Prebid Server and the Apple Privacy Manifest NSPrivacyTrackingDomains

[bretg]

Background info

• https://github.com/prebid/prebid-mobile-ios/issues/954
• https://developer.apple.com/documentation/bundleresources/privacy_manifest_files
• https://www.freecodecamp.org/news/what-the-ios-privacy-manifest-means-for-developers/

I believe PBS should offer the ability to recognize a second domain name. If called by that name, it should disallow these activities:

• syncUser
• enrichUfpd
• transmitUfpd
• transmitEids
• transmitPreciseGeo

One simple implementation could be to recognize the "non-tracking" hostname and inject the lmt parameter if it's not already present. Then enhance the current behavior of LMT to tie it to the noted activities.

Prebid legal counsel is ok with this proposal.

Assumption:

• We think Apple will be blocking only FQDNs (pbs.example.com) and not TLDs (example.com). If that's not true, then a whole separate domain (pbs.example2.com) would be needed by host companies.