Privacy & cookies

1. Who we are

The Service is operated by the AdsPreview.us project. For privacy questions or to exercise rights described below, email privacy@adspreview.us.

2. What we process (short overview)

• Tooling & preferences. We store editor settings, previews, and related data in your browser (for example localStorage) so the app works offline-first. This stays on your device unless you use features that upload to our servers.
• Sign-in. If you choose “Sign in with Google”, authentication is handled by Google and our auth provider (NextAuth). We receive the profile details Google shares with us (such as email and name) to provide account features (for example share links). Google’s processing is described in Google’s policies.
• Google Analytics (GA4). When a measurement ID is configured, we load GA4 by default to understand aggregate traffic. GA4 uses cookies and similar technology; Google acts as a separate processor. You can turn GA4 off anytime by choosing Essential only in the cookie banner or with the controls on this page.
• First-party security / operations cookies. We set small first-party HTTP cookies (for example session / visitor identifiers) to keep the site reliable and to protect against abuse. When server-side visit logging is enabled, those identifiers may be correlated with access logs described in the next bullet.
• Optional server access logs. When this logging is enabled on our servers, we may record technical data about requests (such as path, approximate location derived from headers, IP address, user agent, referrer, and timestamps) for security, debugging, and aggregate statistics. We configure short retention where possible.
• Optional product analytics beacons. We may send lightweight interaction beacons (for example SPA page views) to our own API when that feature is enabled. It is off by default; when on, it follows the same Essential only opt-out as GA4.
• Optional editor corpus sampling. When enabled, debounced samples of text you type in the editor may be sent to help us understand aggregate patterns. This is off by default.
• Optional share uploads. If you use sharing features that store images on our storage, those files are processed to render previews for recipients.

3. Lawful bases (GDPR)

We rely on consent where applicable law requires it for analytics or similar technologies, and we provide an Essential only choice to refuse GA4 and related optional measurement. We may rely on legitimate interests where permitted to operate, secure, and improve the Service, and to detect abuse (for example first-party operational cookies and, when enabled, proportionate server logging). Where we process account data to deliver features you request, we rely on performance of a contract / steps at your request.

4. Retention

Browser storage persists until you clear it. Server logs and analytics retention depend on our settings; we aim to keep identifiable technical logs only as long as needed for security and debugging, then aggregate or delete. Google Analytics data is governed by Google’s retention controls.

5. Your choices & rights

Analytics. Use the banner or the buttons below. GA4 is on by default; choosing Essential only keeps the Service usable without loading GA4.

GDPR rights. Depending on your location you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. Contact us at the email above. You may also lodge a complaint with your local supervisory authority.

6. International transfers

We may use providers in the United States and other countries (for example Google, hosting, or storage). Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

7. Children

The Service is not directed to children under 16 (or the age required in your country). We do not knowingly collect personal information from children.

8. Changes

We may update this page from time to time. Material changes will be reflected by updating the “Last updated” date.