PubvantaPubvanta Privacy Policy
Version: v2
Effective date: The date this policy is published on pubvanta.com
Operator: Anchma Inc.（闇碼科技股份有限公司） (“we”, “us”), which uses Pubvanta as the name of its advertising monetization product.
Contact email: support@pubvanta.com
This policy explains, for each of the three situations below, which personal data we process, for what purposes, how long we keep it, and how you can exercise your rights:
- Visitors: readers who browse a website on which the Pubvanta advertising code is installed (each a “Publisher Site”).
- Publishers: operators of Publisher Sites and their authorized users, who use the Pubvanta Publisher portal (app.pubvanta.com).
- Inquirers: people who submit the partnership inquiry form on the Pubvanta website (pubvanta.com).
This policy complements Section 9 of the Pubvanta Publisher Terms; the rights and obligations between a Publisher and us are governed by those Terms.
1. Visitors: AI Smart Matching and Background Tab ads
1.1 Data we process
The first time a reader clicks on a page of a Publisher Site, the Pubvanta code decides whether this visit shows a Background Tab ad. Only when an ad is actually shown is a record sent to us; a visit that shows no ad leaves no record. Each record contains:
| Category | Content |
|---|---|
| Event data | The time of the event, the identifier of the Publisher Site, the ad offer selected, and whether the ad tab opened successfully |
| Page data | The URL of the Publisher Site page where the click happened, limited to domain and path (excluding the query string and anything after #); the Origin and Referer sent by the browser |
| Interaction data | Which type of page element the click landed on: an internal link, an external link, a link that does not lead to another page, a button, a form field, or other |
| Technical data | The network address (IP address) and the user-agent string sent by the browser (User-Agent, which includes browser, operating system and device-type information) |
Data we do not collect: We do not record the text you click, any text you enter on a page (including passwords, payment details, private messages and form content), keystrokes or scrolling trails, and we do not record the other pages you viewed on a Publisher Site. Each record corresponds only to the one click at which an ad was shown, and it does not amount to a browsing history of you, on a Publisher Site or across sites. We do not track you across different Publisher Sites by cookies or other identifiers. If we later add to the types of visitor data we process, we will revise this policy first.
1.2 Data stored in your browser
To avoid showing the same reader too many ads, the Pubvanta code stores the following in your browser's localStorage and in a cookie (both named pv_pop_state) under the Publisher Site's domain: the number of ads shown this month, the time the most recent ad was shown, and, for each ad offer, the number of times it was shown this month and when. This data contains no identifier that identifies you and is not sent to us; the cookie is valid for about 400 days, and you can clear both in your browser at any time. Whether a given visit shows an ad is decided separately, by a random value that is regenerated each time and is not stored.
1.3 Purposes
- Providing the AI Smart Matching and Background Tab ad service, including selecting ads within campaign limits and display frequency limits;
- Calculating Billable Impressions (including removing duplicate impressions on the same Publisher Site within the same Reporting Day by IP address and user-agent string), and reconciling and paying Publishers on that basis;
- Detecting and excluding invalid traffic, and checking that events come from registered Publisher Sites;
- Service operation, information security, and handling disputes with Publishers.
We will not sell the above data to advertisers, and we will not use it to build a profile that identifies you across sites.
1.4 Ad destinations
After the ad tab opens, your browser goes to a URL of the advertiser, of an affiliate network the advertiser has engaged, or of another ad destination site. To attribute performance, that URL may carry the identifier of the Publisher Site; when going to some affiliate networks, it also carries the domain and path of the page where the click happened (excluding the query string and anything after #). How an ad destination site handles your data is governed by that site's own privacy policy and is outside this policy.
1.5 The role of Publisher Sites
Publisher Sites are operated by Publishers themselves. Under Section 9, item 7 of the Publisher Terms, Publishers must provide readers with the notices and consent mechanisms required under the laws that apply to them.
2. Publishers: the Publisher portal
2.1 Data we process
| Category | Content |
|---|---|
| Account data | Login email, password (stored only as a hash), account status, number of failed logins and lockout time, time of the most recent login |
| Terms acceptance record | The version of the terms you accepted and the time you accepted it |
| Publisher Site data | The Publisher Sites, the periods during which an account is bound to a site, and the change history of delivery switches and ratios (including who made the change, their email address at the time of the change, and the time of the change) |
| Payment details | Identity type (Taiwan company, foreign company or individual), invoice title, unified business number, country of company registration and registration number, legal name, ID document type and number, tax residency status, address, account holder name, bank name and code, branch name and code, SWIFT code, bank address, notes; the passbook copy or bank account certificate file, and a record of the time you retrieve that file each time |
| Settlement and payment data | Daily billing summaries, eCPM rates, payment requests, payment records and payment vouchers |
| System notices | Sending of emails about setting a password, resetting a password and payment requests |
ID document numbers and bank account numbers are stored encrypted, and the last four digits are kept separately for verification. The login session is kept in a cookie that is limited to this domain and cannot be read by page scripts (access token about 1 hour, refresh token 7 days); the language preference is kept in a cookie for one year. The portal loads no third-party analytics or advertising code.
2.2 Purposes
Account management and identity verification; performing the cooperation terms (delivery settings, billing, reconciliation and payment); carrying out withholding, filing or reporting as required by law; preventing fraud and invalid traffic; contacting you; and keeping records as required by law, accounting and dispute handling.
