Privacy Policy

c4c.club is operated by Alien Art Software FZE, registered in Dubai, UAE. We are responsible for the personal information described here. Contact us at [email protected].

When you sign in and use the dashboard, we store:

• Your Google account basics: your name, email address and profile picture. Google shares these when you choose “Continue with Google”. We do not receive your password or any other Google data.
• What you add: your sites and domains, and your ads' title, text, logo URL, destination URL and country targeting.
• Account activity: your credit balance and transactions, your campaign and site statistics, and any fraud-review flags or suspension notes on your account.
• Purchases, if you make any: what you bought, when, and the amount paid. Card details are entered directly with Stripe. We never see or store them.
• Withdrawals, if you make any: the amount, the email address and name the payout was sent to, its status and our review notes.
• Invites: your invite code, who joined through it, and the rewards it earned.
• Fraud checks: signals about your account, such as sites that another account added before you, or earnings that come mostly from one new advertiser.
• Your member card, if you share it: the link you created and the image we draw for it.

When you add a site, our server visits its public home page to read its name, description and icon. If it has no usable icon, we ask Google's public favicon service for one, which tells Google the site's domain.

We use this information to run your account, serve and account for your ads, prevent abuse, and contact you about your account or these policies. We do not send marketing emails on behalf of other businesses.

When a member's site loads the c4c.club ad unit, or a visitor clicks an ad, we process:

• IP address: used briefly to find the visitor's country, which we look up on our own servers using a copy of DB-IP's country database — the address is not sent to any outside service. It is then stored only as a salted one-way hash, which cannot be turned back into the address.
• Country, browser user agent, referring page and time of each impression and click.
• A visitor fingerprint: a hash of the IP address, user agent and site. Because it is different on every site, visitors cannot be tracked across the network.
• Whether the ad was on screen: the ad unit tells us once at least half of it has been visible for a second, so we count real views rather than page loads.

We use this only to price clicks, stop the same visitor being counted twice, and detect fraud. Impressions that are not clicked are deleted automatically after about 30 minutes, and the hashed request counters we use for rate limiting within an hour. Click records are kept for as long as we need them to account for credits and review fraud.

The ad unit sets no cookies, uses no tracking pixels and cannot read the page it appears on. It shows a logo, a title and one line of text. Logos are copied to and served from c4c.club's own file storage, so advertisers never learn who saw their ad.

If you report an ad, we store the reason you chose, anything you wrote, and a hashed IP address so the same person is only counted once. Reports are seen by our administrators only.

We use members' information to provide the Services you signed up for under our Terms of Service. In the EU, the UK and Switzerland we use Google Ads measurement only with your consent, which you can withdraw at any time. Elsewhere we rely on our legitimate interest in knowing which of our ads work, and you can opt out at any time. We keep payment, payout and tax records, and check payouts against sanctions rules, because the law requires it. We use visitor information because we have a legitimate interest in keeping the exchange fair and free of fraud. Collecting only hashed, minimal data helps keep that interest balanced against visitors' privacy.

Our fraud checks score every click automatically. A suspicious click is held for a person to review rather than rejected outright, and a site whose clicks look far from normal is paused until an administrator has looked at it. If a decision affects you, email [email protected] and a person will review it.

• Everyone: your active ads (title, text, logo and link) are shown on other members' sites and on c4c.club. Once an administrator approves a site for listing, its name, domain, icon, description and click statistics appear on public pages such as the leaderboards and its project page. Your own name is public only if you share your member card, and it stays off search engines even then.
• Other members: they see aggregate numbers for their own sites and campaigns. Advertisers also see which members' apps (name, icon and domain) sent their ads clicks, and how many. Members never see other members' email addresses or individual visitor records.
• Our team: administrators can see account and click data to review fraud and support members.

We use these service providers, who process data only on our instructions:

• DigitalOcean, LLC hosts the website and its database, and stores uploaded images such as app icons, ad logos and card images.
• Stripe processes card payments when you buy credits. It receives your email address, card details and the amount, and uses them to take the payment and prevent fraud.
• Tremendous sends withdrawals. It receives your email address, name and the amount, and collects whatever the payout method you choose needs, such as PayPal or bank details. We never see those details.
• Google handles sign-in when you choose “Continue with Google”, under Google's own privacy policy.
• Google Ads measures which of our own ads brought you to c4c.club, when allowed under section 6. It receives the pages you visit on c4c.club, your IP address and browser details, and sets the cookies described in section 6. When you sign up or buy credits, we also tell it that this happened, the amount paid and a one-way hash of your email address, so Google can match the sign-up to the ad you clicked. Google acts under its own business data terms. It never runs inside the ad unit on members' sites.
• TinyAdz measures which of our own TinyAdz ads brought you to c4c.club. Its script receives the pages you visit, how you scroll and move on them, your IP address and browser details, and, when you sign up or buy credits, that this happened and the amount paid. It receives no name, email address or account id, and sets no cookies. It never runs inside the ad unit on members' sites.

