Privacy guide

What is Xandr? The ad exchange behind the ads you see.

Xandr explained simply: how ad exchanges auction your attention on Indian websites, what data may be shared, and what users can do about it.

The simple answer

Xandr is part of the advertising plumbing: an ad exchange and platform that helps buy and sell ad space. When a page loads, an automated auction can decide which ad you see in milliseconds.

These auctions can involve signals about you or your device so advertisers can bid. Most users never see this layer, which is exactly why it is worth understanding.

What to check

1
Understand that ads are often auctioned in real time.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Look for ad-exchange or programmatic language in policies.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Check what device and behaviour signals ads may use.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Use blockers to reduce programmatic tracking.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

There is an auction behind the ad.

State of Privacy looks at the advertising layer because real-time ad auctions can pass signals about you to many parties at once, usually without a clear notice.

What to do next

1
Limit ad personalisation in your accounts and browser.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Block third-party cookies and trackers.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Ask companies which ad platforms and exchanges they use.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

What is an ad exchange?

It is a marketplace that auctions ad space in real time, deciding which ad you see as a page loads.

Does Xandr know who I am?

Ad-tech platforms typically work with device and behaviour signals or IDs rather than your name, but this still affects privacy.

Can I avoid programmatic ads?

You can reduce them with blockers, cookie controls and ad personalisation settings, though not always completely.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience