Private State Token API
The Private State Token API is a technology that allows Google to verify that a user has not given consent for the use of their personal data for ad personalization. This API is used by Google to serve Limited Ads.
![Private State Token API](/content/images/size/w1200/2023/12/Tokens.png)
The Private State Token API is a technology that allows Google to verify that a user has not given consent for the use of their personal data for ad personalization. This API is used by Google to serve Limited Ads, a serving mode that disables the collection, sharing, and use of personal data for ad personalization.
The Private State Token API works by using a cryptographic key that is shared between Google and the publisher. When a user visits a publisher's website or app, the browser sends a request to Google to verify that the user has not given consent for the use of their personal data for ad personalization. Google verifies this by checking the Private State Tokens in the browser against the Private State Tokens that is stored on its servers. If the Private State Token is valid, Google will serve an ad that is not personalized to the user's interests or browsing history.
The Private State Token API is a privacy-preserving way for Google to serve Limited Ads, as it does not require Google to collect or store any personal data about the user. This is important for complying with GDPR requirements, which prohibit the collection and use of personal data without explicit consent from the user.
Benefits of using the Private State Token API
- Privacy protection: The Private State Token API does not require Google to collect or store any personal data about the user, which helps to protect user privacy.
- GDPR compliance: The Private State Token API is a secure and privacy-preserving way for Google to serve Limited Ads, which helps publishers comply with GDPR requirements.
- Reduced risk of data breaches: The Private State Token API helps to reduce the risk of data breaches by not collecting or storing sensitive user data.
- Improved ad targeting: The Private State Token API can be used to improve the targeting of ads that are served through Limited Ads, as it allows Google to take into account other factors about the user, such as their location and interests, which are not considered personal data under the GDPR.