1. About This Statement
Yolla Media, LLC (“Yolla,” “we”) manages advertising on the website you came from (the “Site”) under an agreement with the Site’s publisher. This statement explains what data Yolla and its advertising partners collect when ads are shown on the Site, how that data is used and shared, and the choices you have.
For the advertising described here, Yolla and the Site’s publisher each decide how they use your data, so each is a separate controller responsible for its own processing. For collecting data through our ad tag and sending it to us, we and the publisher may be joint controllers: the publisher gives you notice and asks for consent, and you can exercise your rights with either of us. Each advertising partner named in Section 8 is responsible for its own use of data under its own privacy policy.
This statement covers only Yolla’s advertising practices. The Site’s own privacy policy covers everything else the Site does. Where the Site’s policy describes Yolla’s advertising practices differently, this statement applies. For how Yolla handles data on yollamedia.com, see our Privacy Policy.
2. Data Used for Advertising
When an ad is requested on the Site, Yolla’s ad tag and our partners’ technologies collect:
- Device and browser information: IP address, browser type and version, operating system, device type, screen size, and language setting.
- Approximate location: country, region, or city, derived from your IP address. We do not collect precise location.
- Page and ad activity: the page you are viewing, the referring page, the date and time, which ads were shown, whether they were viewable, and whether you clicked them.
- Online identifiers: cookie IDs and the advertising identifiers described in Section 3.
- Privacy choices: your consent and opt-out preferences, including IAB consent strings and browser privacy signals.
- Page-view measurements: Yolla counts page views on the Site with its own analytics service, which records a random identifier, the page, your country, and your screen size.
- Inferred interests: our partners may associate your browser with interest or audience segments based on your browsing across websites.
Yolla does not collect your name, email address, or other contact details through its ad tag, and does not share them with advertising partners. We do not collect sensitive personal information, such as health data or precise location, for advertising.
3. Cookies and Identifiers
Yolla’s ad tag runs on the Site’s pages. It uses Prebid.js, an open-source header bidding library, to request bids from advertising partners, and Google Ad Manager to select and serve the winning ad. Yolla and its partners use cookies, local storage, and pixels to recognize your browser across visits and websites, cap how often you see the same ad, measure ad performance, and detect fraud.
Yolla’s tag enables the following advertising identifiers. In the EEA, UK, and Switzerland, they are set and shared only if you permit it in the Site’s consent tool. Elsewhere, they are not set once you opt out (see Section 5). To generate its identifier, ID5 receives the page address, your IP address, and your browser’s user agent.
| Identifier | Provider | Stored in | Lifespan |
|---|---|---|---|
| ID5 ID | ID5 | Local storage (id5id) | 90 days |
| SharedID | Prebid.org (first-party, set by Yolla's tag on the Site's domain) | Cookie (_sharedid) | 365 days |
| 33Across ID | 33Across | Cookie and local storage | 30 days |
| Criteo ID | Criteo | Cookie and local storage | Set by Criteo; see its policy |
| Lotame Panorama ID | Lotame | Cookie and local storage | Set by Lotame; see its policy |
Advertising partners who bid on the Site’s ad space may also set their own cookies through user syncing, which lets them match their identifier for your browser with ours. Through Google Ad Manager, other identity providers may also supply encrypted identifiers for your browser to Google. These companies’ use of data is governed by their own privacy policies.
4. How Data Is Used and Shared
Most ads on the Site are sold through real-time auctions. When a page loads, Yolla sends a bid request to advertising partners containing the data described in Section 2 and your privacy choices. Partners pass it to advertisers and their technology providers, who decide whether to bid. The highest eligible bid wins, and that ad is shown.
We and our partners use this data to:
- select and show ads, including ads based on your interests where you have allowed it;
- limit how often you see the same ad;
- measure ad delivery, viewability, and performance;
- detect and prevent invalid traffic and ad fraud;
- report revenue to the Site’s publisher and calculate what we pay them.
