Privacy Policy

Discover-Tech Ltd.

Last Updated: October 9, 2026

1. Introduction

Discover-Tech Ltd. ("Discover-Tech", "we", "us" or "our") is committed to protecting personal data and respecting individuals' privacy rights.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data in connection with our websites, business services, programmatic advertising activities and related technologies.

Discover-Tech participates in the IAB Europe Transparency & Consent Framework (TCF) as Vendor ID 778. Our processing activities are subject to applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.

2. Our Business and Advertising Activities

Discover-Tech operates a Demand-Side Platform (DSP) that purchases digital advertising inventory through supply-side platforms (SSPs), advertising exchanges and other programmatic advertising partners.

In our DSP operations, we receive advertising bid requests and applicable TCF signals through server-side OpenRTB integrations. We do not require a Discover-Tech remarketing pixel or other Discover-Tech client-side JavaScript to be installed on publisher properties to receive these bid requests.

Separately, Discover-Tech maintains a client-side remarketing pixel that may be installed on partner websites. This technology is technically and operationally separate from our DSP/OpenRTB operations.

The remarketing pixel may support consent-based advertising identifier storage, identifier synchronisation and remarketing activities. It is not currently deployed in active client remarketing campaigns.

3. Categories of Personal Data

Depending on the relevant service, interaction and applicable permissions, we may process:

IP addresses and network-related information.
Advertising identifiers and other device identifiers.
Device, operating system and browser characteristics.
Advertising bid-request information and technical transaction metadata.
Website interactions and advertising-related events.
Advertising campaign delivery and performance information.
Advertising audience or remarketing information, where applicable.
TCF consent signals, privacy choices and related technical information.
Business contact information, such as names, business email addresses, company names and correspondence.
Information voluntarily submitted through our website or business communications.

We do not rely on the TCF to process special categories of personal data or information relating to criminal convictions.

4. Purposes of Processing and Legal Bases

Where applicable, Discover-Tech relies on consent for the following TCF Purposes:

Purpose 1 – Store and/or Access Information on a Device

Where the required consent is available, our separate remarketing pixel may store or access advertising identifiers and support permitted identifier synchronisation.

Purpose 2 – Use Limited Data to Select Advertising

Our DSP may use the context of an advertising request and other permitted limited information to select basic or non-personalised advertisements.

Purpose 3 – Create Profiles for Personalised Advertising

Where the required consent is obtained, our separate remarketing implementation may support the creation or updating of remarketing audiences based on interactions with partner websites and advertising identifiers.

We do not use personal data received through OpenRTB bid requests to create these remarketing profiles.

Purpose 4 – Use Profiles to Select Personalised Advertising

Where the required consent is obtained, remarketing audiences associated with advertising identifiers may be used to support personalised advertising through supported advertising platforms.

Our client-side remarketing implementation is not currently used in active client remarketing campaigns.

Purpose 7 – Measure Advertising Performance

We may process advertising performance information, including impressions, clicks, click-through rates, viewability, campaign delivery information and related reporting, subject to the applicable consent requirements.

In addition, we rely on legitimate interests for the following TCF Special Purposes:

Special Purpose 1 – Ensure Security, Prevent and Detect Fraud, and Fix Errors

We process necessary technical information to identify invalid traffic, detect bots and fraudulent activity, protect systems and troubleshoot technical errors.

Special Purpose 2 – Deliver and Present Advertising and Content

We process necessary technical information to support the delivery and presentation of advertisements and to identify and resolve advertising delivery problems.

We do not rely on these Special Purposes as a substitute for consent where consent is required for device access, advertising profiling or personalised advertising.

Further information about our legitimate interests is available at:

https://www.discover-tech.io/legitimate

5. IAB TCF Consent Signals

In our DSP/RTB operations, we receive applicable TCF signals, including TC Strings, through the programmatic advertising supply chain using OpenRTB integrations with SSPs and exchanges.

We evaluate the applicable TCF signals and legal bases for the relevant processing purposes.

