The EU’s General Data Protection Regulation (GDPR) and similar privacy laws worldwide (CCPA, LGPD, etc.) grant data subjects comprehensive rights when it comes to the processing of their personal data. These rights include, among others, the right to erasure (see Art. 17 GDPR)(1). As a data processor, Adjust is obliged to support you (the data controller) in the processing of such requests from your (app) users.
You can send the user’s erasure request to Adjust using the gdpr_forget_device endpoint. Once Adjust has been notified:
- Adjust will permanently delete all the user’s historical personal data from internal system and database.
- Adjust will no longer receive data from this user/device via the Adjust SDK.(2)
Configure your server to send requests to this API endpoint when users send erasure requests. See the Right to erasure article for more information about erasure requests.
POST https://gdpr.adjust.com/gdpr_forget_deviceSend an erasure request
Send a POST request including your app token and device ID to remove all data associated with the device.
| Parameter | Data type | In | Description |
|---|---|---|---|
app_token* | String | Query | The Adjust app token from the dashboard |
s2s* | Boolean | Query | Whether the call is a Server-to-Server (S2S) call. Value must be 1 (true) |
device_token* | String | Query | ID of the device you want Adjust to forget. See the table below for a list of accepted values |
Device identifiers
You must include a device identifier in your request. Below is a list of accepted identifiers.
| Parameter | Description | Example |
|---|---|---|
idfa | iOS ID for advertisers | 8C6CBCOD-5F43-4765-A6E6-84DFF3D24707 |
idfv | iOS ID for vendors | CCB300A0-DE1B-4D48-BC7E-599E453B8DD4 |
gps_adid | Google Play Store advertising ID | 38400000-8cf0-11bd-b23e-10b96e40000d |
fire_adid | Fire OS advertising ID | 63c5519b-7e66-7ee6-aa5d-3b290743811f |
win_adid | Windows advertising ID | 107e8ea14329d4a2194ebbb6dc0c0fd7 |
adid | Adjust device ID | 18546f6171f67e29d1cb983322ad1329 |
Example
$ curl -X POST "https://gdpr.adjust.com/gdpr_forget_device?s2s=1&app_token=kwrqhymtnsr2&idfa=9C5CBC1D-4F42-4764-A5E6-84DAF3D24707"Responses
| Status code | Meaning | Description |
|---|---|---|
200 | OK | Request was received and processed |
400 | Bad request | Invalid formatting or token. Check you have included the necessary parameters. Contact your account manager or support@adjust.com if you need help. |
429 | Too many requests | The endpoint is rate limited to 10 requests per minute and stops responding to requests beyond this threshold to prevent abuse. Try resending the request later. |
451 | Unavailable for legal reasons |