Yahoo DSP

Overview

Yahoo DSP (Demand-Side Platform) is Yahoo Inc.'s programmatic advertising infrastructure, operating under the Yahoo Advertising brand. It encompasses the former Verizon Media advertising stack (which previously included Oath, BrightRoll, and One by AOL). Publishers and advertisers use Yahoo DSP scripts to serve targeted advertisements and build audience segments. Retargeting pixels from Yahoo DSP appear on advertiser websites to track post-click and post-view conversion behavior.

What This Script Does

Yahoo DSP's client-side components operate across two contexts: publisher ad delivery and advertiser conversion tracking.

Pixel tags: The Yahoo DSP universal pixel (loaded from s.yimg.com or pixel.advertising.com) fires on advertiser pages to record visitor actions. It writes third-party cookies for audience membership and reads existing cookies to suppress duplicate conversions.

Audience segmentation: Behavioral data collected via the pixel — page category, product viewed, cart value, conversion events — is transmitted to Yahoo's data management infrastructure. This data feeds lookalike modeling and retargeting segments.

Ad serving scripts: On publisher properties, Yahoo DSP scripts load ad creatives and perform real-time bid requests. These scripts communicate with ads.yahoo.com and related DSP infrastructure, and read/write audience identifier cookies.

Cookie identifiers: Yahoo uses its own cookie-based user IDs alongside industy-standard IDs. Third-party cookie deprecation has pushed Yahoo DSP toward first-party data partnerships and identity solutions.

IAB TCF: Yahoo DSP participates in the IAB Transparency and Consent Framework. Under TCF, it registers for purposes including Purpose 1 (store/access device information), Purpose 3 (create personalized ad profiles), Purpose 4 (select personalized ads), and Purpose 7 (measure ad performance).

Consent & Compliance

GDPR and ePrivacy Directive: Yahoo DSP processes personal data for targeted advertising, audience profiling, and cross-site behavioral tracking. This requires explicit opt-in consent under GDPR Article 6(1)(a) and the ePrivacy Directive. There is no legitimate interest basis for advertising cookies. Yahoo Inc. participates in the EU-US Data Privacy Framework, providing a transfer mechanism for EU personal data processed in the US.

CCPA/CPRA: Sharing visitor behavioral data with Yahoo DSP for advertising targeting constitutes "sharing" of personal information for cross-context behavioral advertising under CPRA. This triggers the right to opt out. Publishers using Yahoo DSP must provide a "Do Not Sell or Share My Personal Information" mechanism and honor opt-out signals including Global Privacy Control.

The consent category is marketing. All Yahoo DSP functionality — retargeting, audience building, ad targeting — is marketing-purpose processing.

Should You Block This Without Consent?

Yes.

Yahoo DSP scripts perform cross-site behavioral tracking and audience profiling for commercial advertising purposes. This is among the most privacy-invasive categories of third-party scripts. No legitimate interest basis applies. The pixel must be completely blocked until marketing consent is explicitly granted, and opt-out signals (GPC) must be honored even after consent is given.