-more-help
6906415f-169c-422b-89d3-7118e147c4e3