Skip to main content

Liftoff GDPR Opt-Out API

This API is provided so Liftoff’s exchange partners and customers can submit GDPR-compliant opt-out requests to remove user data.


HTTP Request

POST https://analytics.liftoff.io/#path#

Your URI and credentials will be provided from Liftoff on request.

Credentials should be passed via HTTP Basic Authentication.


JSON Parameters

The request body JSON should contain the required JSON keys and value types listed below.

JSON KeyValue TypeRequiredNote
tsintNoTimestamp.
device-ids[]stringYesA list of device IDs to be opted-out. Provide proper casing: lowercase for GAID and uppercase for IDFA.
device-id-typestringNoIf not present, the device ID type will be inferred from the casing or specified app store platform (e.g., "idfa", "gaid").
testboolYesUsed to specify whether or not the request is a test.
device-id-sha1SHA1 stringNoIf not present, this will be derived from the provided device-ids.
app-store-ids[]stringNoIf present, data will only be opted-out for the selected app(s).

Example Request

curl --request POST \
--header "Content-Type: application/json" \
--user user:secret \
--data '{"ts":1628721059, "device-ids":["79C2332A-D699-4EE8-B5AE-DF5C3C6E9A3E"],"device-id-type":"idfa","test":true}' \
https://analytics.liftoff.io/opt_out/v3/liftoff

Result

HTTP Status Codes

200: Accepted for Processing

Once an opt-out request has been received, Liftoff will remove the data from our systems and promptly notify our partners of the request.

202: Accepted but not Processed

If an opt-out request contains all zero device IDs, the request will not continue to be processed.

400: Request Failed

Reasons for failed request:

  • Request body is missing.
  • Request body JSON is not formatted as specified under JSON parameters.
  • Device_ids are not present in the request body.
  • Device ID within Device_ids is not valid.

401: Unauthorized

Reasons for failed authorization:

  • Username and password cannot be parsed from the request header.
  • Credentials are not valid for the specified HTTP request.