Privacy

RotateAd records that a placement displayed a creative, at a time. It does not record who was looking. Separately, it keeps the small amount of account information a claimed seat needs — the email it was claimed with, the order record, and the seat's permanent history.

Owner email. The address a seat is claimed with is stored with the seat. It is used to send the receipt, the manage link and account messages, and it is never rendered on the public site.

Manage credentials. Each seat has a private manage link — the permanent capability to edit that listing. It is emailed to the owner and never published. Treat it like a password. Access recovery uses a temporary one-time code that is stored only as a hash and expires after use.

Order and payment information. An order records the amount charged, its state, the claim details frozen at checkout (such as the website and listing text), and the seat it bought. Payment is taken by Stripe at checkout — card details are entered there and are not stored by RotateAd.

Referral attribution. If the claim carried a referring seat number, that number is part of the seat's permanent record — the referral lineage shown on the receipt page. It is kept with the seat and is not subject to moderation.

Permanent history. The seat number, claim date, price paid and ownership history are permanent records. So is what a listing and banner previously contained: moderation changes what is publicly presented, it does not rewrite history.

The network measures banner and stage displays. Each event records which placement showed which creative, and when (the server's clock). The one client-derived signal is the host the tag claims to be running on — used only as a check that the display belongs to the publisher's approved domain, reduced to a yes or no before anything is written, and never persisted.

An event never contains any of the following:

• IP address (full or truncated)
• Browser user agent
• Cookies or any cross-site key
• Referrer path or query
• Page content
• Visitor identifiers, sessions or fingerprints

Raw measurement events are kept for 90 days and are then eligible for purge — long enough for month-over-month comparison and for the fairness window the rotation runs on.

RotateAd makes automated requests to the websites on the network, for two checks an owner asks for:

Domain verification. When you verify a domain, RotateAd fetches the site and looks for a verification meta tag. Those requests identify themselves as RotateVerifier/1.0 (+https://rotate.ad/verify).

Installation verification. Before a banner is treated as installed — and while it is being monitored — RotateAd fetches the page where the banner should appear, to check that it is really there.

RotateAd stores one preference in your browser's local storage: whether you want the light or dark theme. It stays on your device.

A seat page, its number, its claim date, its listing text, its destination website and its receipt are published on purpose — that is the product. The owner email and the manage link are not part of that publication.