Privacy Policy

Last Updated June 30, 2025

Overview

This Services Privacy Policy (“Services Privacy Policy”) explains how Nexxen (“Nexxen”, “we”, “us” or “our”) collects, uses, and shares “Personal Information” in connection with our digital advertising services.

This Services Privacy Policy applies to Personal Information we process as a “data controller” or a “business” and does not apply to information we handle on behalf of our Clients (i.e., when Nexxen acts as a “service provider” or “processor”). For terms related to Personal Information that we collect when you visit our website or if you are a Client please visit our Website Privacy Policy.

1. Our Services

Nexxen operates a global advertising technology platform offering data-driven advertising solutions across websites, mobile applications, connected TV (“CTV”) platforms, linear television, and digital channels (collectively, “Digital Properties”) as part of our digital advertising services (the “Services”). Through integrated demand-side and supply-side platforms, proprietary data management tools, creative capabilities, and AI-powered technologies, Nexxen facilitates the connection of data, creative, and media across the buy and sell sides of the advertising ecosystem. Our Services support advertisers, agencies, publishers, and other partners (“Clients”) in delivering, optimizing, and measuring targeted advertising with greater efficiency and transparency. Our platform capabilities include real-time bidding, audience segmentation, cross-device identity resolution, and contextual and behavioral targeting, and ACR data licensing, conducted in compliance with applicable legal bases (e.g., user consent or legitimate interest) depending on jurisdiction.

We design our Services to support responsible data use and to comply with global privacy laws, including the General Data Protection Regulation (“GDPR”), California Consumer Privacy Act (“CCPA”), and similar laws.

 

Privacy Summary

Topic

What You Need to Know

 

What We Collect

Device data, browsing activity, location, ad interactions, demographics, and survey responses

 

Why We Collect It

To deliver relevant ads, measure performance, prevent fraud, and improve our services

 

How We Collect It

Through cookies, tracking technologies, third-party platforms, and client data integrations

 

Who We Share With

Service providers, ad partners, measurement vendors, and legal/regulatory authorities if required

 

Your Rights

Access, delete, correct, opt-out of sharing or selling, and restrict the processing of your data

 

How to Exercise Your Rights

Visit  our privacy center

 

International Transfers

Data may be stored or transferred outside your region with appropriate safeguards

 

Data Retention

Data is retained only as long as needed for service delivery or legal reasons

 

Children’s Privacy

We do not knowingly collect data from children under 16

 

2. What Personal Information We collect

Summary: This section explains the categories of Personal Information we collect, where it comes from, and how we use it to deliver and improve our Services.

We collect and process Personal Information from a variety of sources to operate and improve our Services. Depending on how you interact with our platform, we may collect the following types of information:

Category

 

Examples

Source of Personal Information

 

Purpose

Device and Location Data

Device type, operating system, IP address, general location

Device/browser or CTV apps via tracking technologies, Clients

 

Service delivery, targeting, and fraud protection

 

Identifiers

IP address, mobile ad identifiers, hashed or obfuscated user identifiers (e.g., UUIDs, hashed email), probabilistic identifiers, and other device identifiers

 

Tracking Technologies on Digital Properties

Recognizing users across platforms, advertising delivery, analytics

Browsing and Interaction Data

Website/app interactions, timestamps, page views, clicks

 

Website or app interaction

Engagement analysis, content personalization

Viewing Data

The use of Automatic Content Recognition (“ACR”) technology to collect certain data from a Smart TV, including a Smart TV’s identifier, IP address, and viewed content and ads information (together “Viewing Data”)

 

ACR-enabled Smart TVs

Deliver and measure personalized ads shown to you on a Smart TV or other linked devices belonging to you or your household

Behavioral Data

User demographics (such as age, gender, income, marital status, or interests), user preferences, patterns, click and video interactions, and behavioral or interest-based data. We may also receive information from advertisers and advertising platforms to match the right advertisements to the appropriate audiences

 

Inferred or third-party data partners, and Media Buyers inputs

Interest-based segmentation, campaign optimization

Audience Segments

Aggregated groups like “sports fans” or “comedy viewers”

 

These are based on online activity, offline data (linked via hashed IDs) which may include demographic or health information.

