Quantcast Choice 101
Why would we need a Consent Management Platform (CMP)?
I have a TCF v1.1 compliant CMP, why do I need to implement a TCF v2.0 compliant CMP?
When is the deadline to switch from TCF V1 to TCF V2?
Does Quantcast Choice support CCPA (California Consumer Privacy Act) compliance?
Can I continue to work with Quantcast even if I don’t use Quantcast Choice?
Why are you making Quantcast Choice free?
Are there additional costs for using Quantcast Choice?
Third Party Compatibility
Does Quantcast Choice allow consent for Google?
Does Quantcast Choice work with Google AMP?
Is Quantcast Choice compatible with Google Tag Manager (GTM) and other Tag Managers?
What is GVL (global vendor list) and what does it mean to me?
Can I add my partners who are not registered or on the IAB TCF into Quantcast Choice?
Consumer Consent Capabilities
How do I confirm if a vendor or publisher has set consent?
Why are my users being asked for consent at every page?
What behaviors will cause user consent reprompt?
Privacy Questions
Is there an in-app version of Quantcast Choice?
Can I incorporate my privacy policy / cookie policy into Quantcast Choice?
Why do I need to provide my email address when submitting a request for Quantcast Choice?
Can I use Quantcast Choice on websites that use HTTP and HTTPS?
Do I need to execute Standard Contractual Clauses with Quantcast?
Quantcast Choice 101
What is Quantcast Choice?
Quantcast Choice is a consent management provider (CMP) to help publishers and marketers manage compliance within the IAB Europe’s Transparency and Consent Framework (TCF) and GDPR. It allows consumers to manage their consent preferences on a website.
Choice captures, stores, and transmits the consumer’s consent choice so that companies processing data on the website can respect the user’s wishes.
Quantcast Choice is built on top of IAB TCF v2.0. Read more here.
Why would we need a Consent Management Platform (CMP)?
Since GDPR took effect on May 25, 2018, traditional cookie banners may not provide the unambiguous, granular consent that GDPR requires. Further, existing cookie banners generally do not propagate any consent signal to the downstream technology vendors.
If your banner does not use an industry standard method of telling downstream vendors whether they have consent, then those vendors may not be able to act to support advertising campaigns. A consent audit trail is central to the requirements of GDPR.
I have a TCF v1.1 compliant CMP, why do I need to implement a TCF v2.0 compliant CMP?
TCF v2.0 is not backwards compatible with TCF v1.1. You need to transition to TCF v2.0 before Aug 15, 2020. Otherwise, you are not compliant with the latest industry standards and it can hurt your ads revenue.
When is the deadline to switch from TCF V1 to TCF V2?
IAB Europe is extending technical support for V1 of the Transparency and Consent Framework (TCF) until August 15th, 2020 to give publishers more time to adjust to the updated version in light of COVID-19. This doesn’t impact a company’s ability to implement the new version, which is available via Choice today.
Does Quantcast Choice support CCPA (California Consumer Privacy Act) compliance?
Yes. Quantcast Choice supports CCPA based on the IAB CCPA Compliance Framework. Read more about how to set up CCPA support within Choice here.
Can I continue to work with Quantcast even if I don’t use Quantcast Choice?
Yes. Quantcast can work with any partner who has implemented any consent management solution integrated with the IAB Europe TCF.
We strongly encourage customers to use a consent solution compliant with the IAB Europe TCF because of its industry-standard approach to collecting and transmitting consent signals. However, it is possible for some custom consent solutions (outside the IAB Europe TCF) to also meet our requirements.
Why are you making Quantcast Choice free?
Quantcast has been a long-time advocate for improving data protection and privacy, as well as one of the driving forces behind the original TCF v1.0 developed by IAB Europe.
We are offering Quantcast Choice on TCF v2.0 for free for all to support the digital advertising community’s continued transition to privacy-first data capture and usage.
Are there additional costs for using Quantcast Choice?
Quantcast Choice is free for all current and new customers that use one or more of Quantcast’s other products, e.g. Quantcast Measure or Quantcast Advertise.
If you need customized terms or dedicated support, please contact our sales team to discuss.
Third Party Compatibility
Does Quantcast Choice allow consent for Google?