We do not sell, rent or share personal information with advertisers, data brokers or other third parties, and we do not use outside analytics or support chat. Apart from the hashed email address described above, we do not share your account details with Google Ads or TinyAdz. We may disclose information if the law requires it, or to protect the Services and their members from fraud or abuse.

The c4c.club home page shows badges from launch directories that have featured us. Your browser loads them from those sites, which therefore see your IP address and browser details, like any image on the web.

• Session cookie: keeps you signed in. It is strictly necessary and is removed when you sign out or the session expires.
• Invite cookie (c4c_ref): set only when you open a member's invite link, so the invite is credited when you sign up. It expires after 30 days.
• Theme preference, cookie choice and dashboard hints: saved in your browser's local storage so the site remembers light or dark mode, your answer to the cookie banner, and which introductions you have seen. They never leave your device.
• Google Ads cookies (such as _gcl_au), optional: they let us measure which of our ads lead to sign-ups and purchases, and last up to 90 days. In the EU, the EEA, the UK and Switzerland they are set only after you choose “Accept” in the cookie banner. Elsewhere they are set unless you opt out, or your browser sends a Global Privacy Control signal.
• TinyAdz session id, optional: a random, anonymous id TinyAdz keeps in your browser so a sign-up on a later page can be credited to its ad. It follows the same choice as the Google Ads cookies. Without it, TinyAdz stores nothing in your browser.

To know whether to ask first, we look up your country from your IP address on our own server, the same way as in section 3, and store nothing. You can change your answer at any time with “Cookie settings” at the bottom of every public page. Declining removes the Google Ads cookies from c4c.club, stops the TinyAdz session id from the next page load, and we stop reporting your sign-ups and purchases to Google. The ad unit on members' sites sets no cookies of any kind.

When your page loads the ad unit, your visitors' browsers contact c4c.club, and we process the visitor data described in section 3. The ad unit sets no cookies and does not read your page, so you do not need a cookie banner for it. Your own privacy policy should still say that your site shows ads served by c4c.club. You can adapt this text:

This site shows sponsored partner promotions from c4c.club, operated by Alien Art Software FZE. When a page with one loads, your browser connects to c4c.club, which processes your IP address (stored only as a one-way hash), country, browser type and the page you are on to show the promotion, count views and clicks, and prevent fraud. c4c.club sets no cookies and does not track you across websites. See c4c.club's privacy policy at https://c4c.club/privacy.

You do not need to change your terms of service, unless they promise visitors that your site shows no ads or contacts no third parties.

We keep data to a minimum, hash visitor identifiers, and restrict admin access. No system is completely secure, however, and we cannot guarantee that information will never be accessed, lost or changed without authorisation.

• Account information: for as long as your account is open, and removed when it is deleted, as section 11 describes.
• Purchases, withdrawals and the credit records behind them: for as long as accounting, tax and anti-fraud laws require, which can be several years after your account closes.
• Visitor data: as section 3 describes.

Alien Art Software FZE is in the United Arab Emirates, and our service providers may process data in other countries, including the United States. Where the law requires it, such as for data from the EU or the UK, we rely on safeguards like the European Commission's standard contractual clauses.

You can ask to access, correct, export or delete your personal information, or object to how we use it, by emailing [email protected]. Deleting your account removes your profile, sites and campaigns. We may keep anonymised click and credit records where other members' balances depend on them.

Visitor data is stored only as hashes, so we usually cannot link it to a particular person. We will still do what we can with any request we receive.

Where you gave consent, you can withdraw it at any time; for cookies, use “Cookie settings”. If you are unhappy with how we handle your data, please tell us first. You can also complain to the data protection authority where you live.

The Services are not meant for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email [email protected] and we will delete it.

If we change how we handle data, we will update this page. For material changes, we will also tell members in the dashboard or by email. Any new service provider that handles personal data will be named here before data is shared with it.