Privacy Policy

c4c.club is operated by Alien Art Software FZE, registered in Dubai, UAE. We are responsible for the personal information described here. Contact us at [email protected].

When you sign in and use the dashboard, we store:

• Your Google account basics: your name, email address and profile picture. Google shares these when you choose “Continue with Google”. We do not receive your password or any other Google data.
• What you add: your sites and domains, and your ads' title, text, logo URL, destination URL and country targeting.
• Account activity: your credit balance and transactions, your campaign and site statistics, and any fraud-review flags or suspension notes on your account.
• Purchases, if you make any: what you bought, when, and the amount paid. Card details are entered directly with the payment processor. We never see or store them.

We use this information to run your account, serve and account for your ads, prevent abuse, and contact you about your account or these policies. We do not send marketing emails on behalf of other businesses.

When a member's site loads the c4c.club ad unit, or a visitor clicks an ad, we process:

• IP address: used briefly to find the visitor's country, which we look up on our own servers using a copy of DB-IP's country database — the address is not sent to any outside service. It is then stored only as a salted one-way hash, which cannot be turned back into the address.
• Country, browser user agent, referring page and time of each impression and click.
• A visitor fingerprint: a hash of the IP address, user agent and site. Because it is different on every site, visitors cannot be tracked across the network.
• Whether the ad was on screen: the ad unit tells us once at least half of it has been visible for a second, so we count real views rather than page loads.

We use this only to price clicks, stop the same visitor being counted twice, and detect fraud. Impressions that are not clicked are deleted automatically after about 30 minutes, and the hashed request counters we use for rate limiting within an hour. Click records are kept for as long as we need them to account for credits and review fraud.

The ad unit sets no cookies, uses no tracking pixels and cannot read the page it appears on. It shows a logo, a title and one line of text. Logos are copied to and served from c4c.club's own file storage, so advertisers never learn who saw their ad.

If you report an ad, we store the reason you chose, anything you wrote, and a hashed IP address so the same person is only counted once. Reports are seen by our administrators only.

We use members' information to provide the Services you signed up for under our Terms of Service. We use visitor information because we have a legitimate interest in keeping the exchange fair and free of fraud. Collecting only hashed, minimal data helps keep that interest balanced against visitors' privacy.

• Everyone: your active ads (title, text, logo and link) are shown on other members' sites.
• Other members: they see aggregate numbers for their own sites and campaigns. Advertisers also see which members' apps (name, icon and domain) sent their ads clicks, and how many. Members never see other members' email addresses or individual visitor records.
• Our team: administrators can see account and click data to review fraud and support members.

We use these service providers, who process data only on our instructions:

• DigitalOcean, LLC hosts the website and its database.
• Google handles sign-in when you choose “Continue with Google”, under Google's own privacy policy.

We do not sell, rent or share personal information with advertisers, data brokers or other third parties, and we do not use outside analytics or support chat. We may disclose information if the law requires it, or to protect the Services and their members from fraud or abuse.

• Session cookie: keeps you signed in. It is strictly necessary and is removed when you sign out or the session expires.
• Theme preference: saved in your browser's local storage so the site remembers light or dark mode. It never leaves your device.

There are no advertising, analytics or third-party cookies.

We keep data to a minimum, hash visitor identifiers, and restrict admin access. No system is completely secure, however, and we cannot guarantee that information will never be accessed, lost or changed without authorisation.

You can ask to access, correct, export or delete your personal information, or object to how we use it, by emailing [email protected]. Deleting your account removes your profile, sites and campaigns. We may keep anonymised click and credit records where other members' balances depend on them.

Visitor data is stored only as hashes, so we usually cannot link it to a particular person. We will still do what we can with any request we receive.

The Services are not meant for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email [email protected] and we will delete it.

If we change how we handle data, we will update this page. For material changes, we will also tell members in the dashboard or by email. If we ever start using an outside data processor, it will be named here before any data is shared with it. For example, if we start selling credits, we will name the payment processor and say what it receives, which is usually your name, email address and payment details.