Company: IBTA
Filing Date: 2025-08-13
Form Type: 10-Q
Source: 0001538379-25-000010
Chunk: 225

Company: Ibotta, Inc.
Filing Date: 2025-08-13
Form: 10-Q
Item: Item 8
Chunk 225
---
 contractual obligations, and result in a loss of 

76

publishers, CPG brands, retailers, and consumers, any of which could materially adversely affect our business, financial condition, results of operations, and prospects.

We allow our clients and publishers to use application programming interfaces (APIs) with our platform, which could result in outages or security breaches and materially adversely impact our business, financial condition, results of operations, and prospects.

The use of APIs by our clients and publishers has significantly increased in recent years. Our APIs allow our clients and publishers to integrate their own business system with our platform. The increased use of APIs increases security and operational risks to our systems, including the risk for intrusion attacks, data theft, or denial of service attacks. Furthermore, while APIs allow greater ease and power in accessing our platform, they also increase the risk of overusing our systems, potentially causing outages. While we have taken measures intended to decrease security and outage risks associated with the use of APIs, we cannot guarantee that such measures will be successful. Our failure to prevent outages or security breaches or incidents resulting from API use could result in governmental enforcement actions and other proceedings against us, claims, demands, and litigation against us by consumers and other affected individuals, costs associated with investigation and remediation, damage to our reputation, and loss of goodwill, any of which could materially adversely affect our business, financial condition, results of operations, and prospects.

If the use of mobile device identifiers, third-party cookies, or other tracking technology or location information is rejected by consumers, restricted by third parties outside of our control, or otherwise subject to unfavorable regulation, our performance could decline and we could lose clients, consumers, and revenue.

We and our partners use a number of technologies to collect information used to deliver our solutions. For instance, we and our partners use mobile device identifiers such as Apple IDFA and Google AdID to identify, target, and measure relevant promotions to consumers. These promotions and advertising that we show on mobile apps could be affected by mobile operating systems blocking or restricting use of mobile device identifiers. Our promotions and advertisements could also be negatively impacted by mobile operating systems implementing more restrictive privacy settings and choices. For example, following its implementation of an app transparency framework and required consumer privacy and data processing disclosures, Apple introduced new SDK privacy controls into iOS 17, released in September 2023, including protections designed to limit tracking or identification of user devices. In February 2022, Google announced its Privacy Sandbox initiative for Android, a multi-year effort