Privacy Policy
Last updated: October 2026
The short version
This website sets no cookies and we cannot follow you between visits. We collect personal data only when you deliberately give it to us by filling in a form. Our free tools process everything in your browser and send us nothing at all. We do not sell or share personal data, and we do not advertise to you. DisplayGG and ChannelGG are signed-in services and work differently; ChannelGG is described below.
Who is responsible
Nenad Franjic, operating DisplayGateGuard, Berlin, Germany. Full postal details are on the imprint. Privacy questions: info@displaygateguard.com.
We are not required to appoint a data protection officer and have not appointed one.
What we collect, and why
- What:
- Pages viewed, referring site, UTM parameters if present, approximate country, browser and device type.
- Why:
- To understand which content is useful and which is not.
- Legal basis:
- Legitimate interest (Art. 6(1)(f)) — running and improving our own website.
- How long:
- Aggregated. No cross-visit identifier exists, so this cannot be tied back to you.
- What:
- Name, work email, company, job title, your message, and any placement report you attach.
- Why:
- To answer you and, if you ask for one, to prepare a quote.
- Legal basis:
- Pre-contractual steps at your request (Art. 6(1)(b)).
- How long:
- Up to 24 months, then deleted.
- What:
- Name, work email, company, and the placement report you upload — which typically contains the domains your ads appeared on and what you spent on them.
- Why:
- To run the audit you asked for and send you the findings.
- Legal basis:
- Pre-contractual steps at your request (Art. 6(1)(b)).
- How long:
- The uploaded report is deleted within 90 days of the audit being delivered, unless you ask us to keep it. Your contact details follow the 24-month rule above.
- What:
- Name, work email, company, job title and company type; the plan, number of placements and how often you want them checked; and your approximate display spend band. The form asks for no billing details: if you accept a quote, we ask for the invoicing details we need at that point.
- Why:
- To prepare a quote and, if you accept it, to provide the paid service and invoice for it.
- Legal basis:
- Performance of a contract and pre-contractual steps at your request (Art. 6(1)(b)); keeping invoices and order records to meet commercial and tax record-keeping duties (Art. 6(1)(c)).
- How long:
- For as long as the contract runs. Invoices and related records are kept for the statutory retention periods under German commercial and tax law. Requests that do not lead to an order follow the 24-month rule above.
- What:
- Your email address and the page you subscribed from.
- Why:
- To send you the file you asked for and occasional updates.
- Legal basis:
- Consent (Art. 6(1)(a)), withdrawable at any time.
- How long:
- Until you unsubscribe.
- What:
- Nothing. The placement report cleaner, the ad relevance checker, the YouTube exclusion list screener and the policy template run entirely in your browser — no file or text you enter is transmitted to us.
- Why:
- Not applicable.
- Legal basis:
- Not applicable — no personal data is processed.
- How long:
- Not applicable.
Your placement report
If you send us a placement report — for the free audit or a managed analysis — it usually contains commercially sensitive information about your own advertising: the domains your ads ran on, impressions, clicks and cost.
We use that file for one purpose only: producing the analysis you asked for. It is not sold, not shared, not used to train anything, and not added to any public dataset. Our published research and open-source work contain aggregate statistics only, never customer domains or spend figures. The file is deleted within 90 days of delivery unless you ask us to keep it for a follow-up analysis.
ChannelGG and YouTube data
ChannelGG is our YouTube counterpart, run by the same person named above and currently in private beta. It uses YouTube API Services, so by using ChannelGG you are also subject to the Google Privacy Policy.
For each channel in a list you submit, ChannelGG reads public information through the YouTube Data API: the channel's name, description, keywords and country, YouTube's own topic categories and its "made for kids" status, public counts, the titles, descriptions and tags of around ten recent uploads, and the text of top public comments on three recent videos.
It does not record who wrote those comments. No commenter name, channel ID or other identity is kept, and no individual commenter is assessed: comments are read together, per channel, to describe the comment section as a whole. ChannelGG does not use Google sign-in and never touches your YouTube account or any private YouTube data.