Inferred from activity or provided by Clients.

Tailored advertising targeting, reach expansion

Survey Data

Survey responses, device info, facial response data (if consented, analyzed via Affectiva technology) to gauge emotional responses during video viewing. You can opt out of webcam usage at any time. Data collected during surveys may be combined with other information or used to generate inferences; however, Personal Information is separated from the facial data unless you specifically opt-in.For more information, you can view Affectiva’s privacy policy.

 

From voluntary surveys

Market research, creative optimization, and brand testing

Offline/Online Transaction/

Conversion data

Purchase behavior to measure ad effectiveness.

 

From advertisers or e-commerce events

Attribution, ROI measurement

3. Who We Share Personal Information With and Why

Summary: This section explains who we share Personal Information with, for what purposes, and under which lawful basis.

Categories of Personal Information Shared

How Personal Information is Used or Shared

 

Category of Recipients

Lawful Basis

Identifiers, Device and Technical Data (e.g., IP address, device type, browser type), Commercial Data (e.g., purchase behaviors)

 

Used to deliver services, improve functionality, and monitor performance

Affiliates and Service Providers – organizations that process data on our behalf

Contractual necessity, Legitimate interests

 

Identifiers, Browsing Data, Geolocation Data, Viewing and Interaction Data, Demographic Segments

 

Audience insight, ad targeting and measurement

Media Buyers

Consent, Legitimate interests

Identifiers, Device and Technical Data, Demographic Segments

 

Real-time bidding, platform delivery

Advertising Ecosystem Participants

Consent, Legitimate interests

Viewing and Interaction Data, Browsing Data, Survey Responses

 

Campaign measurement and audience analysis

Measurement Providers

Consent

Commercial Data, Interaction Data, Identifiers

 

Performance reporting and segmentation.

Attribution and Analytics Partners

Consent, Legitimate interests

All categories, as necessary and limited to the transaction context

Corporate restructuring or acquisition

Business Transactions

Legitimate interests, Legal obligation

All categories, legally required

Legal compliance and enforcement

Legal and Compliance

Legal Obligation

 

Joint Controllership and TCF Consent Signals

We support industry initiatives for greater transparency and user control over the use of data for advertising purposes. This is the reason why we participate in the IAB Europe Transparency & Consent Framework (“IAB EU TCF”), comply to IAB EU TCF’s Specifications and Policies, and deliver advertisements in digital properties that deployed an IAB EU TCF-compliant consent and management platform. Our identification numbers within the IAB EU TCF is 36 for the supply-side platforms and 23 for the demand-side platform.

4. How and Why We Use Your Personal Information

Summary: This section outlines how we use the Personal Information we collect.

Purpose

Use

 

Lawful Basis

Personalized Advertising/Targeted Advertising

 

Delivering advertising to a defined audience

Consent

Contextual Advertising

Showing ads relevant to content you view

 

Consent

Measurement and Reporting

Evaluating advertising effectiveness and managing frequency

 

Consent

ID Synchronization

Matching identifiers across platforms

 

Consent

Identity Graph Building

 

Help our Clients to create “identity” graphs, to help locate users across various channels, such as based on common personal, device-based, or network-based identifiers (e.g., IP address). Users may opt out of this type of processing where required by law. We implement safeguards to prevent re-identification and limit the use of these graphs to advertising and measurement purposes only.

