Cluep
Cluep is a Canadian mobile advertising platform that uses natural language processing and computer vision to target audiences in social and content apps based on the meaning of the content they consume. The platform integrates with mobile ad exchanges, fires tracking pixels, may set cookies on mobile web inventory and reads device advertising identifiers (IDFA, AAID), which qualifies it as a tracking technology under the ePrivacy Directive and as a personal data processor under the GDPR.
What does Cluep do?
What Cluep is
Cluep is a Canadian mobile advertising platform headquartered in Toronto and now part of Cineverse. It uses natural language processing and computer vision to target audiences in social and content apps based on what they read, watch and post, rather than relying solely on persistent identifiers. The platform operates as a Demand Side Platform connected to mobile ad exchanges and supply side platforms.
Data and cookies collected
On in app inventory, Cluep reads the IDFA on iOS and the AAID on Android, plus the IP address, the user agent, the bundle ID, contextual data about the page or post being viewed, click coordinates and engagement signals. On mobile web inventory, Cluep may set a third party cookie holding a pseudonymous identifier and perform cookie syncing with partner SSPs. These data points feed the contextual targeting model and the audience segments.
GDPR and ePrivacy implications
Cluep writes and reads identifiers on the user device, which falls within Article 5(3) of the ePrivacy Directive. Prior, free, specific, informed and unambiguous consent is required before any pixel or SDK call. The IAB TCF v2.2 signal must be passed in OpenRTB requests. On iOS, the App Tracking Transparency prompt is also required before reading the IDFA. While the contextual targeting reduces the need for cross site identifiers, processing the content of public posts can still qualify as personal data processing.
International data transfers
Cluep processes data primarily on Canadian and US infrastructure. Canada benefits from a partial adequacy decision under PIPEDA for the commercial sector, but transfers to the US part of the operation rely on the EU US Data Privacy Framework when applicable, otherwise on Standard Contractual Clauses combined with a Transfer Impact Assessment. Operators must inform users in the privacy notice and document the safeguards.
Consent management and practical steps
Block all Cluep tags and SDK calls until consent is granted, integrate a CMP certified for IAB TCF v2.2, route the TC string in every OpenRTB request, request App Tracking Transparency on iOS, sign a DPA and SCCs with Cluep or its parent Cineverse, register Cluep in your record of processing activities and your privacy notice, and define a retention period and a process for forwarding data subject requests.
Privacy friendly alternatives
EU based contextual mobile DSPs that keep bid stream data inside the EEA, SKAdNetwork on iOS and aggregated reports from the Google Privacy Sandbox on Android are alternatives that reduce the reliance on persistent identifiers and on third country transfers.
Cluep and the GDPR
Cluep is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Article 6(1)(a) GDPR (consent) and Article 5(3) ePrivacy Directive for cookie storage and reading
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive 2002/58/EC, IAB TCF v2.2, Apple ATT framework, Google Privacy Sandbox on Android, German TTDSG, French Data Protection Act, Spanish LSSI
Impact assessment (DPIA)
A DPIA is required because Cluep processes mobile advertising identifiers and IP addresses at scale, profiles users based on the content they consume, integrates with the open RTB ecosystem and transfers data to Canada and the United States. The DPIA must cover the legal basis, the bid stream flows, the role of Cluep as processor or joint controller, the SCC and DPF mechanisms and the safeguards against US government access requests.
Sample text for your banner
We use Cluep to deliver and measure mobile advertising campaigns. Cluep stores cookies and reads device advertising identifiers, shares pseudonymous identifiers with advertising partners and transfers personal data to Canada and the United States. You can accept, refuse or withdraw your consent at any time in our privacy preferences.