We share this data with the following categories of recipients: the Site’s publisher; supply-side platforms and ad exchanges; demand-side platforms, advertisers, and their agencies; identity providers; and measurement and fraud-prevention providers. We may also disclose data where the law requires it, to protect our rights, or as part of a merger or sale of our business.
Yolla does not sell names, contact details, or sensitive personal information. Some US state laws treat the sharing described above as a “sale” or “sharing” of personal information, or as “targeted advertising,” even when no money changes hands for the data itself. See Section 7 for how to opt out.
5. Your Choices
- The Site’s privacy choices. Sites using Yolla’s ad tag offer privacy choices through InMobi Choice or another consent tool Yolla approves. In the EEA, UK, and Switzerland, and anywhere else the law requires consent, a consent tool asks you to accept or refuse advertising cookies and personalized ads before they are used. In the United States, a “Do Not Sell or Share My Personal Information” link lets you opt out. You can reopen your choices at any time from the link the Site provides.
- Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising for that browser. Learn about GPC.
- Industry opt-out tools. Opt out of interest-based ads from participating companies through the Network Advertising Initiative, the Digital Advertising Alliance, the European Interactive Digital Advertising Alliance, or Digital Advertising Alliance of Canada.
- Google. Manage the ads Google shows you in My Ad Center.
- Partner opt-outs. Each partner in Section 8 offers its own opt-out.
- Your browser. Block or delete cookies and site data in your browser settings. Deleting the Site’s cookies also resets SharedID.
Most opt-outs are stored in a cookie on your browser, so they apply only to that browser and device and are lost if you clear your cookies. Opting out does not stop ads: you will still see ads, but they will not be based on your interests.
6. Visitors in the EEA, UK, and Switzerland
If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR, UK GDPR, or Swiss Federal Act on Data Protection (FADP), as applicable, and local cookie laws govern this processing.
Consent and the IAB TCF. Yolla provides InMobi Choice, an IAB-registered consent tool, as part of its ad tag (or the publisher uses another tool Yolla approves). It is a consent management platform registered with the IAB Europe Transparency & Consent Framework (TCF). It records your choices for each purpose and each registered vendor and passes them to Yolla and our partners in every ad request. We rely on your consent to store and read information on your device and to show personalized ads. Where the TCF allows it, some partners rely on their legitimate interests for purposes such as ad measurement. You can object to that in the consent tool. Fraud prevention always runs and cannot be switched off in the consent tool. If you refuse consent, you will see only non-personalized ads.
Your rights. You can ask to access, correct, or delete your personal data; to restrict or object to its processing; and to receive it in a portable format. You can withdraw consent at any time in the Site’s consent tool, without affecting processing that took place before. To make a request about data Yolla holds, email privacy@yollamedia.com. We respond within 30 days. Because we do not know your name, we may ask for your browser’s advertising identifiers to locate your data.
Your right to object. You can object at any time to the use of your data for advertising, including profiling for advertising. You can do this in the Site’s consent tool or by emailing privacy@yollamedia.com. We make no decisions about you based solely on automated processing that have legal or similarly significant effects.
International transfers. Yolla is based in the United States and processes advertising data on servers in the United States. Data we receive from sites in the EEA, UK, or Switzerland is transferred under the European Commission’s Standard Contractual Clauses, with the UK Addendum and Swiss amendments where they apply.
Complaints. You have the right to lodge a complaint with the data protection authority where you live or work, including the UK Information Commissioner’s Office or the Swiss Federal Data Protection and Information Commissioner.
7. US State Privacy Rights
Residents of California, Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy laws have rights over their personal information. This section is also our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA).
What we collect and share. In the past 12 months, Yolla collected the following categories of personal information from browsers on the Site, and sold or shared them for cross-context behavioral (targeted) advertising with the categories of recipients listed in Section 4:
- Identifiers: IP address, cookie IDs, and advertising identifiers.
