It contains data about which ads you saw or clicked on as a histogram. GDPR defines personal data as follows: > The basic definition of personal data is any in

It contains data about which ads you saw or clicked on as a histogram. GDPR defines personal data as follows: > The basic definition of personal data is any information relating to an identified or identifiable natural person (data subject). This data is then aggregated using their DAP service. This means to a third party. They say it's somehow encrypted and will be fully anonymized, but I can't fully understand the implementation. There are several security considerations mentioned in the draft: https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/ https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/. Doesn't matter that much, they have to ask for consent and inform the user in clear and understandable language anyway. Opt-out is a big no-no.