 

Consent

Audience Creation

Grouping users by interests and behaviors (like “sports fans” or “comedy lovers”)

 

Consent

Advertising Creative and Content Optimization

Analyzing viewer reactions and engagement

 

This data will not be used to identify or contact you or target or re-target relevant advertising or other content to you

 

Consent

 

Location-Based Advertising

Tailoring advertising based on general location

Consent

Product Improvement

 

Improving current products and building new products and services, and to diagnose errors

 

Legitimate Interest

Security, fraud prevention, and fix errors, regulatory and legal compliance

 

Preventing fraud, maintaining system integrity, and meeting legal obligations

 

Legitimate Interest, Legal Obligation

Statistical information

Creating anonymous or aggregated insights. We obtain this statistical information from commercially available sources (as permitted by law) such as our third-party service providers.

 

Consent, or Legitimate Interest if fully anonymized

 

5. Your Privacy Controls and Choices

Summary: This section outlines how users and partners can control the collection and use of Personal Information across our Services.

Industry Tools

You can use opt-out tools offered by industry organizations such as the Network Advertising Initiative (NAI), the Digital Advertising Alliance (DAA), the European Interactive Digital Advertising Alliance (EDAA)Digital Advertising Alliance (EDAA), and the Digital Advertising Alliance of Canada (DAAC).

Platform Tools

Control

What it Does

How to Use It

 

Browser Settings

Manage Tracking Technologies

Look under Privacy or Security settings in your browser

 

Device Settings

Control advertising identifiers

Find “Privacy” or “Ads” in your device settings

 

Smart TV Opt Out

Disable ACR

Look under the Settings of the Smart TV

 

To access and exercise your privacy preferences, including opting out of targeted advertising or data sale/sharing, managing consent, or submitting access or deletion requests, please visit our privacy center. We make no representation about the accuracy or effectiveness of other providers opt-out mechanisms, including those listed on the above industry websites.

6. Children

Summary: This section clarifies our policy regarding children’s data.

We require Clients to avoid collecting or disclosing information from children under applicable legal age thresholds. We do not knowingly collect, use, or disclose information from children under the age of 16 (or the permitted legal age, where older). We comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and take steps to prevent data collection from users under 13 without verified parental consent.

7. How Long We Keep Your Personal Information

Summary: This section outlines how long we retain Personal Information.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, as described in this policy, unless a longer retention period is required or permitted by law.

Category

Retention Period

 

Identifiers and tracking data

Cookies with defined expiration periods, including a standard 13-month expiration for European users.

 

Bidstream Data

30 days

 

 

We apply internal retention schedules and deletion protocols to securely remove or de-identify Personal Information when no longer needed.

Aggregated and de-identified data, which no longer identifies individuals, may be retained for analytical and reporting purposes for up to two years or as permitted by law.

8. Where We Store Personal Information

Summary: This section explains where we store and transfer your Personal Information, and the safeguards we use when data is moved across borders.

Your Personal Information may be stored and processed in jurisdictions including Australia, Canada, European Economic Area (EEA), India, Israel, Japan, Singapore, United Kingdom, United States, and for non-U.S. citizens, in Hong Kong. Data.

In the course of delivering our Services, your Personal Information may also be transferred to, and processed by, our service providers, Clients, and partners located in countries outside of your home jurisdiction, including outside the UK and EEA. These countries may have data protection laws that differ from, and may offer a lower level of protection than, those in your jurisdiction. Where such transfers occur and an adequacy decision has not been issued by the relevant authority (e.g., the European Commission or UK Secretary of State), we rely on Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. We also implement additional technical and organizational safeguards to ensure that your data is handled securely and in accordance with applicable data protection laws.

9. Your Rights - Europe, UK and Israel

Summary: This section explains your data protection rights based on your location.

If you’re located in the European Economic Area (EEA), United Kingdom (UK), or Israel, you have the following rights regarding your Personal Information:

Jurisdiction

 

Privacy Rights

EEA

Access, Rectification, Erasure (Right to be Forgotten), Restriction of Processing, Data Portability, Objection, Withdrawal of Consent. Complaints can be lodged with the relevant Supervisory Authority.

 

UK

Same as EEA; lodge complaints with the UK Information Commissioner’s Office (ICO).

