Privacy policy

Last updated: 2026-10-28

What we collect

• Account data: name, email, optional company and phone, password (stored only as a hash), payout IBAN and account holder for publishers.
• Ad delivery data: when an ad is shown or clicked we process a pseudonymised IP hash (a keyed hash — we do not store the IP address itself), the country derived by our CDN, the device class (desktop/mobile/tablet) from the user agent, and the website that displayed the ad. We use it to deliver and count ads, enforce frequency limits, prevent fraud and bill correctly.
• Marketplace data: listings and messages you write.

Cookies

We set only functional cookies on our own pages: a session cookie when you are signed in, and your language and theme choice. The ad frames embedded on publisher sites set no cookies and run no scripts. We do not use advertising or cross-site tracking cookies and do not build visitor profiles.

How long we keep it

Click records: 120 days. Frequency counters: about 3 days. Account and financial records: for as long as the account exists and as long as accounting law requires after that. Listings and messages: until you delete them or the account.

Who processes it

Our hosting provider and Cloudflare (CDN and security proxy) process traffic on our behalf. We send email through an email provider. We do not sell personal data.

Your rights

You can access, correct or delete your data, and object to processing, by writing to us. Accounts with financial history cannot be fully erased because we must keep accounting records, but we remove what we are not required to keep.

Security

Passwords are hashed, traffic is encrypted, uploaded images are re-encoded, ad frames are sandboxed and contain no scripts, and admin actions on money are logged.