Privacy

• Your account: name, email address, and a country if you give one. If you signed in with Google we also keep the Google account id and the profile picture URL Google gives us.
• Your password, hashed with bcrypt. Nobody at AdFirst can read it, and a database dump does not reveal it.
• What you list and what you buy: your pages, your ad content, your orders, and the messages on each placement.
• Money: every balance change, with the reason for it, kept indefinitely. This is an accounting record — we cannot delete parts of it and still have a ledger that adds up.
• Deposits and payouts: the crypto addresses involved and the transaction hashes. These are already public on the blockchain.

No card numbers — we never see one. No private keys for your wallet, and nobody at AdFirst can move funds out of a wallet you control. No analytics or advertising trackers, no third-party scripts on the pages you browse, and no profile of you sold or shared with anyone.

Two, both necessary and neither used for tracking. One holds your session so you stay logged in; it is HTTP-only, so no script on the page can read it. The other holds your cart, which is a list of ad formats and nothing else. There is no consent banner because there is nothing to consent to.

• The other side of a placement. A publisher sees the advertiser’s display name, the ad content and the brief. An advertiser sees the page and its owner as listed. Neither sees the other’s email address.
• Our hosting and database providers, because the site runs on their machines. They do not use the data for anything of their own.
• Our email provider, which sees the address and the contents of notifications sent to you.
• Public block explorers and a price feed, which we query to confirm a deposit arrived. We send them a transaction hash — not your name or address.

Ask and we will send you everything we hold about you, or delete your account. Deleting removes your profile, your listings, your ad content and your messages. The financial ledger stays, with your identity detached from it — an accounting record with holes in it is not a record.

An account with money in it, or with live placements, has to settle those first.

Passwords are hashed. Sessions are signed and expire, and are cut off entirely when you change your password. Sign-in, registration and password resets are rate limited. The site sends a strict content security policy, so a script that was not put there deliberately does not run.

If you find something wrong, please tell us before you tell anyone else — see contact.