2.3 Effect of not providing data
If you do not provide account or payment details, you cannot use the portal or receive payment.
3. Inquirers: the website inquiry form
3.1 Data we process
When you submit the partnership inquiry form on pubvanta.com, we receive: your role (publisher, agency or site network, advertiser), website URL, monthly traffic range, website type, main traffic countries, contact name, email address and notes, together with the site language at the time of submission, the path of the last page of the site you viewed before submitting, and the source parameter in the URL you arrived on. Until you submit, the last two are held only in your browser tab's sessionStorage and disappear when you close the tab.
We do not store the IP address of the person who submits the form. To prevent abuse, the server temporarily counts submissions per IP address; that count is not written to the database.
The website uses no advertising trackers or cookies. To understand how the website is visited and how fast it loads, we use Cloudflare Web Analytics: it runs a script provided by Cloudflare in your browser, which reports the page address you visit (without the query string), the referring address, your country, device type, browser, operating system and page load time. It uses no cookies or browser local storage and is not used to track individual readers; we only look at aggregated statistics.
3.2 Purposes
To reply to your partnership inquiry, to assess whether a partnership is feasible, and to understand which entry point the inquiry came from.
3.3 Effect of not providing data
You are free to choose whether to fill in the form. If a field marked as required is left empty, the form cannot be submitted and we cannot reply to your inquiry; the notes field is optional.
4. Retention period, locations, recipients and methods of use
4.1 Retention period
| Data | Retention period |
|---|---|
| Visitors' ad event records (including IP address and user-agent string) | 13 months from the date of the event; but where that day's events relate to an amount payable to the Publisher, until 180 days after the date that amount is paid (the period during which amounts paid for invalid traffic are recovered under the cooperation terms), whichever is later; the records are kept until the amount is paid |
| Daily billing figures compiled from event records (excluding IP address) | The period of cooperation, and afterwards the retention period required by law |
| Publisher account, payment details, settlement and payment data | The period of cooperation, and afterwards the retention period required by law |
| Inquiry form data (from those who did not become Publishers) | 24 months from submission |
| Inquiry form data (from those who became Publishers) | Merged into Publisher data: the period of cooperation, and afterwards the retention period required by law |
When the retention period expires or the purpose of collection ceases, we delete the data or stop processing it, unless the law requires it to be kept.
After data is deleted, copies in system backups and restore records are kept for up to 15 more days and are then deleted automatically.
4.2 Locations
Our servers and databases are hosted on Google Cloud, located in Taiwan. The service providers listed below (Cloudflare, Resend) may process data in countries or regions outside Taiwan, so international transfers of personal data may be involved.
4.3 Recipients
Apart from our authorized personnel, we engage service providers of the following categories only to the extent necessary to provide the service, and we require them by contract to keep the data confidential:
| Provider category | Data processed |
|---|---|
| Hosting and database (Google Cloud) | All data described in this policy |
| Content delivery and security network (Cloudflare) | Connection data passing through its network, including IP addresses; website visit statistics (Cloudflare Web Analytics) |
| Email delivery (Resend) | Recipient addresses and content of notification emails to Publishers; partnership inquiry notification emails (containing the form content, sent to support@pubvanta.com) |
| File storage (Cloudflare R2) | Passbook copies or bank account certificates, and payment vouchers |
In addition, we may provide data to competent or judicial authorities where the law requires it, or where it is necessary to protect the rights of us, Publishers or third parties.
4.4 Methods of use
Automated processing, storage and compilation by computer systems; review by authorized personnel during reconciliation, fraud prevention and dispute handling; and contacting you by email.
5. Information security
We take the following measures: Publisher passwords and login credentials are stored only as hashes; ID document numbers and bank account numbers are stored encrypted; payment documents and vouchers are kept in non-public storage and provided only through short-lived URLs; the request logs of our application do not record IP addresses or user-agent strings; and database access is limited to authorized personnel and necessary services.
6. Your rights and how to exercise them
Under the Personal Data Protection Act (Taiwan), you may request, regarding your personal data:
- to inquire about it or review it;
- to be given a copy;
- to have it supplemented or corrected;
- to stop its collection, processing or use;
- to have it deleted.
Email support@pubvanta.com with your identity and your request. We will first verify your identity; for visitors, because ad event records contain no name or email address, we may need you to provide the website you visited, the time, and the IP address you were using, so that we can find the relevant records. We will decide a request to inquire, review or receive a copy within 15 days, and a request to supplement, correct, stop processing or delete within 30 days; where necessary we may extend the period, and we will notify you in writing of the reason. A fee for the necessary cost may be charged for providing a copy.
Data that must be kept by law or to perform the cooperation terms (for example for accounting, tax, fraud prevention and dispute handling) may not be deleted immediately; we will explain why.
Visitors can also clear localStorage and cookies in their browser at any time, or use the browser's ad-blocking feature.
7. Marketing
We do not use visitor data for marketing. If we send partnership or product messages by email to Publishers or Inquirers, we will provide a way to opt out the first time we send one, and we will stop sending once you opt out.
8. Minors
Pubvanta's services are intended for website operators, and we do not knowingly collect data of minors.
9. Changes to this policy
We may revise this policy and will show the new version and effective date on this page. Material changes will be announced on this page before they take effect, and Publishers will be notified by email.
10. Contact us
Anchma Inc.（闇碼科技股份有限公司）
Email: support@pubvanta.com