Unity Mediation privacy guidelines

Attention: The Unity Mediation package is no longer available for new installs as of December 2022. Publishers interested in implementing or maintaining a monetization solution are recommended to use Unity LevelPlay via the Ads Mediation package in the Unity Editor. Learn how to integrate Unity LevelPlay with the Unity Editor by installing the Ads Mediation package. Once integrated, refer to the Unity Mediation to Unity LevelPlay migration guide for more details.

This privacy guide highlights and explains how the current version of the Unity Mediation SDK:

  • Passes consent signals for traditional eCPM targets and Bidding for specific data privacy regulations
  • Accounts for App Tracking Transparency (ATT)

Note: If the Unity Mediation SDK is unable to receive and pass any relevant consent or user privacy choice signals on your behalf, it is your responsibility as the developer and publisher to pass such signals to all mediated ad networks in order to maintain compliance with data privacy laws and consent to user data collection.

The Unity Mediation SDK provides easy-to-use APIs to help you meet your obligations to end-users and ad networks by adhering to user privacy choices under specific data privacy regulations.

For iOS apps, we provide code samples that detail how you can ingest GDPR, CCPA, and PIPL consent opt-ins and opt-outs. See User data privacy code samples for iOS apps.

General Data Protection Regulation (GDPR)

The Unity Mediation SDK APIs concerning user consent collection and data privacy accept a consent status as defined in the API Reference guides for apps made for the following platforms:

For more information, see:

California Consumer Privacy Act (CCPA)

The Unity Mediation SDK APIs concerning user consent collection and data privacy accept a consent status as defined in the API Reference guides for apps made for the following platforms:

For more information, see:

Children’s Online Privacy Protection Act (COPPA)

The Unity Dashboard provides an option to flag a project as child-directed. For Unity Mediation, in the cases where a Unity project is flagged as child-directed, the personal information of end-users is not passed to in-app bidding participants, and the relevant bid requests are marked as contextual requests.

Note: Unity Mediation does not process and pass user-level COPPA signals.

For more information, see:

App Tracking Transparency (ATT)

This concerns apps that are made with iOS or are available on the iOS platform.

There are no explicit APIs required to implement ATT. The Mediation SDK internally captures the current state of iOS privacy permissions.

To easily account for ATT in your project, made-with-Unity developers can install the iOS 14 support package. Use this package to upgrade your Unity Ads SDK, update ad network IDs for your project’s properties list, and implement an ATT context screen and permission request in your app.

For more information on getting started with using the iOS support package in your project, see the iOS 14 Technical Integration guide.

When a publisher installs the iOS support package, the Mediation SDK package downloads a list of SKAdNetworkIds based on the SKAdnetworks file inside the Mediation package.

If a publisher requires an extra ID, they can create an extra custom file to manually add SKAdNetworkIds:

  • SKAdNetworks.xml for an XML format
  • SKAdNetworks.json for a JSON format
  • SKAdNetworks for a URL

When an iOS build is triggered, the iOS support package detects these files and includes these IDs in the iOS app's Info.plist file.

For more information, see the Apple documentation on User Privacy and Data Use.

Personal Information Protection Law (PIPL)

On November 1, 2021, China started enforcing a data privacy regulation known as PIPL. This regulation concerns the collection and processing of personal data specifically for Chinese citizens. If your audience traffic is not primarily from an audience in China, then there will be little to no change in your revenue.

See Unity’s approach to PIPL.

If your app is set up to use bidding, the Unity Mediation SDK only ingests PIPL opt-in consents for bidding sources, and consequently might collect and process personal data from users in China if the required consent signals are passed into the SDK. PIPL opt-in consents are not ingested for traditional eCPM waterfalls.

For more information on how the Unity Mediation package supports PIPL, see:

Google Families Ads Program

This concerns apps that are made with Android or are available on the Android platform.

On April 1, 2022, Google updated a policy related to its Families Ads Program to add a requirement that no longer allows Device IDs to leave player devices in Android apps targeted toward children (or, in the case of mixed audience games, users of unknown age).

See Unity’s approach to Google’s privacy changes.

To comply with this Google policy update, Unity Mediation users with Android apps must ensure that their next build uses Unity Mediation 0.4.1 or later.

For more information on this policy update, see the Google Play Console Help documentation:

AdvertisingTrackingEnabled flag for Meta Audience Network

Meta Audience Network has a required API function for iOS 14+. Regardless of mediation usage, Meta Audience Network requires its publishers (explicitly not mediation solutions) to call the setAdvertiserTrackingEnabled function, as defined in the Meta Audience Network documentation on Advertising Tracking Enabled for Audience Network.