Privacy Policy
Last updated: September 2026
The short version
We set no cookies and we cannot follow you between visits. We collect personal data only when you deliberately give it to us by filling in a form. Our two free tools process everything in your browser and send us nothing at all. We do not sell or share personal data, and we do not advertise to you.
Who is responsible
Nenad Franjic, operating DisplayGateGuard, Berlin, Germany. Full postal details are on the imprint. Privacy questions: info@displaygateguard.com.
We are not required to appoint a data protection officer and have not appointed one.
What we collect, and why
- What:
- Pages viewed, referring site, UTM parameters if present, approximate country, browser and device type.
- Why:
- To understand which content is useful and which is not.
- Legal basis:
- Legitimate interest (Art. 6(1)(f)) — running and improving our own website.
- How long:
- Aggregated. No cross-visit identifier exists, so this cannot be tied back to you.
- What:
- Name, work email, company, job title, your message, and any placement report you attach.
- Why:
- To answer you and, if you ask for one, to prepare a quote.
- Legal basis:
- Pre-contractual steps at your request (Art. 6(1)(b)).
- How long:
- Up to 24 months, then deleted.
- What:
- Name, work email, company, and the placement report you upload — which typically contains the domains your ads appeared on and what you spent on them.
- Why:
- To run the audit you asked for and send you the findings.
- Legal basis:
- Pre-contractual steps at your request (Art. 6(1)(b)).
- How long:
- The uploaded report is deleted within 90 days of the audit being delivered, unless you ask us to keep it. Your contact details follow the 24-month rule above.
- What:
- Name, work email, company, job title and company type; the plan, number of placements and how often you want them checked; your approximate display spend band; and for orders, your billing address, country, VAT ID, purchase order number and invoice email.
- Why:
- To prepare a quote, confirm your order, issue invoices and provide the paid service.
- Legal basis:
- Performance of a contract and pre-contractual steps at your request (Art. 6(1)(b)); keeping invoices and order records to meet commercial and tax record-keeping duties (Art. 6(1)(c)).
- How long:
- For as long as the contract runs. Invoices and related records are kept for the statutory retention periods under German commercial and tax law. Requests that do not lead to an order follow the 24-month rule above.
- What:
- Your email address and the page you subscribed from.
- Why:
- To send you the file you asked for and occasional updates.
- Legal basis:
- Consent (Art. 6(1)(a)), withdrawable at any time.
- How long:
- Until you unsubscribe.
- What:
- Nothing. The placement report cleaner and the policy template run entirely in your browser — no file or text you enter is transmitted to us.
- Why:
- Not applicable.
- Legal basis:
- Not applicable — no personal data is processed.
- How long:
- Not applicable.
Your placement report
If you send us a placement report — for the free audit or a managed analysis — it usually contains commercially sensitive information about your own advertising: the domains your ads ran on, impressions, clicks and cost.
We use that file for one purpose only: producing the analysis you asked for. It is not sold, not shared, not used to train anything, and not added to any public dataset. Our published research and open-source work contain aggregate statistics only, never customer domains or spend figures. The file is deleted within 90 days of delivery unless you ask us to keep it for a follow-up analysis.
Cookies and browser storage
This site sets no cookies — none for analytics, none for advertising. Our analytics run in memory only, so the identifier is discarded when you close the tab and you cannot be recognised on a later visit. No consent banner is needed because nothing non-essential is stored on your device.
One exception, and it is at your request: the policy template saves your draft in your browser's local storage so a refresh does not lose your work. That never leaves your device, we cannot read it, and clearing the form removes it. Under § 25(2) TDDDG this is storage strictly necessary to provide a service you explicitly asked for.
Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control or Do Not Track signal, we do not load analytics at all. Nothing is filtered after the fact — the analytics code never initialises. GPC is the signal California's CPRA requires businesses to honour; we honour it regardless of whether that law applies to us.
Who else processes your data
These providers process data on our instructions under data processing agreements. Each maintains its own privacy policy.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting and aggregate traffic analytics | USA — Standard Contractual Clauses |
| PostHog | Product analytics | EU (eu.posthog.com), proxied through this domain |
| Resend | Sending email and holding the newsletter list | USA — Standard Contractual Clauses |
| Supabase | Database for form submissions | Standard Contractual Clauses where processing occurs outside the EEA |
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data deleted (Art. 17);
- restrict how we process it (Art. 18);
- receive it in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting what was lawful beforehand (Art. 7(3)).
Email info@displaygateguard.com and we will act within one month. There is no charge. To stop emails, use the unsubscribe link in any message we send.
You also have the right to complain to a supervisory authority (Art. 77). For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, but you may contact the authority where you live or work instead.
Automated decision-making
We do not make decisions about you by automated means, and we do not profile you. Our software scores websites, not people.
Changes
We update this policy when what we do changes. The date at the top shows when it last changed. Material changes affecting people who have given us data will be notified by email.