Where the required legal basis cannot be established for an incoming bid request, the request is dropped from the relevant processing flow without retaining or buffering personal data pending validation.

For our separate client-side remarketing pixel, current TCF information is obtained directly from the publisher's Consent Management Platform (CMP) through the IAB TCF API (__tcfapi).

Before consent-dependent identifier storage, device access or identifier synchronisation, the pixel checks the applicable permissions, including Purpose 1 consent and consent for Discover-Tech as Vendor ID 778.

If the required consent is missing, withdrawn or cannot be verified, the relevant consent-dependent processing does not proceed.

The pixel does not generate, modify or extend TC Strings and does not rely on previously stored consent strings as a substitute for the current CMP consent state.

6. Cookies, Identifiers and Similar Technologies

Where permitted by applicable law and user consent, our advertising technologies may use cookies, advertising identifiers and similar storage or access mechanisms.

Such technologies may support permitted remarketing activities, advertising identifier synchronisation and other disclosed advertising functions.

Our declared maximum advertising cookie duration is 31,536,000 seconds (365 days). Cookies may be refreshed where the applicable consent and legal requirements permit.

Users can manage or withdraw relevant consent through the CMP or privacy controls provided by the applicable publisher website or application.

7. Retention of Personal Data

We retain personal data only for periods appropriate to the relevant processing purpose and applicable legal requirements.

Our declared TCF retention periods are:

Purpose 2 – up to 93 days.
Purpose 3 – up to 365 days.
Purpose 4 – up to 365 days.
Purpose 7 – up to 93 days.
Special Purpose 1 – up to 93 days.
Special Purpose 2 – up to 93 days.

Different periods may apply where required by law or where data must be retained for legitimate legal or contractual obligations.

8. Sharing of Personal Data

Depending on the relevant service and applicable legal basis, personal data may be shared with or processed through:

SSPs, advertising exchanges and other programmatic advertising partners.
Advertising technology and identifier synchronisation partners, including Xandr where applicable.
Cloud infrastructure and technical service providers, including Amazon Web Services (AWS).
Professional advisers, regulatory authorities or other recipients where required by applicable law.

Where personal data is transmitted to another TCF Vendor, the applicable TCF permissions are evaluated for the relevant processing.

We do not transmit personal data for consent-dependent processing where the required legal basis is absent.

9. International Data Transfers

Discover-Tech stores and processes certain advertising-related personal data, including IP addresses and advertising identifiers, on its own AWS infrastructure located in the United States.

Where personal data is transferred from the European Economic Area to countries outside the EEA, we apply appropriate safeguards as required by applicable law, including applicable Standard Contractual Clauses (SCCs).

Individuals may contact us for further information about applicable international transfer safeguards.

10. Data Security

We maintain technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.

Our security-related processing may include fraud detection, invalid traffic analysis, system monitoring, troubleshooting and error correction.

11. Your Privacy Rights and Choices

Depending on applicable law, individuals may have the right to:

Request access to personal data.
Request correction of inaccurate personal data.
Request deletion of personal data.
Request restriction of processing.
Object to processing based on legitimate interests.
Request data portability where applicable.
Withdraw consent at any time where processing relies on consent.
Lodge a complaint with a competent data protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where consent is managed through a publisher's CMP, users may withdraw or change their choices using the publisher's privacy controls.

Any separate opt-out request mechanism offered by Discover-Tech does not replace the right to withdraw consent through the applicable CMP.

To exercise applicable rights, please contact us using the details below. We may request information reasonably necessary to verify and process a request.

12. Automated Decision-Making

Discover-Tech does not use the TCF to conduct solely automated decision-making that produces legal or similarly significant effects on individuals within the meaning of GDPR Article 22.

Advertising audience segmentation and remarketing do not involve such decisions.

13. Children's Privacy

Our services are intended for business and advertising-related activities and are not directed at children.

We do not knowingly use the TCF to process children's personal data in circumstances where the required legal basis or applicable safeguards are absent.