Privacy Policy

Last updated 9 August 2026.

1. Two very different sets of people

This policy covers two groups whose data we treat completely differently. Publishers are people with a PraxNet account, and we hold real account data about them because we have to pay them. Visitors to a publisher's site are people who happen to load a page containing our tag, and we deliberately hold almost nothing about them.

2. What we collect from publishers

• Account. Email address, name, country, and a password hash if you did not sign in with Google. We never see your Google password.
• Sites. The domain, category, language, the regions your audience is in, your traffic range, where your traffic comes from, your social links, and the analytics screenshot you upload. The screenshot is stored privately and is visible only to the person reviewing your application.
• Payout. Your chain and wallet address. We never ask for and never hold a private key, a seed phrase or an exchange login. Nobody at PraxNet can move your funds; we can only send to the address you confirmed.
• Support. Anything you write to us, and our replies.

3. What the ad tag collects from your visitors

This is the part that matters most, so it is written out in full.

The tag sets no cookie, reads no cookie, and touches no localStorage, sessionStorage or IndexedDB. There is no identifier stored on a visitor's device by us, ever, and therefore nothing to sync, sell or leak.

When an ad is requested, our server sees, as any web server does:

• The IP address, which we immediately hash with a secret salt. We store the hash and not the address. The hash lets us tell that two requests came from the same place without letting us tell where that place is.
• The user agent string, hashed the same way and for the same reason.
• A country, derived from the IP before it is hashed. Country only. Not a city, not a postcode, not coordinates.
• The page the ad is on, from the Referer header, used to confirm the placement is running on a domain the publisher verified.
• Whether the ad was rendered and whether it was at least half on screen, which is what an advertiser is paying for.

We use those to count impressions and clicks, to decide which ad to show for the country, to enforce a frequency cap so one person is not shown the same ad all day, and to detect automated traffic. That is the complete list of purposes.

4. What we do not do

• We do not build a profile of a person across sites. There is no identifier to build one with.
• We do not fingerprint devices.
• We do not sell, rent or share personal data with data brokers.
• We do not pass anything about a visitor to an advertiser. An advertiser sees aggregate counts.
• We do not run third-party trackers inside the tag. It talks to our own server and nowhere else.
• We do not load advertiser JavaScript. Creatives are images.

5. How long we keep things

• Hashed IPs and user agents: up to 40 days at the edge, which covers the conversion window plus a margin, then deleted.
• Aggregate counts with no visitor data in them: kept, because they are what your earnings are calculated from and you are entitled to check them.
• Fraud investigation records: up to 30 days beyond the hold they relate to.
• Publisher account and payment records: for as long as the account is open, and afterwards for as long as tax and accounting law requires.

6. Who processes data for us

Supabase (database and authentication), Vercel (hosting), Cloudflare (the ad server and its edge network), Resend (email), and Sanity (blog content). Each is used for the purpose named and none of them receives publisher payout details other than as part of our own database.

7. Your rights

Under GDPR, UK GDPR and CCPA you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask us not to sell it, which is simple in our case because we do not. Write to support@praxnet.ai and we will answer within 30 days.

Note what we cannot do: because visitor IPs are hashed with a salt we do not reverse, we cannot find a specific visitor's records to delete them. That is a deliberate design choice, and the trade is that there is far less to delete in the first place.

8. What we accept onto the network

A short summary of the policy, because it is a privacy question as much as an editorial one. Advertisers on this marketplace are crypto category businesses and every creative is a human-reviewed image. Publishers are crypto and web3 focused sites read by a person before approval. We refuse illegal content, malware and cryptojacking, hate speech, adult content, piracy, and traffic that was bought, automated or exchanged. The full list is in our Terms of Service.

9. Children

The service is not for anyone under 18 and we do not knowingly collect data from children.

10. Changes

If we change what we collect or why, we will email publishers before it takes effect rather than updating this page quietly.

11. Contact

support@praxnet.ai