> ## Documentation Index
> Fetch the complete documentation index at: https://guide.daro.so/llms.txt
> Use this file to discover all available pages before exploring further.

# Control Privacy

> Guide to configuring the DARO iOS SDK for GDPR, CCPA, and COPPA privacy compliance

## Overview

The DARO SDK provides APIs to forward the privacy consent state your app collects to supported ad demand sources. You are responsible for collecting consent and building its UI; the DARO SDK only forwards the resulting values to ad demands.

<Note>
  Apply privacy settings **before loading ads** so they are reflected in ad requests. Call the `set*` methods on the main thread, before or after SDK initialization; when called after initialization, the updated values are re-propagated to supported ad demand sources.
</Note>

<Note>
  If you set no value, the DARO SDK forwards no signal to ad demands for that regulation. See the **Default behavior** section of each regulation below for how that case is handled.
</Note>

***

## GDPR

GDPR (General Data Protection Regulation) is a consent-based privacy regulation that applies to users in the European Economic Area (EEA) and the UK. Personal data may be processed only after the user has explicitly given consent.

### How the DARO SDK handles it

After you determine the user's consent with a Consent Management Platform (CMP) such as UMP, forward the result to the DARO SDK with the API below. The DARO SDK propagates the received state to supported ad demand sources.

```swift theme={null}
DaroAds.shared.setGdpr(.optIn, consentString: consentString)
```

### Values

| `DaroGdprStatus` | Meaning |
| - | - |
| `.optIn` | The user **consented** to personal data processing and personalized ads. |
| `.optOut` | The user **declined** consent. Pass this state to indicate declined consent. |
| `.notApplicable` | The user is **not subject to GDPR** (for example, outside the EEA). Pass this state to indicate that GDPR does not apply. |
| `.unknown` | The **initial state before the consent prompt has been shown**. Use temporarily until consent is determined. |

### Default behavior

If `setGdpr` is never called, the state stays `.unknown` and no GDPR signal is forwarded to ad demands. If your app has users subject to GDPR, be sure to set it explicitly.

### Notes

Use `.unknown` only as a temporary state. Keeping `.unknown` without showing the consent prompt to users subject to GDPR may constitute a regulatory violation. Update to `.optIn` or `.optOut` as soon as consent is determined.

### consentString

An optional argument (default `""`). If you use a CMP such as UMP, pass the GDPR consent string it generates. If you do not use one, leaving it empty (`""`) is fine. Passing an empty string keeps the previously stored value rather than clearing it (clearing is not supported). This is a separate value from the CCPA `consentString`.

### Examples

```swift theme={null}
DaroAds.shared.setGdpr(.optIn, consentString: consentString)
DaroAds.shared.setGdpr(.optOut)
DaroAds.shared.setGdpr(.notApplicable)
DaroAds.shared.setGdpr(.unknown)
```

***

## CCPA

CCPA (California Consumer Privacy Act) and other US state privacy laws grant users the right to opt out of the sale of their personal information. It is allowed by default unless the user explicitly opts out.

### How the DARO SDK handles it

After you determine whether the user has opted out, forward the result to the DARO SDK with the API below. The DARO SDK propagates the received state to supported ad demand sources.

```swift theme={null}
DaroAds.shared.setCcpa(.optOut, consentString: consentString)
```

### Values

| `DaroCcpaStatus` | Meaning |
| - | - |
| `.optIn` | The user **did not opt out.** Sale/sharing of personal information is allowed. |
| `.optOut` | The user **opted out** of the sale of personal information. |
| `.notApplicable` | The user is **not subject to CCPA**. |

### Default behavior

If `setCcpa` is not called, the DARO SDK forwards no CCPA signal. Omitting the value does not establish user consent or permission. If your app has users subject to CCPA, be sure to set it explicitly.

### consentString

An optional argument (default `""`). If you use UMP, pass the US Privacy String it produces. If you do not use UMP, leaving it empty (`""`) is fine. Passing an empty string keeps the previously stored value rather than clearing it (clearing is not supported). This is a separate value from the GDPR `consentString`.

### Notes

CCPA's `.optIn` / `.optOut` differ in meaning from GDPR. Under CCPA, `.optIn` means "the user did not opt out," and `.optOut` means "the user opted out of the sale of personal information." CCPA is opt-out based, so there is no value equivalent to `.unknown`. Pass the state determined by your app explicitly.

### Examples

```swift theme={null}
DaroAds.shared.setCcpa(.optIn)
DaroAds.shared.setCcpa(.optOut)
DaroAds.shared.setCcpa(.notApplicable)
```

***

## COPPA

COPPA (Children's Online Privacy Protection Act) is a US regulation that protects children under 13. Unlike GDPR and CCPA, it is not a user consent flow but the publisher's declaration of whether the app is directed at children.

### How the DARO SDK handles it

After you determine whether your app is directed at children, forward it to the DARO SDK with the API below. Support varies by ad demand source; do not assume this call applies the same treatment to every ad. Before migrating a child-directed app, contact [cs@daro.so](mailto:cs@daro.so) to confirm the support scope.

```swift theme={null}
DaroAds.shared.setCoppa(.child)
```

### Values

| `DaroCoppaStatus` | Meaning |
| - | - |
| `.child` | The app is **directed at children**. Personalized ads are not allowed. |
| `.notChild` | The app is **not directed at children**. |

### Default behavior

If `setCoppa` is not called, the child-directed status is not forwarded to ad demands. If your app is directed at children, be sure to set it explicitly.

### Notes

COPPA declares whether the app as a whole is directed at children. Per-user settings are not supported. Even if only some users are children, make the determination on an app-wide basis.

### Examples

```swift theme={null}
DaroAds.shared.setCoppa(.child)
DaroAds.shared.setCoppa(.notChild)
```

***

## Migrating from the previous API

`hasUserConsent`, `doNotSell`, and `isTaggedForChildDirectedTreatment` are deprecated. Set consent status and strings with the `set*` APIs below. When migrating a consent string, pass the status already determined by your app; do not change consent status merely because a string exists.

| Previous setting | Replacement API |
| - | - |
| `DaroAds.shared.hasUserConsent = true` | `DaroAds.shared.setGdpr(.optIn)` |
| `DaroAds.shared.hasUserConsent = false` | `DaroAds.shared.setGdpr(.optOut)` |
| `DaroAds.shared.gdprConsentString = "..."` | `DaroAds.shared.setGdpr(currentGdprStatus, consentString: "...")` |
| `DaroAds.shared.doNotSell = false` | `DaroAds.shared.setCcpa(.optIn)` |
| `DaroAds.shared.doNotSell = true` | `DaroAds.shared.setCcpa(.optOut)` |
| `DaroAds.shared.ccpaString = "..."` | `DaroAds.shared.setCcpa(currentCcpaStatus, consentString: "...")` |
| `DaroAds.shared.isTaggedForChildDirectedTreatment = true` | `DaroAds.shared.setCoppa(.child)` |
| `DaroAds.shared.isTaggedForChildDirectedTreatment = false` | `DaroAds.shared.setCoppa(.notChild)` |

<Note>
  `currentGdprStatus` and `currentCcpaStatus` represent the states determined by your app. Leaving the setting unset differs from explicitly setting `.notChild`. Pass the value appropriate for your app.
</Note>