MangoX.io Privacy Policy

Effective Date: [2026.6.1]

This Privacy Policy applies to the MangoX.io advertising technology services.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when providing our advertising technology services, including services used by publishers, advertisers, demand partners, supply partners, app developers, website operators, and other business partners.

MangoX.io provides advertising technology services that may support ad selection, ad delivery, content selection, measurement, reporting, fraud prevention, traffic quality, audience understanding, privacy signal processing, and service improvement.

1. IAB Europe Transparency & Consent Framework

MangoX.io participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. MangoX.io’s identification number within the framework is 1617.

Where MangoX.io processes personal data in connection with the Framework, we rely on the legal bases communicated through the applicable TCF signal, including consent and/or legitimate interests, depending on the declared Purpose, Special Purpose, Feature, or Special Feature.

We do not store or access information on a user’s device where consent is required unless we have received a valid consent signal through a consent management platform, or CMP, or another applicable consent mechanism.

Users may manage their choices through the CMP made available by the publisher, website, app, or digital property they use.

2. Information We Collect and Process

Depending on how our services are used by publishers, advertisers, platforms, and other business partners, we may collect and process the following categories of information:

IP address;
device identifiers, including mobile advertising identifiers such as IDFA or GAID, cookie identifiers, SDK-generated identifiers, and other online identifiers;
device and browser information, including device type, operating system, browser type, browser version, user agent, language, time zone, screen size, connection type, and device model;
approximate location information, such as country, region, or city inferred from IP address or similar signals;
precise geolocation data, where made available to us and where the user has provided a valid opt-in or other legally required permission;
advertising and ad interaction data, including bid requests, ad requests, ad impressions, clicks, conversions, auction data, campaign identifiers, creative identifiers, placement information, frequency information, and reporting data;
content interaction data, including information used to select, deliver, personalise, or measure content where applicable;
app, website, or digital property information, including app bundle ID, package name, domain, page URL, referrer URL, publisher identifier, app or site category, and content context where applicable;
consent and privacy signal information, including TCF strings, consent signals, opt-out signals, objection signals, opt-in signals, and related preference information;
fraud prevention, security, and diagnostics data, including invalid traffic signals, suspicious activity signals, quality signals, log data, error data, and technical diagnostics.

We do not intentionally collect special categories of personal data, such as information revealing racial or ethnic origin, political opinions, religious beliefs, health information, or similar sensitive information, for the purposes of our advertising technology services.

3. How We Collect Information

We may collect information in the following ways:

from publishers, app developers, website operators, advertisers, advertising platforms, and other business partners that use or integrate with our services;
through ad requests, bid requests, impression events, click events, conversion events, reporting events, server-to-server integrations, APIs, SDKs, tags, pixels, cookies, or similar technologies;
through CMPs or other consent and privacy signal mechanisms;
from service providers and partners that support measurement, fraud prevention, security, hosting, analytics, reporting, or technical operations;
from information generated when our services process advertising, content, security, diagnostics, or reporting events.

4. How We Use Information

We may use the information described above for the following purposes:

to store and/or access information on a user’s device where permitted by applicable law and the applicable consent signal;
to use limited data to select advertising;
to create profiles for personalised advertising where permitted by applicable law and user choices;
to use profiles to select personalised advertising where permitted by applicable law and user choices;
to create profiles to personalise content where permitted by applicable law and user choices;
to use profiles to select personalised content where permitted by applicable law and user choices;
to measure advertising performance, including impressions, clicks, conversions, reach, frequency, campaign delivery, and campaign effectiveness;
to measure content performance;
to understand audiences through statistics or combinations of data from different sources;
to use limited data to select content;
to ensure security, prevent and detect fraud, detect invalid traffic, fix errors, and address misuse of our services;
to deliver and present advertising and content;
to save, receive, and communicate users’ privacy choices, consent signals, opt-out signals, objection signals, and opt-in signals;
to develop, test, maintain, troubleshoot, and improve our advertising technology services;
to provide reporting, analytics, billing, reconciliation, support, and operational services to business partners;
to comply with legal, regulatory, contractual, and industry framework obligations.

