Last Updated: May 16, 2026
This U.S. State Privacy Notice supplements, and should be read together with, our Privacy Policy. It applies to residents of U.S. states with comprehensive consumer privacy laws that apply to our processing of personal information, including, as applicable, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and any other U.S. state whose privacy law applies to our processing of personal information.
This notice uses “personal information” to refer to personal information, personal data, and similar terms under applicable U.S. state privacy laws.
Some state privacy laws apply only if certain thresholds or other conditions are met. Nothing in this U.S. State Privacy Notice is intended to admit or concede that any particular law applies to any specific Digimarc entity, processing activity, product, or service where it would not otherwise apply.
This U.S. State Privacy Notice describes our current and recent practices, including the categories of personal information we collect, use, disclose, sell, share, or process for targeted advertising during the period required by applicable law, where applicable. We do not sell personal information for money. However, as described below, certain disclosures of personal information through cookies, pixels, tags, and similar technologies may constitute sale, sharing, targeted advertising, or similar processing under applicable U.S. state privacy laws.
This U.S. State Privacy Notice applies where a Digimarc entity acts as a business, controller, or equivalent role under applicable U.S. state privacy law. It does not apply where we process personal information on behalf of a business customer as a service provider, processor, or equivalent role, except to the extent we independently collect or use personal information for our own purposes.
Personal information we collect, use, and disclose
The following chart describes the categories of personal information we may collect, examples of information in each category, sources, purposes of processing, categories of recipients, retention criteria, and whether the category may be sold, shared, or used for targeted advertising as those terms are defined under applicable state privacy laws.
| Category | Examples | Sources | Purposes | Recipients | Retention criteria | Sales, sharing, or target advertising |
| Identifiers | Name, email address, phone number, account identifiers, IP address, device identifiers, advertising identifiers, unique identifiers | You; devices; browsers; mobile apps; business customers; service providers; partners; data providers | Provide and operate the Services; support; communications; analytics; marketing; advertising; product improvement; compliance; legal purposes | Affiliates; service providers; advertising and analytics partners; partners; professional advisors; authorities; business transferees | Retained as reasonably necessary for the purposes described in our Privacy Policy, subject to legal, contractual, operational, and compliance needs | May be shared or processed for targeted advertising where disclosed to advertising, analytics, measurement, social media, video, lead-generation, or marketing partners through cookies, pixels, tags, or similar technologies Applicable residents may opt out as described below |
| Personal information described in Cal. Civ. Code § 1798.80 | Contact information, business contact information, and similar records | You; business customers; partners; data providers | Provide Services; manage relationships; marketing; support; compliance; legal purposes | Affiliates; service providers; partners; professional advisors; authorities; business transferees | Retained as reasonably necessary for the relevant relationship, transaction, support, compliance, and recordkeeping purposes | Not sold or shared under California law; may be processed for marketing or similar purposes where permitted by applicable law |
| Protected classification characteristics | Age range, country, state, region, or other information if provided or inferred and protected by law | You; devices; service providers; partners | Compliance; localization; analytics; legal purposes | Affiliates; service providers; professional advisors; authorities | Retained as reasonably necessary for compliance, localization, analytics, and legal purposes | Not sold, shared, or processed for targeted advertising, unless otherwise disclosed at or before the time of collection or unless the information is included in another category of personal information that is processed for those purposes as described above |
| Commercial information | Records of Services used, app interactions, verification events, product interactions, engagement with physical or digital content | You; devices; mobile apps; Services; business customers; partners | Provide Services; mobile app functionality; verification; analytics; anti-counterfeit monitoring; product improvement; business operations | Affiliates; service providers; business customers in aggregated, anonymized, or de-identified form; partners; professional advisors; business transferees | Retained as reasonably necessary for service delivery, analytics, product improvement, anti-counterfeit monitoring, business operations, and legal purposes | May be shared or processed for targeted advertising where records of Services used, product interactions, website activity, engagement with physical or digital content, lead activity, or similar information are disclosed to advertising, analytics, measurement, lead-generation, or marketing partners Applicable residents may opt out as described below |
| Internet or other electronic network activity information | Browsing activity, app activity, device data, online activity, interaction data, cookies, telemetry, diagnostics, logs | Devices; browsers; apps; cookies; service providers; advertising and analytics partners | Provide Services; analytics; advertising; retargeting; product improvement; support; compliance | Affiliates; service providers; advertising and analytics partners; partners; professional advisors; authorities; business transferees | Retained as reasonably necessary for analytics, troubleshooting, product improvement, advertising, compliance, and legal purposes | May be shared or processed for targeted advertising where browsing activity, app activity, device data, online activity, interaction data, cookies, telemetry, diagnostics, logs, or similar information are disclosed to advertising, analytics, measurement, social media, video, lead-generation, or marketing partners Applicable residents may opt out as described below |
