Retrieving and Deleting Consent Data History for A User

Sourcepoint provides an API to retrieve a user's current consent information using a GET call to a URL with the following format.

https://sourcepoint.mgr.consensu.org/consent/v2/history/siteID?consentUUID=${actualConsentUUID}

In the above URL, the siteID would get replaced by the siteId for which you want to delete the user’s data. This can be retrieved from the Sourcepoint UI by going to the site from which you want to delete the data (see screenshot). In the screenshot below the highlighted integer of 2198 is the site ID for www.example.com.

The user's consentUUID can be retrieved from the first-party cookie. Executing the URL You can test the URL using an API tool such as Postman and perform a cookie-less API GET using the URL

For example, using Postman if you send a GET for the url below without sending cookies it will retrieve user information for the user with the UUID of 61aa48a8-bd32-463c-bb5c-d3f53419dbd1 related to site ID of 123.

https://sourcepoint.mgr.consensu.org/consent/v2/history/123?consentUUID=61aa48a8-bd32-463c-bb5c-d3f53419dbd1

You can also perform GET request programmatically the same URL to retrieve the user's data.

Understanding The Response The API GET will respond with a list of category and vendor names, IDs and vendor type (IAB or custom) to which the user consented to along with the date/timestamp of when they consented.

[{
"categories": [{
"iabPurposeRefs": [],
"name": "Strictly Necessary Cookies"
}, {
"iabPurposeRefs": [{
"iabId": 4,
"name": "Content selection, delivery, reporting"
}, {
"iabId": 5,
"name": "Measurement"
}],
"name": "Performance Cookies"
}, {
"iabPurposeRefs": [{
"iabId": 2,
"name": "Personalisation"
}],
"name": "Personalisation Cookies"
}, {
"iabPurposeRefs": [{
"iabId": 3,
"name": "Ad selection, delivery, reporting"
}, {
"iabId": 1,
"name": "Information storage and access"
}],
"name": "Advertising Cookies"
}],
"vendors": [{
"name": "Spotible",
"vendorType": "CUSTOM"
}, {
"name": "Chartbeat",
"vendorType": "CUSTOM"
}, {
"name": "Crazy Egg",
"vendorType": "CUSTOM"
}, {
"iabId": 32,
"name": "AppNexus Inc.",
"vendorType": "IAB"
}],
"dateCreated": "2019-03-28T13:27:08.627Z"
}]

Sourcepoint provides an API to delete a user's consent record from it's data storage to satisfy the user's right to be forgotten.

The format of the URL is

https://sourcepoint.mgr.consensu.org/consent/v2/:siteId/consentUUID?=${actualConsentUUID}

In the URL, the :siteID would get replaced by the siteId for which you want to delete the user’s data. This can be retrieved from the Sourcepoint UI by going to the site from which you want to delete the data (see screenshot). In the screenshot below the highlighted integer of 2198 is the site ID for www.example.com.

The ${actualConsentUUID} would get replaced by the user's consentUUID which can be retrieved from the user's first-party cookie value for consentUUID.

Executing the URL You can test the URL using an API tool such as Postman and perform a cookie-less API DELETE using the URL

For example, using Postman if you send a delete for the url below without sending cookies it will delete user information for the user with the UUID of 61aa48a8-bd32-463c-bb5c-d3f53419dbd1 related to site ID of 123.

https://sourcepoint.mgr.consensu.org/consent/v2/123/?consentUUID=61aa48a8-bd32-463c-bb5c-d3f53419dbd1

You can also perform DELETE request programmatically the same URL to delete the user.