Privacy Policy

1. Who this policy is for

We handle data for three groups of people, and we treat each differently:

• Account holders — advertisers, publishers, and administrators who register and sign in to manage campaigns, sites, and payouts.
• Site visitors (readers) — people who view a page on a publisher’s website that contains a Fanvaiy Ads slot. We collect very little about you, as described in Section 4.
• Visitors to our own marketing pages — people who browse this website.

2. Information we collect from account holders

Account information

• Your name and email address.
• A password, which we store only as a salted hash (bcrypt) — we never store or can read your plain-text password.
• For advertisers: an optional company name and your country.
• For publishers: your country (publisher sign-ups are currently limited to the Maldives) and your applicable revenue-share rate.

Business and content information

• Advertisers: campaign settings (budgets, bids, pricing model, schedule, targeting) and creative assets you upload, including ad images or HTML and your landing-page URLs.
• Publishers: the websites you register (name and domain) and their approval status.

Financial information

• Advertiser account balances and a transaction ledger (deposits, spend, refunds, adjustments).
• Publisher daily earnings, balances, and payout requests.
• Bank payout details you provide to receive payments — account holder name, bank name, and account number. We store these to process your withdrawals and, with each payout request, retain a snapshot for our records.

Technical and session information

• When you are signed in to the management dashboard, our session records may include your IP address and browser user-agent, used to keep you logged in and to protect your account.
• We use a session cookie (and, if you choose “remember me,” a persistent login token) strictly to operate the dashboard.

3. How we use account-holder information

• To create and operate your account and provide the service.
• To run campaigns, serve ads, calculate spend, and compute publisher earnings and payouts.
• To review and moderate sites, campaigns, and creatives before they serve, and to detect and prevent fraud or abuse.
• To verify ad events using signed tokens, so that budgets cannot be drained and earnings cannot be faked.
• To communicate with you about your account, transactions, and important service notices.
• To comply with legal, tax, and accounting obligations.

4. Information collected when ads are served

This is the part of the service that touches the most people, so we keep it minimal by design.

• Anonymous frequency-capping ID. When an ad slot loads on a publisher site, a random, anonymous identifier may be stored in your browser’s local storage. It exists only to limit how often you see the same campaign. It is not a cookie, is not tied to your identity, and is not transmitted to us with impression or click events.
• Ad events. When an ad is shown or clicked, we record only the campaign, creative, and site involved, plus a timestamp — and we store these as aggregated counts. We do not log your IP address, user-agent, referring URL, or any device identifier with these events.
• Approximate country. To deliver geographically targeted campaigns, we may read an approximate country signal derived from your network (for example, a country code provided by our content-delivery provider). This is used at request time and is not stored against you as an individual.
• No cross-site tracking. We do not build advertising profiles, do not set third-party advertising cookies, and do not follow you from one site to another.

Ad-event links are protected with HMAC-signed tokens that expire, and clicks include a one-time guard to prevent duplicate or replayed counts.

5. Cookies and local storage

• Essential session cookies are used only on the signed-in dashboard to keep you authenticated.
• Local-storage frequency ID is used on publisher sites as described above.
• We do not use analytics, advertising, or social-media tracking cookies.

6. Third parties and service providers

We keep external dependencies to a minimum. The providers that may process limited data on our behalf include:

• Google Fonts — our pages load the Manrope typeface from Google’s font servers, which means your browser’s IP address is visible to Google when fonts are fetched.
• Content-delivery / network provider — may provide an approximate country signal and serve creative assets.
• Hosting and infrastructure providers — host our application, database, and queues.
• Email provider — if enabled, used to send account and transactional messages.

We do not sell your personal information, and we do not share it with advertisers or publishers beyond what is necessary to operate the network (for example, aggregated performance figures).

7. How we share information

• To operate the service — for example, sharing aggregated impression, click, and revenue figures with the relevant advertiser or publisher.
• With service providers — as described in Section 6, under appropriate confidentiality obligations.
• For legal reasons — when required by law, regulation, legal process, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

8. Data retention

We keep account, campaign, and financial records for as long as your account is active and as needed to provide the service, resolve disputes, and meet our legal, tax, and accounting obligations. Aggregated, non-identifying statistics may be kept indefinitely. You can request deletion of your account as described below; we may retain certain records where the law requires it.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details in Section 13.

For residents of California and similar jurisdictions: we do not sell or “share” personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

10. Security

We protect your information with measures including hashed passwords (bcrypt), signed and time-limited ad-event tokens, role-separated access controls, and human review of content. No method of transmission or storage is perfectly secure, but we work to safeguard your data and to limit what we collect in the first place.

11. International data transfers

Fanvaiy Ads is operated by Kintiq, LLC in the United States, and information we collect may be processed in the United States and other countries where we or our providers operate. Where required, we take steps to ensure appropriate protection for such transfers.

12. Children’s privacy

Fanvaiy Ads is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, please contact us and we will delete it.

13. Changes and how to contact us

We may update this policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify account holders.

Questions or requests about this policy or your data:

Kintiq, LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713, United States
Email: [email protected]