| Geolocation data | Approximate location from IP address; precise geolocation from mobile apps with permission | Devices; browsers; mobile apps; operating-system permission prompts | Provide location-enabled features; verification; analytics; anti-counterfeit monitoring; product improvement | Affiliates; service providers; partners; business customers in aggregated, anonymized, or de-identified form; professional advisors; authorities | Retained as reasonably necessary for the location-enabled feature, analytics, anti-counterfeit monitoring, product improvement, compliance, and legal purposes | Not sold, shared, or processed for targeted advertising, unless otherwise disclosed at or before the time of collection or unless the information is included in another category of personal information that is processed for those purposes as described above |
| Audio, electronic, visual, or similar information | Images, files, messages, prompts, support communications, user-submitted content | You; Services; mobile apps; support channels; AI-enabled features | Provide Services; support; AI-enabled features; analytics; product improvement; compliance | Affiliates; service providers; AI providers; professional advisors; authorities; business transferees | Retained as reasonably necessary for service delivery, support, AI-enabled feature operation, product improvement, compliance, and legal purposes | Not sold, shared, or processed for targeted advertising, unless otherwise disclosed at or before the time of collection or unless the information is included in another category of personal information that is processed for those purposes as described above |
| Professional or employment-related information | Employer, company name, job title, business contact information | You; business customers; partners; data providers | Manage business relationships; provide Services; marketing; support; compliance | Affiliates; service providers; partners; professional advisors; authorities; business transferees | Retained as reasonably necessary for the business relationship, marketing, support, compliance, and recordkeeping purposes | May be processed for business-to-business marketing, lead identification, lead qualification, account-based marketing, or similar purposes To the extent such processing constitutes sale, sharing, targeted advertising, or similar processing under applicable law, applicable residents may opt out as described below |
| Inferences | Preferences, interests, or insights derived from use of the Services, marketing interactions, app activity, or verification activity | Services; cookies; analytics; advertising partners; data providers | Analytics; marketing; advertising; product improvement; business operations | Affiliates; service providers; advertising and analytics partners; partners; business transferees | Retained as reasonably necessary for analytics, marketing, advertising, product improvement, and business operations | May be shared or processed for targeted advertising where preferences, interests, lead scores, audience segments, account insights, advertising segments, or similar inferences are disclosed to or generated by advertising, analytics, measurement, lead-generation, or marketing partners Applicable residents may opt out as described below |
| Sensitive personal information or sensitive data | Precise geolocation where collected through mobile applications with permission | Mobile apps; device permissions | Provide location-enabled features; verification; analytics; anti-counterfeit monitoring | Affiliates; service providers; partners; business customers in aggregated, anonymized, or de-identified form; professional advisors; authorities | Retained as reasonably necessary for the feature or purpose for which it was collected, subject to legal, contractual, operational, and compliance needs | Not sold, shared, or processed for targeted advertising, unless otherwise disclosed at or before the time of collection or unless the information is included in another category of personal information that is processed for those purposes as described above |
Sensitive personal information and sensitive data
Depending on the Service, context, and applicable law, sensitive personal information or sensitive data may include precise geolocation, account login credentials, contents of certain communications, information contained in uploaded files or images, or other information treated as sensitive under applicable law. We do not intentionally request sensitive personal information unless it is reasonably necessary for the relevant Service, feature, transaction, support request, legal purpose, or other disclosed purpose.
We do not knowingly process biometric identifiers or biometric templates for the purpose of uniquely identifying an individual unless we provide a separate disclosure and obtain any consent required by applicable law.
For residents of states that require consent before processing sensitive data, we obtain consent or process the data as otherwise permitted by law. For residents of states that provide a right to opt out of sensitive-data processing, we provide the notice and opt-out opportunity required by applicable law.
Sale, sharing, targeted advertising, and profiling
We do not sell personal information for money. However, we use cookies, pixels, tags, and similar technologies provided by advertising, analytics, measurement, social media, video, lead-generation, and marketing partners. These technologies may disclose identifiers, device information, internet or other electronic network activity information, commercial information, professional or business contact information, or inferences to those partners.
Depending on the context and applicable law, these disclosures may constitute “sharing” for cross-context behavioral advertising, “sale,” targeted advertising, or similar processing. Applicable residents may opt out using the Cookie Settings tool linked in the footer of this website or the other methods described in this Notice and our Cookie Policy.
We do not process personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer, unless otherwise disclosed at or before the time of collection.
Consumer privacy rights
Depending on your state of residence and subject to applicable conditions and exceptions, you may have some or all of the following rights:
- Right to know or confirm processing. You may request confirmation of whether we process your personal information.
