Unity Mediation privacy guidelines#

This privacy guide highlights and explains how the current version of the Unity Mediation SDK:

• Passes consent signals for traditional eCPM targets and Bidding for specific data privacy regulations
• Accounts for App Tracking Transparency (ATT)

The Unity Mediation SDK provides easy-to-use APIs to help you meet your obligations to end-users and ad networks by adhering to user privacy choices under specific data privacy regulations.

For iOS apps, we provide code samples that detail how you can ingest GDPR, CCPA, and PIPL consent opt-ins and opt-outs. See User data privacy code samples for iOS apps.

General Data Protection Regulation (GDPR)#

The Unity Mediation SDK APIs concerning user consent collection and data privacy accept a consent status as defined in the API Reference guides for apps made for the following platforms:

• The C# API reference DataPrivacyLaw
• The Java API reference DataPrivacyLaw
• The Objective-C API reference UMSDataPrivacyLaw

For more information, see:

• Unity's approach to GDPR
• gdpr.eu

California Consumer Privacy Act (CCPA)#

The Unity Mediation SDK APIs concerning user consent collection and data privacy accept a consent status as defined in the API Reference guides for apps made for the following platforms:

• The C# API reference DataPrivacyLaw
• The Java API reference DataPrivacyLaw
• The Objective-C API reference UMSDataPrivacyLaw

For more information, see:

• Unity's approach to CCPA
• The state of California Department of Justice CCPA website

Children’s Online Privacy Protection Act (COPPA)#

The Unity Dashboard provides an option to flag a project as child-directed. For Unity Mediation, in the cases where a Unity project is flagged as child-directed, the personal information of end-users is not passed to in-app bidding participants, and the relevant bid requests are marked as contextual requests.

For more information, see:

• Unity's approach to COPPA
• The FTC COPPA website

App Tracking Transparency (ATT)#

This concerns apps that are made with iOS or are available on the iOS platform.

There are no explicit APIs required to implement ATT. The Mediation SDK internally captures the current state of iOS privacy permissions.

To easily account for ATT in your project, made-with-Unity developers can install the iOS 14 support package. Use this package to upgrade your Unity Ads SDK, update ad network IDs for your project’s properties list, and implement an ATT context screen and permission request in your app.

For more information on getting started with using the iOS support package in your project, see the iOS 14 Technical Integration guide.

When a publisher installs the iOS support package, the Mediation SDK package downloads a list of SKAdNetworkIds based on the SKAdnetworks file inside the Mediation package.

If a publisher requires an extra ID, they can create an extra custom file to manually add SKAdNetworkIds:

• SKAdNetworks.xml for an XML format
• SKAdNetworks.json for a JSON format
• SKAdNetworks for a URL

When an iOS build is triggered, the iOS support package detects these files and includes these IDs in the iOS app's Info.plist file.

For more information, see the Apple documentation on User Privacy and Data Use.

Personal Information Protection Law (PIPL)#

On November 1, 2021, China started enforcing a data privacy regulation known as PIPL. This regulation concerns the collection and processing of personal data specifically for Chinese citizens. If your audience traffic is not primarily from an audience in China, then there will be little to no change in your revenue.

See Unity’s approach to PIPL.

If your app is set up to use bidding, the Unity Mediation SDK only ingests PIPL opt-in consents for bidding sources, and consequently might collect and process personal data from users in China if the required consent signals are passed into the SDK. PIPL opt-in consents are not ingested for traditional eCPM waterfalls.

For more information on how the Unity Mediation package supports PIPL, see:

• The C# API reference DataPrivacyLaw
• The Java API reference DataPrivacyLaw
• The Objective-C API reference UMSDataPrivacyLaw

Google Families Ads Program#

This concerns apps that are made with Android or are available on the Android platform.

On April 1, 2022, Google updated a policy related to its Families Ads Program to add a requirement that no longer allows Device IDs to leave player devices in Android apps targeted toward children (or, in the case of mixed audience games, users of unknown age).

See Unity’s approach to Google’s privacy changes.

To comply with this Google policy update, Unity Mediation users with Android apps must ensure that their next build uses Unity Mediation 0.4.1 or later.

For more information on this policy update, see the Google Play Console Help documentation:

• Families Ads Program
• Designing Apps for Children and Families.

AdvertisingTrackingEnabled flag for Meta Audience Network#

Meta Audience Network has a required API function for iOS 14+. Regardless of mediation usage, Meta Audience Network requires its publishers (explicitly not mediation solutions) to call the setAdvertiserTrackingEnabled function, as defined in the Meta Audience Network documentation on Advertising Tracking Enabled for Audience Network.