What Cluep sets and contacts
- Tracking method
- Mobile DSP using device advertising identifiers, IP address and AI based natural language audience targeting in social and content apps
- Server location
- Canada and United States
- Data transferred outside the EU
- Cluep is a Toronto based advertising technology company (acquired by Cineverse) that processes data primarily in Canada and the United States. Canada has a partial adequacy decision under PIPEDA but transfers to the US side of the platform require Standard Contractual Clauses combined with a Transfer Impact Assessment, supplemented by the EU US Data Privacy Framework when applicable.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| IDFA | mobile_identifier | persistent | iOS Identifier for Advertisers used to build mobile audiences and measure ad delivery |
| GAID | mobile_identifier | persistent | Google Advertising ID on Android, read for cross app targeting and frequency capping |
| cluep_uid | http_cookie | 1 year | Cluep proprietary user identifier used in web placements for cross session profiling |
| cluep_session | http_cookie | session | Session level identifier used to deduplicate impressions and reconstruct user journeys |
Third-party domains contacted (4)
cluep.comtag.cluep.comsdk.cluep.comads.acuityplatform.com
Frequently asked questions about Cluep
Can't find your question? Write to us, we answer fast.
Which identifiers does Cluep set or read on my users devices?
Cluep does not place classic browser cookies but reads the mobile advertising identifier (IDFA on iOS, Google Advertising ID on Android), the IP address, approximate or precise location and device level metadata such as model, OS version and language. These identifiers are persistent across sessions and are considered personal data under the GDPR.
Is consent required before activating Cluep on a website or app?
Yes. Reading the mobile advertising identifier and any other terminal stored value falls under Article 5(3) of the ePrivacy Directive, so prior, freely given, specific and informed consent is required. The consent must be collected before the Cluep SDK or pixel makes any network call.
What is the legal basis for processing data through Cluep?
Article 6(1)(a) GDPR, consent, is the only realistic legal basis given the profiling and cross context targeting nature of the service. Legitimate interest is not appropriate because of the impact on data subjects and the EDPB guidance on tracking for advertising.
Are user data transferred to the United States?
Cluep is owned by AcuityAds (Illumin), headquartered in Canada with infrastructure in both Canada and the United States. Canada benefits from a partial GDPR adequacy decision, but US transfers require a valid mechanism such as the EU US Data Privacy Framework, standard contractual clauses and a transfer impact assessment.
Do I need to run a DPIA before using Cluep?
Yes. The systematic evaluation of personal aspects through profiling, the use of mobile identifiers and the scale of mobile RTB processing trigger Article 35 GDPR. A DPIA documenting purposes, retention, transfer mechanisms and risks is mandatory.
How do I implement Cluep in a compliant way?
Block the Cluep SDK or tag until the user consents to advertising and personalisation. Pass a valid IAB TCF v2.2 TC string. Honour the user choice immediately if they later withdraw consent. Document partners and purposes in your privacy policy and your record of processing activities.
Are there alternatives to Cluep with lower compliance risk?
Contextual advertising platforms that do not rely on device identifiers, such as Seedtag, GumGum contextual or first party CRM driven targeting, lower the risk because they do not require consent based identifier processing. They typically have lower scale but reduce DPIA and transfer concerns.
How should I update my cookie or privacy policy for Cluep?
List Cluep and its parent company AcuityAds in your vendor table, mention the categories of data processed (mobile identifiers, IP, location, behavioural events), the purposes (audience targeting, profiling, measurement), the retention period and the third country transfer mechanism. Provide a direct opt out link.
Ai-LOG
AI LOG is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. AI LOG integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, AI LOG makes advanced AI accessible to all teams.
Getintent
Getintent is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Getintent provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Getintent helps deliver the right message to the right audience at the right time.
eBay Partner Network
eBay Partner Network is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. eBay Partner Network supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, eBay Partner Network ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
BuySellAds
BuySellAds is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. BuySellAds enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, BuySellAds empowers marketing teams to achieve measurable growth.
Media.net
Media.net is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Media.net enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Media.net empowers marketing teams to achieve measurable growth.
Clicktripz
Clicktripz is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Clicktripz enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Clicktripz empowers marketing teams to achieve measurable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.