What you give it: the channel lists you paste or upload, the brand profile you set up — what the brand sells, the topics it wants or avoids, your own notes — and your email address, for the sign-in link. Brand profiles are private to your account and are never shown to anyone else. The findings and labels in a report are ChannelGG's own assessment, not data from YouTube. Public channel information and general findings about a channel may be reused for other customers' reports so that the same channel is not fetched twice; your lists, brand profiles and reports are not.
Anything retrieved from YouTube, including the quotes shown as evidence, is deleted or refreshed within 30 days, as YouTube's developer policies require. Older reports keep their findings and recommendations without the quotes. Uploaded channel lists are kept for 30 days and reports stripped of YouTube text for up to 180 days. A spreadsheet you export contains channel IDs and links, the names from your own list, ChannelGG's findings and labels, and YouTube's "made for kids" status with the date it was collected. It contains no titles, descriptions or comments from YouTube. Once downloaded, the file is in your hands.
ChannelGG measures visits and page speed with Vercel Web Analytics and Speed Insights. Both work without cookies and report aggregate figures only.
To delete a run, a brand profile or your whole ChannelGG account, write to info@displaygateguard.com and we will do it within 30 days. YouTube's policies require us to offer this, and it sits alongside the rights listed below.
Cookies and browser storage
This site sets no cookies — none for analytics, none for advertising. Our analytics run in memory only, so the identifier is discarded when you close the tab and you cannot be recognised on a later visit. No consent banner is needed because nothing non-essential is stored on your device.
One exception, and it is at your request: the policy template saves your draft in your browser's local storage so a refresh does not lose your work. That never leaves your device, we cannot read it, and clearing the form removes it. Under § 25(2) TDDDG this is storage strictly necessary to provide a service you explicitly asked for.
One thing our analytics does know by name. When you submit a form, that single submission is recorded against the email address you gave us, so that we can tell a real enquiry from a bot and chase it up if the delivery fails. That one event is tied to your address. The pages you read before and after it are not, and we do not build a profile of you: no browser identifier survives the tab, so nothing links one visit to the next.
The signed-in apps are separate from this website and each sets one cookie of its own, which keeps you signed in, plus display preferences such as the colour theme in your browser. Neither is used for advertising or for tracking you between sites. You cannot reach either app without choosing to sign in.
Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control or Do Not Track signal, we do not load analytics at all. Nothing is filtered after the fact — the analytics code never initialises. GPC is the signal California's CPRA requires businesses to honour; we honour it regardless of whether that law applies to us.
Checking who a message came from
When a message reaches us from a company address, we ask the public domain registry one question about that domain: when it was registered. Impersonation is cheap, and a domain registered hours before the message is the clearest sign of it. Only the domain is sent, never your name, your address or anything you wrote, and addresses at the large free mail providers are skipped entirely. The answer is a note on the email we read: nothing is rejected, scored or filtered because of it.
Who else processes your data
These providers process data on our instructions under data processing agreements. Each maintains its own privacy policy.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting and aggregate traffic analytics | USA — Standard Contractual Clauses |
| PostHog | Product analytics | EU (eu.posthog.com), proxied through this domain |
| Resend | Sending email and holding the newsletter list | USA — Standard Contractual Clauses |
| Supabase | Database for form submissions | Standard Contractual Clauses where processing occurs outside the EEA |
| OpenAI | The AI analysis itself — placement domains, and channel text in ChannelGG | Standard Contractual Clauses where processing occurs outside the EEA |
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data deleted (Art. 17);
- restrict how we process it (Art. 18);
- receive it in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting what was lawful beforehand (Art. 7(3)).
Email info@displaygateguard.com and we will act within one month. There is no charge. To stop emails, use the unsubscribe link in any message we send.
You also have the right to complain to a supervisory authority (Art. 77). For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, but you may contact the authority where you live or work instead.
Automated decision-making
We do not make decisions about you by automated means, and we do not profile you. Our software scores websites, not people.
Changes
We update this policy when what we do changes. The date at the top shows when it last changed. Material changes affecting people who have given us data will be notified by email.