prebid-server
prebid-server copied to clipboard
Do geolookups with unmasked address
We got clearance from Prebid legal to do geo-lookups on unmasked IP addresses (ipv4, ipv6) as long as we don’t share the results of the lookup besides these 3 highly aggregated attributes: country, region, and utcoffset.
The flow would be:
- Determine whether geo-lookup is necessary. (See flowchart in https://docs.google.com/document/d/1g0zAYc_EfqyilKD8N2qQ47uz0hdahY-t8vfb-vxZL5w/edit#heading=h.8zebax5ncz0t)
- Do the geo-lookup on unmasked IP address.
- Determine whether IP masking is necessary. (i.e. the
transmitPreciseGeoactivity, COPPA, LMT, GDPR special purpose 1, etc.) If we need to mask, then:- follow the defined masking rules for ipv4 and ipv6
- round device.geo.lat/lon following the defined rules
- remove the following device.geo fields: city and zip. (Other fields like accuracy, ipservice, etc are ok)
I believe this is only relevant for PBS-Java since PBS-Go doesn't do geo-lookups.
Note that this is separate from but related to the Extend geolookup feature
Done with PBS-Java 2.13