 

Israel

Access, Correction, Deletion (where justified), Objection to Use for Direct Marketing. Complaints can be lodged with the Israeli Privacy Protection Authority.

 

You can exercise these rights by visiting our privacy center.

If you have a concern about our processing of Personal Information, we encourage you to contact us so we can address your issue. However, if we are not able to resolve it, you have the right to lodge a complaint with the Data Protection Authority where you reside.

External EU and UK Data Protection Officer: ePrivacy GmbH

represented by Prof. Dr. Christoph Bauer

Burchardstraße 14, 20095 Hamburg, Germany

10. Information Security

Summary: This section describes how we protect your Personal Information using technical and organizational security measures.

We take appropriate technical and organizational measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data we collect and store.  These may include internal audits, role-based access controls, logical data segregation, security logging and monitoring, network security and other security measures.  

11. U.S. State Privacy Laws

Summary: This section outlines your privacy rights under U.S. state laws, including how to access, delete, or opt out of the sale or sharing of your Personal Information.

Depending on your state of residence, you may have specific rights to your Personal Information including the right to request access to, deletion and correction of, an opting out of the sale or sharing of, your Personal Information. This Section applies if you are a natural person who is a resident of California, Colorado, Connecticut, Delaware, Iowa, Florida, Montana, New Hampshire, Nebraska, New Jersey, Oregon, Texas, Utah, Virginia, or another U.S. state with applicable privacy laws (“Consumer”), when we act in the capacity as a “business” or “controller” as defined by the laws of such states.   

The following sets forth the categories of information we collect and purposes for which we may use Consumers’ personal information. (Examples provided for each category are merely examples found in the statute, and do not indicate that we necessarily collect that type of information or identifier).

a. Categories of Consumer Personal Information We Collect and Use

Depending on how you interact with us, we may collect Personal Information about you. The table below reflects categories of Personal Information under CCPA and also describes how we collect and use such categories of information. 

Categories of Personal Information

Examples

Categories of Sources

Business Purpose

Internet or other electronic network activity

Browser and device information, operating system, IP address, IP address, and browsing history

 

Through automated means such as cookies and other data collection tools when you visit a digital property that uses our advertising services technology.

Providing our advertising and related services such as campaign measurement and data marketing.

Commercial or transactions information 

Products or services purchased, obtained, or considered, or other purchasing or consuming histories or preferences

Through automated means such as cookies and other data collection tools when you visit a digital property that uses our advertising services technology.

Providing our advertising and related services such as campaign measurement and data marketing.

Geolocation data 

General Geolocation data

Through automated means such as cookies and other data collection tools when you visit a digital property that uses our advertising services technology.

Providing our advertising and related services such as campaign measurement and data marketing.

Inferences drawn from Personal Information

 Consumer information, lifestyle or purchasing preferences

Through automated means such as cookies and other data collection tools when you visit a digital property that uses our advertising services technology.

Providing our advertising and related services such as campaign measurement and data marketing.

Internet or other electronic network activity

Browser and device information, operating system, IP address, IP address, and browsing history

Clients and third-party aggregators

Providing our advertising and related services such as campaign measurement and data marketing.

Geolocation data 

General geolocation data

Clients and third-party aggregators

 

Providing our advertising and related services such as campaign measurement and data marketing.

Characteristics of protected classifications

Gender, age, race

 

Clients and third-party aggregators

 

Providing our advertising and related services such as campaign measurement and data marketing.

Identifiers

Client or third party provided identifiers

Clients and third-party aggregators

 

Providing our advertising and related services such as campaign measurement and data marketing.

Inferences drawn from Personal Information

Consumer information, lifestyle or purchasing preferences

Clients and third-party aggregators

 

Providing our advertising and related services such as campaign measurement and data marketing.

Professional or employment-related information 

Current or past job history or job title

 

From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit our digital properties.

Business operations

Internet or other electronic network activity information

Browser and device information, operating system, IP address, IP address, and browsing history

 

From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit our digital properties.

