NOTABIS Ads Privacy Notice

1. Who operates NOTABIS Ads

NOTABIS Ads is operated by NOTABIS Labs (referred to as “NOTABIS”, “we”, “us” or “our”). For privacy questions or requests, email [email protected]. When another NOTABIS service handles a particular part of your account or payment, that service’s privacy information also applies.

2. Information we use

• Account and support information: account identifiers and the name or email made available through NOTABIS account sign-in, together with support messages and account security records.
• Advertiser and campaign information: ad text and images, destination links, campaign settings, review status, CPM rate, prepaid NT budget, funding and spend records, and campaign performance.
• Publisher and placement information: approved website domains, ad zones and formats, placement settings, and the status needed to operate the network.
• Delivery and measurement information: records of valid impressions and clicks, which may be associated with a campaign or external provider, publisher site, placement or zone, and time. We use these records to deliver ads, calculate campaign spend, prevent duplicate counts, and prepare historical and operational reports. These records are not designed to identify an individual visitor.
• Technical and security information: requests to our site and delivery endpoints necessarily reveal technical information such as an IP address, request time, browser or device details, and the referring page or site origin. Hosting, security and error logs may also contain request metadata.

3. External advertising providers

When an external provider wins an eligible banner placement, the shared embed requests its provider configuration and then loads that provider inside a restricted, sandboxed frame. The provider script is not loaded for an unselected placement. This isolation limits the script’s access to the publisher page, but does not prevent the provider from receiving a network request.

The provider and its infrastructure may receive the visitor’s IP address, browser or device information, the publisher site origin, and information needed to render or measure its ad. A provider may use its own cookies or similar storage and access technologies, subject to its configuration and policies. External providers handle information under their own privacy terms as well as any terms that apply to NOTABIS.

Provider scripts and settings are managed by authorized NOTABIS personnel. They are not included in publisher embed code as credentials, and provider-side configuration or revenue information is not exposed through the ordinary advertiser or publisher interfaces.

4. How and why we use information

• To authenticate accounts and provide campaign, publisher and support features.
• To review and deliver advertising, record valid impressions and clicks, apply the displayed CPM, and maintain historical statistics and billing records.
• To protect the service, detect invalid traffic or fraud, troubleshoot faults, and enforce our Terms of Service and Advertising Policy.
• To meet legal, accounting and dispute-resolution obligations.

Depending on the activity, we process information to provide a requested service or perform a contract, meet legal obligations, pursue legitimate interests in operating and protecting the network, or obtain consent where applicable law requires it.

5. Sharing and international processing

We share information only as needed with NOTABIS account, wallet and payment services; hosting, security, analytics and support providers; the external advertising provider selected for a placement; and authorities or advisers where required to comply with law or protect rights and security. A provider receives information directly from the visitor’s browser when its selected ad is loaded.

The Ads website uses NOTABIS-hosted Plausible analytics to measure aggregate site usage. Its lightweight script loads on Ads pages regardless of the optional Analytics choice and sends one manual pageview for the current page after it loads. Automatic pageview, outbound-link, file-download and form tracking are disabled. Plausible states that its standard setup uses no cookies or persistent visitor identifiers; it processes request details to produce site-usage statistics. The Analytics choice does not control Plausible pageviews. This measurement is used to understand visits to the Ads website, not to expose provider revenue or private campaign settings to publishers.

Some service providers may process information in other countries. Where required, we use applicable safeguards for international transfers. Please also review the relevant provider’s privacy information for its own processing and retention practices.

6. Cookies, advertising technologies and publisher sites

The Ads website uses necessary session and security technologies for sign-in and service operation. The shared consent manager stores a visitor’s optional purpose choices in local storage in that browser, for the website where the choice was made. The configured expiry is between 30 and 730 days. NOTABIS does not store a visitor-level consent record; on an eligible external placement, the network receives only the browser’s yes-or-no permission checks, not the CMP’s TC string. Visitors can reopen privacy choices from the discreet page link, change or withdraw a choice, or clear browser storage.

When a visitor saves a choice, we record daily aggregate counts by approved website and consent policy version, including whether advertising, analytics and personalisation were allowed. These are choice actions rather than unique visitor counts, so saving again can add another count. We do not attach a visitor ID or raw IP address to these aggregate records, and simply viewing the banner is not counted.

When optional advertising is refused or the consent configuration cannot be confirmed, NOTABIS Ads can continue serving eligible first-party contextual campaigns. An external provider’s script is loaded only after that provider is selected for an eligible banner placement and the visitor has allowed advertising. ExoClick uses that advertising choice without a separate TCF vendor permission check. Other providers may be configured to require a real response from the publisher’s existing TCF-compatible consent platform; the NOTABIS consent manager does not issue TCF signals.

External advertising scripts may use cookies or other technologies that store information on, or access information from, a visitor’s device. Whether that happens depends on the provider and the ad being served. Publishers must give visitors information about any provider processing on their site and keep their own site configuration and consent arrangements appropriate. See the publisher responsibilities in our Terms of Service.

7. Retention and historical statistics

We retain account, campaign, funding, delivery and security information for as long as needed to provide the service, maintain billing and fraud-prevention records, resolve disputes, and meet legal obligations. Retention periods vary by record type.

Campaigns can be archived or removed from active use while network-level daily impression and click totals remain available for historical reporting. Aggregate network statistics are kept separately from active campaign presentation; retaining those totals does not mean a deleted ad continues to be delivered.

8. Your choices and rights

Depending on where you live and the applicable law, you may have rights to request access to, correction or deletion of personal information, to restrict or object to certain processing, or to withdraw consent. To make a request, contact [email protected]. We may need to verify your identity. If you are in the UK, you can also raise a concern with the Information Commissioner’s Office.

9. Changes to this notice

We may update this notice when the service, provider integrations or applicable requirements change. The latest version will be published on this page. If a new use of personal information requires notice before processing, we will provide that information at the relevant point.