Web Environment: (desktop, tablet, and smartphone browsers)

ShareThis uses browser cookies to “tag” visitors on the websites that use ShareThis Publisher Applications. These users are given a technical identifier, such as C62414AY9324FB5671069928026P0067.

This browser cookie tracks the user’s browsing data. Pixel tags are then used to transfer this browsing data from visitors of Publishers’ websites to ShareThis and our data partners.

About the Technology:

Cookies: Small text files that contain a string of characters and uniquely identify a browser. Cookies are sent to a computer by website operators or third parties. Most browsers are initially set up to accept cookies. However, you may be able to change your browser settings to refuse third-party cookies. Check your browser’s “Help” files to learn more about handling cookies on your browser.

Pixel tags are small blocks of code on a webpage that allow websites to do things like read and place cookies. The resulting connection can include information such as the person’s IP address, the time the person viewed the pixel and the type of browser being used.

HTTP headers: Components of the header section that are transmitted whenever a webpage is viewed, and contain technical information required for communication between a client (your computer or device) and a server (the webpage you visit). This information may include information about the browser, the requested webpage, server and other information the third party knows about you, your computer or device.

Note: ShareThis does not use persistent identifiers like a carrier or device ID to revive a previously opt-out profile or deleted cookie.

Statistical IDs: IDs created via an algorithm using information about your computer or device. This information makes your computer or device distinct enough for our systems to determine within a reasonable probability that they are encountering the same computer or device. These statistical IDs are not 100% accurate. We may use statistical IDs for Publisher analytics and aggregate analytics. We collect this data to measure insights on the browsing and sharing activity from Publisher websites.

Please keep in mind that your web browser may not permit you to block the use of these statistical IDs, and those browser settings that block cookies may have no effect on such techniques.

Other Environments: (Mobile applications)

To serve ads in mobile applications identifiers may be used, such as Google Advertising ID or Apple IDFA, depending on the operating system of your mobile device. The advertiser identifier identifies your device but not you and can be reset by you. See your device manufacturer for more information.

Linking Environments: (browsers and mobile apps used)

To serve you personalized advertisements and provide a seamless online experience, third party data partners that we work with may link your identifiers on the different environments you use. We may enable the linking of our Usage Data through cookie syncing. We do not use plain text personal information such as your name or address to operate the linking. Our data partners may use exact linking methods by leveraging the technical data collected through our technology such as advertising partner identifiers.

Our data partners are members of the NAI or DAA and you can opt out of our tracking and theirs through NAI or DAA opt out mechanisms described in User Choices.

Browser environment: (desktop, tablet, and smartphone browsers)

When you opt out as instructed in this section, an opt-out cookie will be set on your browser. We must maintain the opt-out cookie on your browser in order to recognize you as having opted out from our service. The ShareThis opt-out cookie is like any other cookie; therefore, if you clear that cookie from your browser, use a different internet browser, or use a new computer to access the internet you must opt out again.

You can also opt out by visiting the following links.

Network Advertising Initiative (“NAI”) Opt-Out Platform

Digital Advertising Alliance (“DAA”) Opt-Out Platform

European Interactive Digital Advertising Alliance (“EDAA”) Opt-Out Platform

Note:

The opt-out tools above are currently cookie-based, and prevent ShareThis from using Usage Data for interest-based advertising on the browser on which they are installed. As a result, the opt out will only function if your browser is set to accept third-party cookies, and may not function where cookies are sometimes automatically disabled or removed (potentially without your knowledge), like Safari. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt out again.

Mobile environment:

While the opt-out methods described above often work for mobile web browsing, they are cookie-based and are therefore less reliable in mobile “app” environments that may not accept interest-based advertising cookies.

Instead, you can typically opt out at the mobile platform level by the limit ad tracking within the settings function, as described below. Though we do not collect data from mobile apps for interest-based advertising, we or third parties we work with may use such data collected by others in delivering interest-based ads.

Most Android Users:

To use the “opt-out of interest-based advertising” option, follow the instructions provided by Google here: Google Play Help.

Please note that this is a device setting and will disable interest-based ads from all providers, and not just for ShareThis.

iOS users: (version 6 and above)

To use the “Limit Ad-Tracking” option, follow the instructions provided by Apple here: Apple Support Center.

Please note that this is a device setting and will disable interest-based ads from all providers, and not just for ShareThis.

Do Not Track and Cookie Blocking:

ShareThis does not process do-not-track signals from browsers. If you block third-party cookies from being set on your browser, you may not be able to enjoy some features or functionality. Blocking cookies will also block the function of our opt-out, which is an opt-out cookie. Check your browser’s “Help” files to learn more about handling cookies on your browser.

The Ghostery browser extension is also a good tool to see a list of all third-party cookies on each website you visit and allows you to selectively opt out.

We share pseudonymized Usage Data, including audience segments, with advertisers, Publishers, and other data partners (all, “Our Customers”) for interest-based advertising, analytics and data modeling. In the European Union, we may transfer Usage Data to other data controllers or processors with whom we have business relationships and as long as the users have consented for their personal data to those business partners of ours.