Yes. Google announced that they would be joining the IAB TCF v2.0 which Quantcast Choice supports by default. You can gather, transmit and log consent for Google the same way as other IAB TCF vendors.
Until Google joins TCF v2.0, you can add Google and any other non-IAB vendors for disclosure within the CMP through the non-IAB vendor features within the Vendors tab in the Central Portal.
Please see Google’s EU consent policy. We recommend to include Google’s privacy policy link in the non-IAB vendor Privacy Policy link section.
Does Quantcast Choice work with Google AMP?
Quantcast Choice provides AMP support by collecting user consent through the <amp-consent> tag on fully powered AMP sites. We provide sample code and detailed documentation about how to build a consent solution within Choice using the AMP framework. There are some limitations for the solution which are detailed in the Quantcast Choice - AMP Implementation Guide. Quantcast will make frequent updates to the AMP solution to adopt new functionality from the AMP platform.
Is Quantcast Choice compatible with Google Tag Manager (GTM) and other Tag Managers?
Quantcast Choice is compatible and deployable with all tag managers. You can add the custom code in the Custom HTML section in Google Tag Manager.
Quantcast Choice is compatible and deployable with all tag managers. You can add the tag directly in our source code and push data to the tag manager.
Reach out to support@quantcast.com if you experience issues during implementation or have any questions.
What is GVL (global vendor list) and what does it mean to me?
Global vendor list is a list of vendors who registered with IAB and are participating in the TCF.
The list updates on a weekly basis. In order to avoid too many user consent reprompts (everytime when a new vendor is added), we set default as 30 days in the product portal which means from day 1 to day 30, users will only see the vendor list version updated on day 1. On Day 31, users will see the latest vendor list updated on day 30.
Here is IAB Vendor List TCF v2.0. Read more about IAB’s definition of GVL here.
Can I add my partners who are not registered or on the IAB TCF into Quantcast Choice?
Yes. Quantcast Choice allows you to disclose vendors that aren’t registered on the IAB TCF. We also recommend that you reach out to the vendor directly to ask them to register to the TCF, so that Quantcast Choice can collect, store, and share consent with them as per the IAB technical specifications.
Consumer Consent Capabilities
If a consumer grants consent via Quantcast Choice, how can a user open the Quantcast Choice modal again to make changes to their consent choices?
Quantcast Choice gives the consumer options for consent at the global, purpose, or vendor level. Therefore, if the consumer wishes to revoke or change their consent, they must re-visit the website and recall the CMP to update their consent setting.
After the modal has closed, Quantcast Choice displays a persistent consent link called “Privacy” that appears on the bottom right corner of the webpage. This allows the user to go back and make changes to their consent choices - a capability required by GDPR.
If you disable the persistent consent link during configuration, then you will need to add another access point within the web page for a user to access the Quantcast Choice modal again in order to update their consent. We recommend adding the following code next to the link or within your privacy policy: “window.__tcfapi('displayConsentUi', 2, function() {} );”.
How do I confirm if a vendor or publisher has set consent?
Please read Determining and Executing Consent and Choice CMP2 & CCPA API Index.
How can I link a user who gave me their consent via Quantcast Choice with the same user asking via email which companies they gave consent to in the past?
Quantcast Choice is a privacy tool for collecting user consent related to their cookies and passing that data to downstream ad partners. Email addresses are not associated with any cookies. Therefore, this is not a service Quantcast Choice can provide.
Does Quantcast provide the possibility for internet users to request access to their consent logs? Is there an ID on a cookie in the users’ browsers that can be used to tie the user with the logs in the consent file?
Quantcast Choice does not currently connect the consent cookie that is saved on behalf of a user to an ID. Today we do not offer an out-of-the-box solution in Quantcast Choice to service a DSAR (Data Subject Access Request). However, here is a set of steps you can follow to provide this on your sites:
- Ensure a Right to Data request page/form is available to users on the site.
- Identify if a consent cookie is present for the user to make the request (via manual steps to get the user to provide their cookie value in a form, or using a webcrawler technology to surface this automatically)
Quantcast’s data request form shows this kind of page can be found on our website for users to opt out. Once the user has verified their consent cookie information, they can either choose:
- Right to Deletion: Consent cookie is deleted either by giving user instructions on how to do this or by automatically deleting the cookie through functionality on the page
- Right to Data: Consent cookie information can be mapped back to a log (provided in the audit log download feature in the Quantcast Choice Central Portal) and returned to the user.