- Internet activity: pages viewed and ad interactions on the Site.
- Approximate geolocation: derived from IP address.
- Inferences: interest or audience segments.
We also disclosed the same categories for business purposes, such as ad measurement, fraud prevention, and reporting, to the recipients listed in Section 4. We collect this information from your browser and from our advertising partners, for the purposes listed in Section 4. We keep it for the periods in Section 9. We do not collect or use sensitive personal information.
Opting out of sale, sharing, and targeted advertising. Use the “Do Not Sell or Share My Personal Information” link on the Site, or turn on Global Privacy Control in your browser. When you opt out, Yolla’s tag stops setting advertising identifiers and syncing them with partners for that browser, and tells bidding partners that you have opted out so they do not use your data for targeted advertising. You can also email privacy@yollamedia.com with your request. We act on emailed opt-out requests as soon as feasible and, if you give us your browser’s identifier, within 15 business days. The fastest way to opt out is the link on the Site or Global Privacy Control.
Your other rights. Depending on your state, you can ask to know or access the personal information we hold about you, including the categories of third parties we disclosed it to; to correct it; to delete it; and to receive it in a portable format. Email privacy@yollamedia.com to make a request. We will verify it by matching the advertising identifiers in your browser, because we do not hold your name or contact details. We respond within 45 days. You may use an authorized agent, and we will not discriminate against you for exercising these rights.
Appeals. If we decline your request, you can appeal by replying to our decision or emailing privacy@yollamedia.com with “Appeal” in the subject line. We respond to appeals within 45 days. If you disagree with the outcome, you can contact your state attorney general.
8. Advertising Partners
Yolla works with the following partners to serve ads on the Site. Each uses data under its own privacy policy, and most offer their own opt-out.
| Partner | Role | Privacy policy and opt-out |
|---|---|---|
| Ad server and ad exchange (Google Ad Manager) | Privacy policy · My Ad Center | |
| Magnite | Header bidding, ad exchange, and video ad caching | Privacy policy · User Choice Portal |
| Epsilon (Conversant) | Header bidding | Privacy policy · Epsilon ad choices |
| Index Exchange | Header bidding and ad exchange | Privacy policy |
| Microsoft Advertising (formerly Xandr) | Header bidding and ad exchange | Privacy policy |
| OpenX | Header bidding and ad exchange | Privacy policy · OpenX opt-out |
| PubMatic | Header bidding and ad exchange | Privacy policy · PubMatic privacy choices |
| Sovrn | Header bidding | Privacy policy · Sovrn opt-out |
| TripleLift | Header bidding | Privacy policy · TripleLift opt-out |
| ID5 | Identity provider (ID5 ID) | Privacy policy · ID5 opt-out |
| 33Across | Header bidding and identity provider (33Across ID) | Privacy policy |
| Criteo | Identity provider (Criteo ID) | Privacy policy · Disable Criteo |
| Lotame | Identity provider (Panorama ID) | Privacy policy · Lotame privacy choices |
| InMobi | Consent management platform (InMobi Choice) | Privacy policy |
On sites in the EEA, UK, and Switzerland, the Site’s consent tool lists every vendor that may process your data and lets you refuse each one.
9. Retention and Security
Yolla keeps ad-serving records that contain IP addresses or identifiers for up to 13 months, then deletes them or aggregates them so they no longer identify a browser. Consent records are kept for 13 months from your last choice. Identifiers stored in your browser expire after the lifespans in Section 3, unless you delete them sooner. Partners keep data under their own policies.
We protect the data we hold with reasonable administrative, technical, and physical safeguards appropriate to its sensitivity.
10. Children
Yolla’s advertising services are not directed to children, and we do not knowingly use personal information of children under 13, or sell or share personal information of consumers under 16, for personalized advertising. If you believe we have, contact privacy@yollamedia.com and we will delete it.
11. Contact and Updates
We update this statement when our advertising practices or partners change. The “Last updated” date at the top shows when it last changed.