Cookie Policy

Last Updated: Nov 22, 2024

Starti Limited (“Company,” “we,” “us,” or “our”) utilizes cookies, device identifiers, and similar tracking technologies (collectively, “Tracking Technologies”) to operate our Connected TV Demand-Side Platform (the “Platform”), deliver targeted advertising, and analyze user interactions.

This Cookie Policy (“Policy”) explains:  
- The types of Tracking Technologies we employ.  
- How and why we use them.  
- Your rights to control their use.  
- Our compliance with global privacy regulations, including the General Data Protection Regulation (“GDPR”), California Consumer Privacy Act (“CCPA”), and ePrivacy Directive. 

By accessing the Platform, you consent to the use of Tracking Technologies as described herein, unless adjusted through your browser, device settings, or opt-out preferences.

1. DEFINITIONS  

1.1 “Cookies”: Small text files stored on your device that collect anonymized identifiers and usage data.  
1.2 “Device Fingerprinting”: A method to identify devices based on hardware/software configurations (e.g., IP address, browser type). 
1.3 “CTV Device IDs”: Unique identifiers assigned by connected TV manufacturers (e.g., LG webOS ID, Vizio SmartCast ID).  
1.4 “Server-Side Ad Insertion (SSAI)”: A technology embedding ads into streaming content for seamless ad delivery.  
1.5 “Programmatic Advertising”: Automated buying/selling of ad inventory via real-time bidding (RTB).  

2. CATEGORIES OF TRACKING TECHNOLOGIES 

We classify Tracking Technologies based on their purpose and legal basis:  

2.1 Strictly Necessary Technologies 

Legal Basis: Required for Platform functionality under GDPR Article 6(1)(b) (“contractual necessity”).  
‍
Purposes:  
- User authentication and session management.  
- Load balancing and security (e.g., detecting brute-force attacks).  
- Compliance with legal obligations (e.g., age verification).  

2.2 Performance and Analytics Technologies

Legal Basis: GDPR Article 6(1)(f) (“legitimate interests”) or consent, where required.

Purposes: 
- Measuring ad impressions, viewability, and click-through rates (CTR).  
- Analyzing audience demographics (e.g., household income brackets).  
- Debugging Platform performance issues.  

2.3 Functional Technologies

Legal Basis: Consent under GDPR Article 6(1)(a).  
‍
Purposes:  
- Remembering user preferences (e.g., dashboard layout, time zone).  
- Caching frequently used ad creatives for faster loading. 

2.4 Targeting and Advertising Technologies  

Legal Basis: Consent under GDPR Article 6(1)(a) and CCPA “Do Not Sell/Share” requirements. 

Purposes: 
- Building audience segments for interest-based advertising.  
- Retargeting users across CTV, mobile, and desktop devices.  

2.5 CTV-Specific Technologies  

Legal Basis: Legitimate interests or consent, depending on jurisdiction.  

Purposes:  
- Frequency capping to limit ad exposure per household.  
- Measuring ad completion rates in SSAI environments.  

3. THIRD-PARTY DATA SHARING 

We collaborate with the following third-party services, which may access data via Tracking Technologies. We do not sell Personal Data as defined under CCPA/CPRA.

4. USER RIGHTS AND CONTROLS 

4.1 Consent Management  

- Granular Consent: Upon first Platform visit, a cookie banner allows you to accept/reject categories of Tracking Technologies (excluding Strictly Necessary).    

4.2 Opt-Out Mechanisms   

- Device-Level Opt-Outs:    
- Roku: Settings > Privacy > Advertising > Reset Advertising ID.    
- Amazon Fire TV: Settings > Preferences > Advertising ID.  

4.3 Data Subject Requests

Submit requests to access, correct, or delete data collected via Tracking Technologies by:  

- Email: contact@starti.tv 
We respond within 30 days and may require identity verification.  

5. DATA RETENTION AND SECURITY  

5.1 Retention Periods 
‍
CTV Device IDs for Campaign performance analysis: 13 months
 IP Addresses for Fraud detection and geotargeting: 60 days
Cookie Consent Records for Legal compliance audits: 5 years

5.2 Security Measures  

- Encryption: AES-256 for data at rest, TLS 1.3 for data in transit.  
- Access Controls: Role-based permissions and multi-factor authentication (MFA).  
- Audits: Annual penetration testing and SOC 2 Type II compliance.  

6. INTERNATIONAL COMPLIANCE  

6.1 GDPR (EU/UK)  
- Lawful Basis: Process data under legitimate interests (Art. 6(1)(f)) or consent (Art. 6(1)(a)).  
- TCF 2.2: Honor user consent signals via the IAB Transparency and Consent Framework.  

7. POLICY UPDATES 

We may update this Policy to reflect:  
- Changes in Tracking Technologies or data practices.  
- New legal or regulatory requirements (e.g., Digital Services Act (DSA)).  

Material changes will be communicated via:  
- Email Notification: Sent to registered users 30 days in advance.  
- Platform Banner: Displayed upon login until acknowledged.  

8. CONTACT INFORMATION 
‍
For questions or to exercise your rights:  
Starti LimitedUnit 225-22, 2/F Mega Cube 8
Wang Kwong Rd Kln BayHong Kong  
‍
Email: contact@starti.tv
Phone: +1 778 266 3600
Phone: +86 159 2997 2924