Last Updated: September 2026

How to Make a Data Subject Rights Request

You may submit a Data Subject Rights (“DSR”) request in order to exercise your rights under applicable laws. Submitting a request is free, and can be made through:

  • Email; or
  • Data Subject Rights Request Form

Instructions for each method are provided below.

We also offer the ability to opt out of tracking through cookies and/or mobile advertising identifiers by clicking Opt-Out

Please note that this process is not applicable to our publisher partners. Please contact your account manager or pubmaticprivacy[at]pubmatic[dot]com for more information. This process is also not for employee or applicant data subject requests. For more information on those, visit https://pubmatic.com/legal/careers-privacy-policy/.

Opt-Out Preference Signals

PubMatic honors opt-out preference signals, such as the Global Privacy Control (GPC). If you have enabled an opt-out preference signal in your browser, PubMatic will treat it as a valid request to opt out of the sale and sharing of your personal data. No separate request is required.

Response Timing

The timing of our response is governed by the applicable law. In most cases, we will respond within 45 days (United States) or one month (European Economic Area, United Kingdom, and Switzerland) of receiving your request. I We will work to respond as soon as practicable within the legally prescribed timeframe. In some instances, we may request additional time and will communicate this to you via email.

Additional Information

Once your request has been submitted, we may require additional information to fulfill it. The information we request may differ depending on the type of request, the sensitivity of the personal information involved, and applicable privacy laws. All communications will be sent to the email address you provided when submitting your request.

Data Subject Rights Request Form

Please refresh your browser to reset the form.

For Individuals

  • Step 1: Select whether you are raising a DSR request or a general query or complaint to the PubMatic privacy team.
  • Step 2: Select your relationship with PubMatic (the capacity in which PubMatic may hold data about you). Select Consumer/Individual external user or Partner.
  • Step 3: Select whether you are submitting this request on your own behalf (“Self”) or as an authorized agent acting on behalf of another individual. If you are an authorized agent, you will be asked to provide proof of authorization. See ‘For Authorized Agents’ below.
  • Step 4: Enter your email address. We will use this email address to communicate with you about your request, including verifying your identity and delivering our response. We will not use this address for marketing purposes. You will need to verify your email by entering a one-time verification code sent to the address you provide. The verification code is valid for 5 minutes only—if the form is not submitted within 5 minutes, you will need to request a new verification code.
  • Step 5: Select your country of residence. If you are a resident of the United States, also select your state. This helps us determine how to fulfill your request according to the applicable privacy laws that apply to your request.
  • Step 6: Enter one or more valid digital identifiers that we process, or click the ‘Auto Populate Cookie ID button’. Our services operate on a specific set of identifiers, therefore, these identifiers are the only way we can locate data linked to you in our systems. See ‘Help Me Locate My Identifiers’ below for additional instructions.
  • Step 7: Select the type of request you would like to make:
    • Delete / Erase: Delete the personal data PubMatic holds about me.
    • Access / Know: Provide me with a copy of the personal data PubMatic holds about me.
  • Step 8: Review and submit. By submitting, you confirm that the information provided is accurate and complete to the best of your knowledge, that you understand PubMatic may need to verify your identity before processing the request and that if you are submitting on behalf of another individual, you confirm that you are authorized to do so and have verified the identity of the individual on whose behalf you are raising the request.

Upon submission, you will receive a confirmation email with your request ID. Your request ID will be required for any questions or communications regarding your request.

For Authorized Agents

Steps 1 through 6 are the same as for individuals. At each step, the authorized agent should provide information pertaining to the individual on whose behalf the request is being made.

  • Step 7: Upload a Letter of Authorization demonstrating you are authorized to act on behalf of the individual whose data is the subject of this request. Accepted forms of proof include:
    • (a) A signed letter of authorization from the individual (template available below);
    • (b) A valid power of attorney under applicable law; or
    • (c) Documentation showing legal guardianship or parental authority.

    Accepted file formats: PDF, JPG, PNG. Maximum file size: 10 MB. All uploaded documents will be used solely to verify your authority and will be deleted once verification is complete.

    If you do not provide a valid Letter of Authorization, we cannot process the request.

  • Step 8: Select the type of request you would like to make:
    • Delete / Erase: Delete the personal data PubMatic holds about the individual you are representing.
    • Access / Know: Provide me with a copy of the personal data PubMatic holds about the individual you are representing.
  • Step 9: Review and submit. By submitting, you confirm that the information provided is accurate and complete to the best of your knowledge. And if you are submitting on behalf of another individual, you are authorized to do so. and have verified the identity of the individual on whose behalf you are raising the request.

Upon submission, you will receive a confirmation email with the request ID. The request ID will be required for any questions or communications regarding your request.

Email Method

You may also submit a DSR request by emailing pubmaticprivacy[at]pubmatic[dot]com. For your request to be valid, you must provide the same information described in the steps above, including at least one valid digital identifier.

Help Me Locate My Identifiers

You may provide any of the following:

Identifier How to Find It Notes
Cookie ID

PubMatic sets cookies under the domain pubmatic.com.

Auto-populate (easiest): Use the auto-populate button on the form to retrieve your PubMatic cookie ID directly from your browser. Manually: Open browser Developer Tools → find cookies under pubmatic.com → copy the value of the cookie named KADUSERCOOKIE.

Each browser and device has a different cookie. If you use multiple browsers (e.g., Chrome, Firefox) or devices (e.g., laptop, mobile), you’ll need to locate the cookie for each one separately. See the https://pubmatic.com/legal/website-cookie-policy/ and https://pubmatic.com/legal/platform-cookie-policy/ for more information on the cookies we use.
Device ID

PubMatic may process the advertising identifier assigned by your device’s operating system.

iOS: Go to Settings → Privacy → Security → Tracking to find your IDFA / IFA / ID for Advertising. Android: Go to Settings → Privacy → Ads (or Settings → Google → Ads) to find your Advertising ID.

Leave blank if unavailable. See NAI guidance for additional help.
IP Address

Your IP address is automatically assigned by your internet service provider or network operator.

Visit a site like whatismyipaddress.com or ipinfo.io from your usual device/network. Your public IP will be displayed (e.g., 192.168.0.1 for IPv4 or 2001:0db8::1 for IPv6).

Leave blank if unavailable. Most residential internet connections use a dynamic IP (changes periodically) so that the IP from the device and network you were using that relates to your request should be used. IP addresses alone may not be sufficient to locate your data, given dynamic assignment and shared networks (NAT, VPNs, corporate Wi-Fi). We recommend providing at least one additional identifier where possible (e.g., cookie ID or device advertising ID).