Why are my users being asked for consent at every page?
If the users on your site are reporting being repeatedly asked for consent, this can be due to the user having a browser plugin (such as Ublock or Ghostery) that blocks cookies. If these plugins are active on their browser, they are preventing the consent cookie from being saved, which makes Quantcast Choice have to ask for consent again. The solution would be to edit the settings or deactivate the browser plugin so that their consent preferences can remain saved in the consent cookie that is set.
What behaviors will cause user consent reprompt?
When publishers change the specific purposes, or manually update the vendor list (either IAB registered or non-IAB vendors), the user will be reprompted for consent.
Privacy Questions
How can you support publishers making customizations to the consent widget, without jeopardizing GDPR compliance?
Quantcast Choice offers flexibility in customizations that can improve the user experience, such as aesthetics in the UX (font, color), and some variations of language to ensure the widget remains on brand with websites.
Quantcast Choice is fixed in certain respects (e.g., legal terms, purpose language, requirement for unambiguous user action, etc.) pursuant to the IAB Europe TCF policies.
As the IAB Europe TCF continues to add more vendors, how will this affect users that originally gave their consent to vendors added previously and moving forward?
This process is customizable and will vary by publisher. If a vendor list has been updated, some publishers will choose to prompt users immediately the next time they visit the site or app. (Users just have to consent to the newly added vendors, but have the ability to review all preferences.)
Other publishers may choose to wait a number of days so that users do not get hit with too many popups. In the latter instance, the vendors who have not been consented to yet will not be able to collect user data until they get consent.
Is there an in-app version of Quantcast Choice?
Our in-app capability is coming soon!
Can I incorporate my privacy policy / cookie policy into Quantcast Choice?
Yes. You can link your privacy policy page into Quantcast Choice by adding a configuration option in your code called “Custom Links Display on Initial Screen”. This allows you to add a URL and a title into the first screen of Quantcast Choice so consumers are able to see your privacy policy within the CMP. You can add up to 2 custom links using this configuration option. More information can be found in our Help Center > Set up section.
Why do I need to provide my email address when submitting a request for Quantcast Choice?
We need your email to identify your identity and set up your account. Your email is the only directly identifiable information we need. We’d also like to share feature updates with you via email. You can choose not to get these updates if you prefer.
I noticed that the consent popup is shown on every page load when using “http” instead of “https”. Is that normal?
We set our cookies with the attribute 'secure' based on Chrome, Firefox and Safari requirements. Our cookies can only be accessed from secure (https) sites. Please read Chromium page for more information.
Can I use Quantcast Choice on websites that use HTTP and HTTPS?
Quantcast Choice for TCF 2.0 only supports web properties that use HTTPS. This is necessary to support browser changes (like Chromium Project’s SameSite Update) that will restrict third-party cookies to secure / HTTPS connections only.
Do I need to execute Standard Contractual Clauses with Quantcast?
For Quantcast Choice, Quantcast is neither a controller nor a processor because Quantcast does not process personal data on your behalf; since you do not export personal data to Quantcast for processing, no SCC’s are required. Further, as your joint controller for the collection of personal data by Quantcast Measure tags*, Quantcast International Limited (QC International) collects personal data via its tags in the European Economic Area and makes an export to Quantcast Corporation in the United States (QC US). Therefore, QC International is the data exporter and QC US is the data importer for this export and have executed SCCs in those roles. In short, by leveraging Quantcast tags in Europe you do not export personal data outside of Europe; rather, any such export is made as an intra-company arrangement between QC International and QC US, and you do not need to execute separate SCCs with Quantcast.
* For avoidance of doubt, you and Quantcast are joint controllers only for the collection of personal data by Quantcast tags; you and Quantcast are each separate and independent controllers of any personal data actually received from the Quantcast tags and do not jointly determine the purposes and means of processing of that personal data once received by Quantcast.
------------------------------
Contact support@quantcast.com with any questions or feedback.