Business operations

Identifiers

Name, address, contact Information

From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit our digital properties.

Business operations

 

b. Our Business for Selling and Sharing Personal Information

As defined in CCPA, we may share and sell the information collected from and about you as discussed above for various business purposes, with service providers and with third parties including our Clients, advertising platforms, and those advertising platforms’ customers.  These business purposes often involve cross-context behavioral advertising, also known as “targeted” advertising. ”Selling” and “Sharing” information are defined under California privacy laws (but not necessarily other states’ privacy laws) and includes using (or permitting others to use) the information we collect for cross-context or “targeted” advertising. 

We collect and share the personal information that we collect for the purposes below and as described in this Services Privacy Policy.

Online Advertising & Targeting

  • We create audience groups based on shared traits or interests.
  • These groups are built using browsing behavior to predict likely purchases or actions.
  • We may work with partners who match our data with cookies or IDs (using secure methods like hashing) to target ads across websites, mobile apps, and other platforms.
  • We also help build “identity graphs” that connect users across devices and channels using shared identifiers (like IP address or email).
  • We use this data to improve and measure the effectiveness of ad campaigns.

 

Internal Business Uses

  • Research and development
  • Security, fraud prevention, and debugging
  • Auditing and quality control
  • Legal compliance
  • Our own marketing (e.g., from trade shows or social media)

 

Sharing Personal Information

  • Legal & Safety: To comply with laws, protect our rights, investigate violations, or respond to legal requests.
  • Fraud Prevention: With law enforcement or partners to prevent fraud, malware, or other harm.
  • Corporate Transactions: If we’re involved in a merger, sale, or similar deal, personal info may be shared.
  • Service Providers: With partners who help us run, support, or improve our services.
  • Aggregate/Anonymous Data: We may aggregate and/or de-identify any information collected so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including, without limitation, for research and marketing purposes, and we may also share such data with any third parties, including advertisers, promotional partners, and sponsors, in our discretion.

 

c. Our Retention of Personal Information

We retain personal information as a “business” or “controller” under applicable state privacy laws if it is relevant and useful for purposes of our products and services or we have a legal or compliance reason to do so, and provided the information is not subject to a valid request for deletion.  We may retain information after deletion where legally permitted or required for legal compliance, auditing, or accounting.

d. Your Privacy Rights and Choices

As noted above, residents of certain U.S. states have particular privacy rights (“Applicable State Residents”).  The scope and nature of these rights vary in each state, so we have sought to explain these rights in the most transparent and uniform terms, below.

Without being discriminated against for exercising these rights, California residents, as well as residents of the Applicable States, have the right to request that we disclose what Personal Information we collect from you, to delete that information, and to opt-out of the sale of your personal information, subject to certain restrictions.  If you are a resident of such a state, you also have the right to designate an authorized agent to exercise these rights on your behalf (so long as your state of residence continues to recognize that right).

This section describes how to exercise those rights and our process for handling those requests.  We may withhold these rights to the extent that the law in your state of residence does not recognize or no longer recognizes these rights.

Note that sometimes, we act only as a “service provider” or “processor” to our customers (for instance, if they provide information to us solely to use our marketing or data management tools), in which case any consumer requests for opt-out, deletion or access to data must be made through that Client.

1.  The right to access, correction and disclosure 

You may have the right to request, twice during a twelve-month period, the following information about the personal information we have collected about you during the past 12 months:

  • the categories and specific pieces of personal information we have collected about you;
  • the categories of sources from which we collected the personal information;
  • the business or commercial purpose for which we collected or sold the personal information;
  • the categories of third parties with whom we shared the personal information; and
  • the categories of personal information that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose.

You also may request correction of your personal information, such as if you believe we have incorrect information pertaining to you.

 

2. The right to deletion 

You may have the right to request that we delete the personal information we have collected from you.  Certain information may be exempt from such requests under applicable law.  We need certain types of information so that we can provide our Services to you, and may retain certain information for important business purposes, such as fulfilling our legal obligations, or for security, auditing or de-bugging purposes.