- Right to access. You may request access to personal information we process about you.
- Right to portability. You may request a copy of certain personal information in a portable and, to the extent technically feasible, readily usable format.
- Right to correction. You may request that we correct inaccuracies in personal information we maintain about you.
- Right to deletion. You may request that we delete personal information we collected from or about you, subject to applicable exceptions.
- Right to opt out of targeted advertising. You may request to opt out of processing for targeted advertising where applicable.
- Right to opt out of sale. You may request to opt out of the sale of personal information where applicable.
- Right to opt out of profiling. You may request to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects where applicable.
- Right to limit use or disclosure of sensitive personal information. California residents may have this right in certain circumstances. As stated above, we do not use or disclose sensitive personal information for purposes that require us to provide this right.
- Right to withdraw consent. Where our processing is based on consent and applicable law provides a right to withdraw consent, you may withdraw consent for future processing.
- Right to non-discrimination. You have the right not to be discriminated against for exercising privacy rights.
Certain rights may not apply in all states or in all circumstances. For example, some state laws do not provide every right listed above or may limit rights where information is processed in a commercial, employment, business-customer, or other exempt context.
How to exercise your rights
To exercise your privacy rights, you may contact us at privacy [at] digimarc [dot] com.
To opt out of targeted advertising, sale, sharing, or similar processing, you may use the Cookie Settings tool linked in the footer of this website, enable Global Privacy Control or another legally required opt-out preference signal where required by applicable law, or use the other methods described in our Cookie Policy.
We will respond to your request as required by applicable law. We may ask you to provide information reasonably necessary to verify your identity and process your request. We may decline or limit requests where permitted by law, including where information must be retained for legal, security, billing, audit, contractual, dispute-resolution, compliance, or legitimate business purposes.
If your request concerns personal information that we process on behalf of a business customer, we may direct you to that business customer.
Authorized agents
Where applicable law permits you to use an authorized agent to submit a privacy request, we may require proof of the agent’s authority and may also require you to verify your identity directly with us.
Appeals
Residents of certain states may appeal our decision regarding a privacy request. If we deny your request, you may appeal by contacting us at privacy [at] digimarc [dot] com and stating that you are appealing our decision. We will respond to your appeal within the time required by applicable law.
If we deny your appeal and applicable law requires that we provide a method for contacting the relevant state Attorney General or other regulator, our appeal response will include information about how to submit that complaint.
Opt-out preference signals
Where required by applicable law, we treat Global Privacy Control and other legally required opt-out preference signals as requests to opt out of sale, sharing, targeted advertising, or similar processing.
Opt-out preference signals may apply to the browser or device from which they are submitted and may not apply to information collected offline or in contexts where we cannot reasonably associate the signal with you. You may need to enable the signal separately for each browser or device you use.
Where required by applicable law and where we can reasonably associate the signal with your account or identity, we will treat the signal as applying to that account or identity. Otherwise, the signal will apply to the browser, device, or profile from which it is submitted.
California-specific disclosures
This subsection applies only to California residents and supplements the disclosures above.
Notice at collection
The chart above identifies the categories of personal information, including sensitive personal information, that we may collect; the purposes for which we collect and use each category; the categories of recipients to whom we disclose each category; whether each category is sold, shared, or processed for targeted advertising as described above; and the criteria used to determine retention periods.
We do not collect additional categories of personal information or use personal information for materially different, unrelated, or incompatible purposes without providing notice as required by California law.
California rights
California residents may have the following rights under the California Consumer Privacy Act (CCPA):
- the right to know what personal information we have collected, including categories of personal information, categories of sources, purposes of collection, categories of third parties to whom we disclose personal information, and specific pieces of personal information;
- the right to delete personal information, subject to exceptions;
- the right to correct inaccurate personal information;
- the right to opt out of sale or sharing, if applicable;
- the right to limit use or disclosure of sensitive personal information, if applicable; and
- the right not to receive discriminatory treatment for exercising CCPA rights.
Because we use certain cookies, pixels, tags, and similar technologies for advertising, retargeting, measurement, lead-generation, and marketing purposes, certain disclosures of personal information may constitute “sharing” under California law. California residents may opt out of this sharing as described above.
The disclosures in the chart above describe the categories of personal information we have collected, the categories of sources from which we have collected personal information, the purposes for which we have used personal information, and the categories of recipients to whom we have disclosed personal information during the preceding 12 months, to the extent applicable.
We do not collect additional categories of personal information or use collected personal information for materially different, unrelated, or incompatible purposes without providing notice as required by California law. Where required, we will obtain consent before processing personal information for a materially different, unrelated, or incompatible purpose.
California Shine the Light
California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at privacy [at] digimarc [dot] com.
