Transparency

This page explains exactly what we track, why we track it, and how to opt out.

What we collect from advertisers

• Account — email, password hash (PBKDF2-SHA256, 100k iterations), name, company, country
• Campaigns — title, image, destination URL, bid, budget, targeting
• Payments — amount, currency, NowPayments payment ID. We never see your card or wallet credentials.

What we collect from users who see your ads

• Impression record — campaign ID, country (from Cloudflare), device type, browser family, daily-rotating fingerprint
• Click record — same as above plus time-on-destination from a passive ping (max 60s, no payload other than seconds)
• NO browsing history, NO IP address stored, NO precise location, NO cross-site profile

Retention

All tracking records are anonymized after 90 days (the fingerprint is replaced with the literal string anonymized, leaving only the aggregate counts).

User controls

Every user has access to bangla://privacy/ads in the browser, which lets them:

• See every record we hold under their current fingerprint
• Reset the fingerprint (breaks the link to all historical records)
• Opt out of all logging entirely (clicks still 302-redirect, but nothing is recorded)

Third-party pixels

If you configure third-party tracking pixels (Google, Facebook, TikTok, YouTube) for your campaign, those pixels fire when your ad is shown — subject to the user's opt-out preference. We log every pixel fire in our transparency log so users can see what was shared with whom.