Where our processing is conducted within the IAB Europe Transparency & Consent Framework, our declared Purposes, Special Purposes, Features, Special Features, data categories, legal bases, and retention periods are provided through the Global Vendor List and reflected in applicable TCF signals.

5. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing personal data, we rely on one or more of the following legal bases:

consent, where a user has given consent through a CMP or another applicable consent mechanism;
legitimate interests, where permitted by applicable law and where the user has not objected;
performance of a contract, where processing is necessary to provide services to our business partners;
compliance with legal obligations, where processing is necessary to comply with applicable laws, regulations, legal processes, or enforceable requests.

For processing conducted within the IAB Europe Transparency & Consent Framework, we currently declare consent as the legal basis for:

storing and/or accessing information on a device;
using limited data to select advertising;
creating profiles for personalised advertising;
using profiles to select personalised advertising;
creating profiles to personalise content;
using profiles to select personalised content.

We currently declare legitimate interests as the legal basis for:

measuring advertising performance;
measuring content performance;
understanding audiences through statistics or combinations of data from different sources;
developing and improving services;
using limited data to select content;
ensuring security, preventing and detecting fraud, and fixing errors;
delivering and presenting advertising and content;
saving and communicating privacy choices.

We respect the consent, opt-in, and objection signals communicated to us through the applicable TCF signal. If we cannot read or process a required signal, we will treat the signal as not granting permission for the relevant processing.

6. Explanation of MangoX.io’s Legitimate Interests

MangoX.io may rely on legitimate interests as a legal basis for certain processing activities where permitted by applicable law and where the user has not objected through an applicable CMP or other available mechanism.

We may rely on legitimate interests for the following purposes:

measuring advertising performance;
measuring content performance;
understanding audiences through statistics or combinations of data from different sources;
developing, maintaining, testing, troubleshooting, and improving our advertising technology services;
using limited data to select content;
ensuring security, preventing and detecting fraud, detecting invalid traffic, fixing errors, and protecting our services;
delivering and presenting advertising and content;
receiving, saving, and communicating users’ privacy choices, consent signals, opt-out signals, objection signals, and opt-in signals;
providing reporting, analytics, support, billing, reconciliation, and operational services to business partners;
complying with contractual, legal, regulatory, and industry framework obligations.

We consider these processing activities necessary to operate, secure, measure, maintain, and improve our advertising technology services and to support publishers, advertisers, platforms, and other business partners.

We also consider the impact of our processing on users and apply safeguards designed to protect users’ privacy, including respecting consent, opt-out, objection, and opt-in signals communicated through applicable mechanisms.

Users may object to processing based on legitimate interests through the CMP made available by the publisher, website, app, or digital property they use, or by contacting us at privacy@mangox.io.

7. Device Storage, Cookies, and Advertising Identifiers

Our services may use or receive cookies, mobile advertising identifiers, SDK-generated identifiers, and similar technologies in connection with the delivery, measurement, security, and improvement of digital advertising and content.

These technologies may be used to recognize a browser, device, or app environment; remember privacy choices; select and deliver advertising or content; measure delivery and performance; prevent fraud and invalid traffic; fix errors; and improve our services.

Where consent is required by applicable law, we store or access information on a user’s device only after receiving a valid consent signal through a CMP or other applicable consent mechanism.

Cookies or similar device storage used in connection with our services may have a maximum duration of up to 7776000 seconds, equivalent to 90 days, unless refreshed or reset in accordance with applicable law and user choices.

Users can manage their choices through the CMP made available by the publisher, website, app, or digital property they use, and may also use device or browser settings to limit certain identifiers or tracking technologies.

