Legal
Privacy Policy
Last updated 14 August 2026.
This policy describes what ViberDen records, why, and for how long. It covers two different groups of people: members, who hold an account here, and visitors, who simply saw or clicked an ad on a member's website. Visitors are measured without cookies and are never identified.
1. Visitors: how ad traffic is measured
An exchange only works if the traffic in it is real, so every impression and click has to be attributed and checked for fraud. Doing that with a tracking cookie would follow people around; we do it without one.
- No cookies are set on publishers' sites. Serving an ad sets nothing in the visitor's browser.
- Daily-salted fingerprints. Each measured event carries a fingerprint computed as an HMAC over coarse request characteristics (the network address, the user-agent string, the accepted languages), keyed with a secret salt that rotates every day. The same person is recognisable within one day, which is what deduplication and frequency capping need, and is no longer recognisable the day after, because yesterday's fingerprint cannot be recomputed under today's salt. The fingerprint is stored; the values it was computed from are not.
- A pseudonymous address digest. Alongside it we store an HMAC of the network address that does not rotate. It exists for one purpose: recognising that many "different" visitors are arriving from a single address or hosting network, which is the shape click fraud takes. It is a one-way digest, so the address cannot be recovered from it, and it is never used to build a profile, target advertising, or identify anyone.
- What is not collected. No names, no email addresses, no raw IP addresses at rest, no cross-site history, no advertising identifiers, and no data from third-party data brokers.
2. Visitors: how long any of it is kept
Raw click events (the fingerprint, the address digest, the ad, the site, the timestamp, and the fraud signals) are kept for 90 days and then deleted. Everything older survives only as aggregates: counts of impressions and clicks per site, per zone, and per ad, per day. Aggregates contain no fingerprints and no address digests, and nothing in them can be traced back to a person.
3. Members: what an account holds
- Your email address, and a one-way digest of it.
- A hash of your password. The password itself is never stored.
- The sites you registered, the ad units on them, and the ads you run.
- Your credit ledger: every grant, spend, hold, release, expiry, and forfeiture, with its timestamp.
- Your purchase records. Card details are handled by our payment provider and never reach us.
- Server logs of your requests, kept briefly for security and debugging.
We use this to run your account, serve and check your traffic, take payment, send transactional email (verification, password reset, notices about your sites), and meet our accounting obligations. We do not sell it, and we do not use it for advertising outside the exchange.
4. Cookies
ViberDen sets a small number of first-party cookies on this site and no advertising or analytics cookies at all. Showing an ad on a member's website sets nothing whatsoever in the visitor's browser, as section 1 describes. The cookie page names every cookie we set, what each one holds, how long it lasts, and what happens if you block it.
5. Who else sees any of this
- Our payment provider, for purchases and refunds. They receive what a payment needs and are the controller of your card details.
- Our email provider, for transactional messages to your address.
- Our hosting provider, which stores the data on our behalf.
- Other members see only aggregate numbers about their own inventory or their own ads. A publisher cannot see who visited, and an advertiser cannot see which publisher's page a specific visitor came from.
6. Deleting your account
You can delete your account yourself, from your account settings. It happens immediately and cannot be undone.
What is removed
- Your email address and your password hash.
- Your referral code, and your ability to sign in.
- Your sites, ad units, and ads, together with the creative images you uploaded. They stop serving at once.
- Every active session and every unused verification or reset link.
What is kept, and why
- The one-way digest of your email address. It is what stops a closed account from being re-opened to collect a second signup bonus. It cannot be reversed into your address.
- Your credit ledger and purchase records, now attached to an account row that holds no personal data. We are required to keep financial records, and the exchange's own totals have to stay correct.
- Aggregate traffic counts for the sites you ran, which contain no personal data.
7. Your rights
You may ask for a copy of the data held about you, ask for it to be corrected, ask for it to be erased, or object to how it is used. Deleting your account performs the erasure directly; for anything else, write to us and we will answer within 30 days. You may also complain to your local data protection authority.
8. Contact
Data requests and privacy questions: [email protected].