Draft pending legal review. The description of what we collect matches how the service works. The legal basis, retention periods and controller details in brackets are to be completed by counsel before launch.
Who is responsible
The controller of your personal data is [legal entity name and address]. You can contact us about privacy at [privacy contact].
What we collect
When you create an account
- Your name, email address and project name.
- A one-way hash of your password. We never store the password itself and cannot read it.
When you place an order
- The placements ordered, their prices, and the order’s status.
- Payment records from our processor: the invoice, the payment status, the amount and coin paid, and the deposit address the processor issued. We do not receive or store card details, and we never hold your private keys.
- The campaign content you supply for the placement.
How you found us
- On your first visit we note the kind of source that brought you (search engine, AI assistant, social network, another website, a campaign link or direct), the referring site’s domain, any campaign tags in the link, and the page you landed on. It is stored in a cookie on your device and copied to your account if you sign up. We do not record the full address of the page you came from.
Security records
- Sign-ins, failed sign-ins, password and two-factor changes, with the time and IP address. We keep these to detect and stop attempts to break into accounts.
If you apply to list your site
- The site, its traffic and prices, and the contact details you give us, to review the application.
What we do not collect
We run no third-party analytics, no advertising pixels and no third-party tracking scripts. We do not build profiles of visitors or sell data to anyone.
Why we use it
- To create and secure your account and keep you signed in.
- To take, fulfil and support your orders, and to deal with refunds.
- To arrange your placement with the publisher.
- To understand which channels bring customers, in aggregate, so we know where to spend effort.
- To protect accounts against break-in attempts.
- To meet legal and accounting obligations.
Legal basis
[Legal basis for each purpose — for example, performance of a contract for orders, legal obligation for accounting records — to be confirmed by counsel]
How long we keep it
[Retention periods for account data, order records and payment records]
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how it is used. To exercise any of these, contact us using the details above. [Supervisory authority and complaint route]