3. How to exercise your access and deletion rights

California residents and residents of Other Applicable States may exercise their access or deletion rights by accessing our privacy center.

For security purposes, we will verify your identity in part by requesting or automatically capturing certain information from you when you request to exercise your applicable privacy rights.  For instance, you may need to provide your email address. To request that we provide you with the specific pieces of personal information we have from you or to delete personal information we have collected from you, we may also need to ask you for additional information to verify your identity.  Once we have verified your identity (and your agent, as applicable), we will respond to your request as appropriate.

  • Where you have requested the categories of personal information that we have collected about you, we will provide the information you have requested, except where not permitted under applicable law or otherwise exempted by the CCPA or other applicable law.
  • Where you have requested specific pieces of personal information, we will provide the information you have requested, except where not permitted under applicable law or otherwise exempted by the CCPA or other applicable law.
  • Where you have requested that we delete personal information that we have collected from you, we will delete any information about you that is not necessary for the purposes indicated above or another permissible business, security or legal purpose.  Certain information may be exempt from such requests under applicable law.

If we are unable to complete your requests fully for any of the reasons above, we will provide you additional information about the reasons that we could not comply with your request.

4. The right to nondiscrimination

We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights.

5. The right to “opt-out” of the sale of your personal information 

You have the right to opt out of the “sale” of your personal information.  California law (for instance) broadly defines sale such that it may include, for example, allowing third parties to receive and use certain information, such as Tracking Technologies, IP address and/or browsing behavior, to deliver targeted advertising.

If you wish to “opt out” of our “sale” of your information, i.e., for purposes of personalized advertising, we recommend employing the options we provide and explain in Section 6.   Please visit our privacy center to exercise your opt-out rights.

6. Authorized Agent

You may also designate an authorized agent to make requests to exercise your rights, where applicable state law (such as the CCPA) permits you to do so.   In such case, we will take steps both to verify the identity of the person seeking to exercise their rights as listed above, and to verify that your agent has been authorized to make a request on your behalf through providing us with a signed written authorization or a copy of a validly executed power of attorney.

7. Right to Appeal

In some states you have a right to appeal our decision about how or whether we honor your privacy rights request(s).  In the event that we inform you that we will not, or believe we cannot, honor a particular consumer request (for instance, if we have determined we cannot verify your identity, or if we believe you are not entitled to the scope of deletion you request), and you live in such a state, you may appeal our determination via our privacy center.

8. Annual Data Requests

The table below sets forth additional privacy disclosures with respect to our processing of data subject rights requests. Between January 1, 2024 and December 31, 2024, across the United States, we processed the following data subject requests of consumers:

Request Type

Number Received

Number Complied with in Whole or Part

Number Denied*

Median Response Time in Days*

Mean Response Time in Days*

Access

89

38

51

19

18

Delete

67

66

1

21

29

Opt-Out

140

62

78

7

7

* Indicates maximum response time based on fulfillment across all states. 

e. Texas Data Broker Disclosure:

Nexxen is registered as a Data Broker with the Texas Secretary of State, as required by Texas law. For additional information visit  https://www.sos.state.tx.us/index.shtml

 

f. California “Shine the Light” Law

California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits California residents to request and receive, once per calendar year and free of charge, information about our sharing of your personal information (if any) with third parties for their own direct marketing use.  Nexxen does not share your personal information with third parties for their own direct marketing purposes.

12. How to Contact Us

If you need to reach us, please email privacyrights@nexxen.com. Our corporate headquarters are located at 82 Yigal Alon St. 13th Floor Tel-Aviv, 6789124 Israel.

 

13. Updates to this Services Privacy Policy

We may update this Services Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will become effective when posted, unless a different effective date is required by applicable law.

The “Last Updated” date at the top of this Policy reflects the most recent revision.