We provide data to other companies inside and outside the EU and the US that require access to data in order to assist us in providing our services. In each case, we have safeguards in place which allow those transfers to happen in a way that ensures data is handled in accordance with the applicable law. Those categories of data partners would be: clients, advertisers, agencies, agency trading desks, DMPs, DSPs, data aggregators, technology providers etc.

Our Customers may use third-party service providers, acting on their behalf, to display advertising or other content that reflects users in an audience segment.
We also provide analytics to help Publishers to better understand the use and interactions on their website. We may offer aggregate browsing data so a Publisher may know the people most likely to share their content with their friends when they are, for example, soccer fans.

When we share Usage Data with Our Customers, we contractually prohibit them from re-identifying you (with your name, address, email, phone or other directly identifying information) without opt-in consent from you, unless the Usage Data is only from their website.

Please review some of our partner policies for more information:

LiveRamp: https://liveramp.com/privacy/
The Trade Desk: https://www.thetradedesk.com/general/privacy
AppNexus: https://www.appnexus.com/platform-privacy-policy

We also share Usage Data with third-party service providers (e.g., data storage and processing facilitates or modeling vendors) in order for those service providers to perform business functions for ShareThis or on behalf of ShareThis customers. We require them to use it only for the purposes of providing services to us and to implement security controls and to maintain the confidentiality of that information.

ShareThis may use or disclose registration information and/or Usage Data as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; b) to comply with legal process; c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence to meet national security and/or law enforcement requirements; d) to enforce our terms and conditions; e) to protect our operations or those of any of our affiliates, you or others; f) to allow us to pursue available remedies or limit the damage that we may sustain; and g) as part of a merger, acquisition, or sale of assets.

ShareThis is a member of the following self-regulatory programs:

Network Advertising Initiative (NAI):

ShareThis adheres to the NAI Code of Conduct.  NAI offers an online web opt-out platform to allow consumers to express their choices and provides general information related to privacy and Interest Based Advertising.

The Digital Advertising Alliance (DAA):

ShareThis adheres to the Digital Advertising Alliance Self-Regulatory Principles for Online Behavioral Advertising.  The DAA opt-out platform offers the consumer a choice page to opt out from advertising services, and general information related to privacy.

EDAA:

ShareThis adheres to the European Interactive Digital Advertising Alliance’s (“EDAA”) principles.  The EDAA opt-out platform offers consumers in the European Union a choice page to opt out from advertising services, and general information related to privacy.

For California Users:

California privacy law allows California residents to obtain specific disclosures about a business’s privacy practices if it shares information with other companies for direct marketing purposes. To make a request, please send an email to: privacy@sharethis.com. Pursuant to California privacy law, registered users under 18 years of age may request to have content or information posted by the user removed from any of our online platforms by sending an email request to: contentremoval@sharethis.com. The removal of content does not ensure complete or comprehensive removal of the content posted on any of our line platforms by the registered user. We do not advertise or market any products or services identified in Chapter 22.1 Sec.22580 to users we have actual knowledge are under 18 years of age.

GDPR and EU-US Privacy Shield:

ShareThis, Inc. is committed to protecting data and enabling individual privacy rights in every location we do business. Therefore, we comply with the General Data Protection Regulation and the EU-US Privacy Shield Framework.

Our compliance with the GDPR, which is designed to empower and protect the data privacy rights of EU individuals, is evident with the availability of user consent tools (ShareThis is a registered CMP with the IAB Transparency and Consent Framework) as well as user data access rights outlined throughout this policy and more specifically below.

The GDPR names the following rights:

• The right to be informed
• The right of access
• The right of rectification
• The right of erasure
• The right to restrict processing
• The right to data portability
• The right to object
• The right not to be subject to automated decision-making.

In order to exercise your data subjects’ rights, you can write to us at privacy@sharethis.com.

For example, on the right to erasure, we would delete your personal data so that the data is permanently anonymized and cannot be de-anonymized. However, because we don’t ever collect your name, email address, address, zip code, we might struggle to identify the personal data you are asking us to erase. Still, please note that under the GDPR we would not attempt to collect more data about you for the sole purpose of responding to a request for erasure.

The Privacy Shield is set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries. ShareThis has certified that it adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. If there is any conflict between the policies in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov.

In compliance with the EU-US Privacy Shield Principles, ShareThis commits to resolve complaints about your privacy and our collecting or use of your personal information. European Union individuals with inquiries or complaints regarding this privacy notice should first contact ShareThis directly at privacy@sharethis.com. We will respond to your complaint within 30 days of receipt.

We have further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgement of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.

For residual disputes that cannot be resolved by the methods above, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel. To find out more about the Privacy Shield’s binding arbitration scheme, please see: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.

The Federal Trade Commission has investigation and enforcement authority over our compliance with the Privacy Shield. We acknowledge the right of EU individuals to access their personal data.