Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains what data Hideads collects, why, and how you can control it. It applies to the Hideads dashboard and marketing site.

1. Data we collect

• Account data — your email address and authentication credentials (passwords are stored hashed, never in plain text).
• Sign-up data — when you create an account we record the context of the sign-up request: IP address, approximate location derived from it (country, region, city), network / ASN, browser user agent and device type, and how you arrived (referring site, landing page, campaign (UTM) tags, and whether an ad click identifier was present — never its value). We use it for fraud and abuse prevention, customer support, and attribution of our own marketing. It is visible to us and to the operator or agency that manages your account — including in sign-up notices sent through their notification channels such as Telegram — and never to other customers.
• Campaign configuration — trackers, destination URLs, safe-page and routing settings you create.
• Traffic metadata — for each click routed through Hideads we process technical signals (IP address, ASN, device / OS / browser, country, referrer, request headers) to make traffic-quality decisions. These are operational signals, not marketing profiles.
• Billing data — handled by our payment processor, Cryptomus (cryptocurrency). We store subscription status and invoices; we never receive card numbers.

2. How we use it

To operate the service: route traffic, generate safe pages, produce reporting, deliver conversion feedback to ad platforms you configure, bill your subscription, send service and security notifications, and prevent abuse.

3. Sharing

We do not sell your data. We share it only with infrastructure and processing providers needed to run the service (for example Cloudflare for hosting and DNS, Cryptomus for payments), and with ad platforms only where you explicitly configure conversion feedback. Partners operating white-label workspaces access only the data scoped to their own customers, including the sign-up data described above.

4. Retention

• Raw click records: approximately 14 days for bot-verdict traffic and 60 days for human-verdict traffic.
• Aggregated statistics are retained longer to power historical reporting.
• Sign-up data: the full IP address and browser user agent are kept for 90 days, after which the IP address is shortened to its network prefix (/24 for IPv4, /48 for IPv6) and the user agent is deleted. The remaining sign-up context is kept while your account exists and is deleted with it. The 90-day schedule applies to the copy stored in our systems; sign-up notices already delivered to the operator's notification channels (for example Telegram) are kept by those channels and are not reached by it.
• Account and billing records are retained while your account is active and as required for legal and accounting purposes.

5. Your choices

You can export your data (clicks CSV, tracker settings JSON, audit log) at any time. To close your account or request deletion of account data beyond standard retention, contact us.

6. Cookies

The dashboard uses strictly necessary cookies for authentication and session management. The marketing and sign-up pages set first-party attribution cookies for 90 days: hd_ft (how you first arrived — landing page, referring site, campaign tags) and, when you follow a referral link, hd_ref (the referral code). The marketing site may load analytics or advertising pixels the operator configures.

7. Security

We use encryption in transit, hashed credentials, encrypted storage for sensitive integration secrets, and role-based access boundaries between owner, partner, and customer scopes.

8. Contact

Privacy questions or data requests, including deletion of sign-up data: hello@hideads.app.