Privacy Policy

Last updated: 15 July 2026

ADtention keeps prompts, code, files, tool results, model output, and customer content out of the sponsor-serving request. Serving is pseudonymous, not anonymous: the request can contain an install or publisher ID plus the minimum context, delivery, engagement, and security data needed to choose, account for, and protect a sponsor line.

1. Who we are

The data controller is codecoast labs GmbH(“ADtention”, “we”, “us”), Suurstoffi 37, 6343 Rotkreuz, Switzerland. Contact privacy@adtention.ai for privacy questions or rights requests.

2. Scope

This policy covers the ADtention website, advertiser fit intake, publisher and earner dashboards, partner program, sponsor-serving API, publisher SDK, and integrations for Claude Code, OpenCode, Hermes, Terminal, and other supported publisher products.

3. Sponsor-serving data

Data that a client or publisher integration may send

  • A pseudonymous install or publisher ID, plus an authentication secret or token where needed to protect the balance and account.
  • A broad context category, such as infrastructure or data, inferred by the client or publisher product.
  • Client and placement labels, such as integration name, host, surface, platform, client version, and optional pseudonymous subject.
  • Delivery and engagement metadata, such as campaign, creative, impression, render nonce, timestamps, acknowledgement state, and whether an attributed link was opened.
  • Network and security data, including IP address, user agent, request logs, rate-limit data, and fraud signals needed to secure the service and qualify activity.
  • An optional referral code when an install or partner attribution is used.

Data not sent for sponsor targeting

ADtention clients and publisher integrations are designed not to send prompts, conversations, source code, files, file paths, tool arguments, tool results, model output, customer content, chat IDs, or direct account identity for sponsor targeting. A publisher must maintain the same boundary when building its own integration.

4. Accounts, advertisers, publishers, and partners

When you choose an account-based feature, we may process:

  • name, email, organization, and Google sign-in identifiers;
  • publisher configuration, referral code, linked install, and balance information;
  • advertiser contact details, product URL, fit notes, campaign settings, and creatives;
  • payout status, Stripe account references, requested amounts, and review records; and
  • support, application, and operational communications.

Stripe processes identity, bank, card, tax, and payment data under its own privacy policy. ADtention generally receives account references and status rather than full payment details. Advertiser fit notes may be delivered to our team through Telegram or a configured secure webhook so the founders can review them.

5. Website analytics and storage

Cloudflare processes standard request and security logs when it serves the site. With your consent, we use PostHog to understand pageviews, referrers, campaign parameters, browser or device information, and important interactions such as CTA clicks, copied install commands, and submitted fit notes. PostHog capture is disabled by default and begins only after you opt in. We do not use third-party advertising pixels or cross-site retargeting cookies on the site.

Your choice is stored in local storage. If you opt in, we also set a first-party cookie named adtention_analytics_consent, valid for twelve months. It holds a signed record of your consent and the pseudonymous analytics ID it applies to, and nothing else. It exists so that when you submit one of our forms, our server can attach the outcome of that submission (accepted, rejected, rate limited) to the same analytics session your browser is already reporting. Without the cookie the form still works and still submits normally, we simply do not record its outcome.

Declining, or later clearing the banner choice, deletes that cookie and stops both the browser-side and server-side analytics. You can change your decision at any time by clearing the site setting in your browser or by contacting us.

6. Why we process data

  • Performance of a contract: to serve placements, account for billable impressions, operate dashboards, and process payments.
  • Legitimate interests: to secure the service, prevent fraud, qualify delivery, support users, and improve product reliability.
  • Consent: for optional website analytics and where otherwise required by law.
  • Legal obligations: for accounting, tax, sanctions, payment, and regulatory requirements.

7. Who receives data

We do not sell personal data. We use service providers only where needed to operate ADtention, including Cloudflare for hosting and security, Neon for database infrastructure, PostHog for consented analytics, Google for optional sign-in, Stripe for billing and payouts, and communication providers used to deliver support or fit notes. Advertisers receive aggregate or campaign-level performance, not direct identity about individual developers from serving data.

8. International transfers

We are based in Switzerland. Providers may process data in Switzerland, the EEA, the United Kingdom, the United States, or other countries. Where required, we rely on recognized adequacy decisions, the EU Standard Contractual Clauses, the Swiss addendum, or another lawful transfer mechanism.

9. Retention

We keep data only as long as needed for the purpose collected and for security, accounting, tax, payment, dispute, and fraud-prevention obligations. Account and campaign records are kept while active and for the applicable legal period afterwards. Security and delivery events may be kept long enough to reconcile billing and detect abuse. Aggregated statistics may be kept longer when they no longer identify or single out a person or install.

10. Your rights

Subject to the Swiss Federal Act on Data Protection and, where applicable, the EU GDPR, you may have rights to access, correct, delete, restrict, object, or receive a portable copy of personal data. You may withdraw consent at any time without affecting earlier lawful processing. Email privacy@adtention.ai. You may also complain to the Swiss Federal Data Protection and Information Commissioner or your local supervisory authority.

11. Security

We use technical and organizational controls appropriate to the risk, including scoped identifiers, authentication secrets, rate limits, delivery qualification, payout review, and restricted provider access. No transmission or storage method is perfectly secure. Keeping work content outside the serving request reduces the data exposed to the network.

12. Children

The service is not directed to anyone under 16, and we do not knowingly collect their data.

13. Changes and contact

We may update this policy and will change the date above when we do. For questions, contact codecoast labs GmbH, Suurstoffi 37, 6343 Rotkreuz, Switzerland, at privacy@adtention.ai.