8. Data Retention

We retain personal data processed in connection with the purposes described in this Privacy Policy for up to 180 days, unless a shorter retention period is applied or a longer period is required by applicable law, regulatory obligations, dispute resolution, security, fraud prevention, billing, reconciliation, or compliance purposes.

This 180-day retention period applies to personal data processed for our declared purposes under the IAB Europe Transparency & Consent Framework, including advertising selection, personalised advertising, personalised content, advertising performance measurement, content performance measurement, audience understanding, service improvement, fraud prevention, security, diagnostics, delivery and presentation of advertising and content, and privacy signal processing.

Cookies or similar device storage may have a maximum duration of up to 7776000 seconds, equivalent to 90 days, as described in the section “Device Storage, Cookies, and Advertising Identifiers”.

Aggregated, anonymised, or de-identified data that no longer identifies an individual may be retained for a longer period.

9. How We Share Information

We may share information with the following categories of recipients where necessary for the purposes described in this Privacy Policy:

publishers, app developers, website operators, and digital property operators;
advertisers, agencies, brands, campaign partners, and their service providers;
demand-side platforms, supply-side platforms, ad exchanges, ad networks, ad servers, and other advertising technology partners;
measurement, attribution, analytics, verification, reporting, and campaign performance providers;
fraud prevention, traffic quality, ad quality, brand safety, and security providers;
hosting, cloud infrastructure, data processing, storage, monitoring, and technical service providers;
professional advisers, auditors, legal counsel, consultants, and compliance service providers;
regulators, courts, law enforcement authorities, government authorities, or other third parties where required by law or necessary to protect our rights, users, partners, or services;
parties involved in a business transaction, such as a merger, acquisition, financing, reorganisation, or sale of assets, where permitted by applicable law.

Where information is shared in connection with the IAB Europe Transparency & Consent Framework, we respect applicable TCF signals and only process or share personal data where we have an applicable legal basis.

10. International Data Transfers

We may process and transfer information in countries or regions other than where the information was originally collected, including countries that may not provide the same level of data protection as the user’s jurisdiction.

Where required by applicable data protection laws, we use appropriate safeguards for international transfers, such as contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

We also take steps designed to ensure that our service providers and partners protect information in accordance with applicable contractual, legal, and security requirements.

11. Your Privacy Rights

Depending on the laws that apply to you, you may have certain rights regarding your personal data, including the right to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
withdraw consent where processing is based on consent;
request data portability where applicable;
lodge a complaint with a competent data protection authority.

To exercise your privacy rights or contact us about this Privacy Policy, please email us at privacy@mangox.io.

Where your choices are managed through a publisher’s CMP, website, app, browser, or device settings, you may also use those tools to manage consent, opt-out, objection, or opt-in choices.

12. Security

We use technical and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, logging, monitoring, encryption in transit where appropriate, vendor management, and internal policies.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s Privacy

Our services are intended for business customers and are not directed to children. We do not knowingly collect personal data from children for the purposes of providing our advertising technology services.

If we become aware that we have collected personal data from a child in a manner that violates applicable law, we will take appropriate steps to delete or restrict the processing of that information.

14. Links to Third-Party Websites or Services

Our services, reports, dashboards, documentation, or communications may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices, content, or security of third-party websites or services. Users and business partners should review the privacy policies of those third parties.

15. Business Customers and Partner Responsibilities

Our advertising technology services are primarily provided to business customers and partners. Publishers, app developers, website operators, advertisers, platforms, and other business partners are responsible for providing notices, obtaining consents, offering choices, and transmitting valid privacy signals where required by applicable law and by the terms that apply to their use of our services.

Where we receive consent, opt-out, objection, or opt-in signals from a CMP or another applicable mechanism, we process those signals in accordance with this Privacy Policy, applicable law, and the relevant technical specifications.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this page.

The updated version of this Privacy Policy will be effective when it is posted, unless otherwise stated.

17. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@mangox.io

services.