Identity Resolution &
Data Privacy
Empowering brands to identify consumers across channels and enhance engagement — responsibly. This guide covers compliance scenarios, ethical practices, and the major privacy regulations you should know.
Best Practices with Website Pixels
Scenarios of compliance — pick one of the two.
Notification
Does the website clearly notify visitors about data collection through an explicit consent message — such as a pop-up banner detailing the nature of data being collected? This approach is the optimal means to safeguard user privacy while mitigating any potential legal concerns.
Additionally, are you working with relevant privacy teams to ensure compliance?
Privacy Policy
Your website's privacy policy should outline:
- How you use anonymous site visitor data (i.e., those who do not log in)
- The intended use of the collected data
- The user's option to opt out of data collection
Sample privacy-policy language
Drop this into your privacy policy under a heading like "Third-Party Identity Resolution" (replace the contact placeholder with your own). Have your legal team review before publishing.
Anonymous Visitor Identity Resolution When you visit this site, we may use third-party identity resolution technology to recognize anonymous traffic and associate visits with verified consumer identities. The technology collects only non-PII metadata (cookie IDs, device characteristics, IP address, and encoded query string values). No plain-text personal information (such as your name, email, or phone number) is collected by this technology. The collected metadata is matched against a continuously updated reference database to produce a hashed identifier, which is then resolved to a verified individual in a privacy-preserving identity graph. We use this information to personalize your experience, measure attribution, and improve our marketing. This processing is grounded in our legitimate interest in operating and improving our business. If you would prefer to opt out of this processing, you can do so by contacting us at [your-email@example.com], or by visiting your browser's privacy controls.
Ensuring Secure & Ethical Practices
Key points to convey when discussing data pixel resolution with your stakeholders.
Benefits to Users
The data collected through pixels can be used to personalize content and filter out irrelevant information, enhancing the customer's experience.
Privacy Law Compliance
Audience Acuity is dedicated to consistently complying with all state and national privacy laws including CCPA, GDPR, TCPA, etc.
Anonymizing Personal Information
To further protect privacy, personal information is converted into a non-human-readable, de-identified form ("hash") before it is shared — minimizing the risk of personal data being compromised.
Data Security Measures
Security measures are in place to safeguard the data collected via pixels against unauthorized access and potential breaches.
Comprehensive Data Privacy Policy
For a complete view of our data practices, see audienceacuity.com/privacy-policy.
Glossary — Data Privacy & Communication Practices
Major regulations and self-regulatory bodies that shape how data is collected, stored, and shared.
CCPA — California Consumer Privacy Act
Enacted 2018, effective 2020. Provides California residents control over personal information, including rights to know what businesses collect, delete personal information, opt out of the sale of personal information, and non-discrimination for exercising CCPA rights. As of 2025, 13 states have active privacy laws (CA, VA, CO, CT, UT, IA, IN, TN, TX, FL, MT, OR, DE).
GDPR — General Data Protection Regulation
EU law on data protection and privacy in the European Union and European Economic Area. Effective May 2018. Gives individuals control over personal data, unifies regulation across the EU, includes provisions for consent, breach notifications, data protection officers, and cross-border transfer rules.
TCPA — Telephone Consumer Protection Act
Enacted 1991. Restricts telemarketing via voice calls, SMS, and fax. Requires consent before making certain types of calls (especially with automated dialing systems, pre-recorded messages, or SMS). Established the National Do Not Call Registry.
DMA / DAA / NAI
Industry self-regulatory bodies governing data-driven marketing and online behavioral advertising. They set guidelines for ethical practices, manage programs like AdChoices, and provide standards for member companies.