Privacy Policy

1. Data controller

adGlitch is operated by Miramtech Teknoloji Ltd. Şti. ("Miramtech", "we", "us"), Keresteciler Sitesi, Kasım Sokak No:10, Güngören / İstanbul, Türkiye. Miramtech is the data controller for the processing described in this policy.

We process personal data in accordance with Türkiye's Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

Contact: [email protected]

2. Summary

• We process only the data needed to operate advertiser accounts and deliver ads.
• We do not sell personal data.
• adglitch.com uses no analytics and no advertising trackers.
• Players who see an ad are not identified by name, email or IP address.
• Advertisers receive aggregated figures only, never data about individual players.

3. Website visitors

When you visit adglitch.com, our servers and our network provider Cloudflare process your IP address, browser type, the pages requested and the time of the request. We use this data to deliver the website, keep it secure and prevent abuse.

The cookies we use are listed in the Cookie Notice.

4. Advertisers

If you create an account, we process:

• account details: email address, nickname and, if provided, display name and company;
• your password, stored only as a one-way hash;
• sign-in records, including hashed values of your IP address and browser;
• your X3JS account link, if you sign in with X3JS;
• your ads, campaigns, credit balance, invoices and payment records;
• your correspondence with us.

We use this data to provide the service, review ads, bill you, secure your account and send service emails such as address confirmation, password reset and account notices.

5. Enquiries

When you use our contact form, the details you enter are sent to our team by email, and a confirmation is sent to you. We use them only to respond to your enquiry. They are not stored in our database.

6. Players who see an ad

adGlitch ads are shown on game websites before a game starts. To deliver and measure these ads, the ad player stores a randomly generated identifier in the player's browser storage. It contains no name, email address or IP address, and we store only a hashed form of it.

For each ad request we record the hashed identifier, the country (provided by Cloudflare), device type, page language, game category, the ad shown and the events that followed: started, viewed, completed, skipped or clicked. We do not store the player's IP address with these records.

We use this data to count valid views, prevent fraud and limit how often the same ad is shown to the same player. We do not build profiles of players or track them across other websites.

To decide with the lawyer: whether consent is required from players in Europe before the identifier is stored

7. Service providers

We use the following providers, who process data on our behalf and only on our instructions:

• Cloudflare, Inc.: content delivery, security and storage of advertisers' videos;
• Twilio Inc. (SendGrid): delivery of our emails;
• OVH SAS (OVHcloud): server hosting in Frankfurt, Germany.

We disclose data to public authorities only where required by law.

8. International transfers

Some of our providers process data outside Türkiye. To decide with the lawyer: the transfer safeguards under KVKK Article 9 and the GDPR

9. Legal bases

• Performance of a contract: operating your account and campaigns.
• Legal obligation: invoicing, tax and accounting records.
• Legitimate interests: security, fraud prevention and accurate measurement of ads.

To decide with the lawyer: confirm the bases under KVKK Article 5 and GDPR Article 6

10. Retention

• Account data: for as long as your account is active. An account with no credit and no activity for 3 months is deleted; we email you 14 days before.
• Invoices and payment records: for the period required by tax law.
• Ad request and event records: 2 years.
• Server logs: 30 days.

11. Security

We use encrypted connections, hashed passwords and identifiers, restricted access and regular backups to protect personal data.

12. Your rights

Under KVKK Article 11 and, where applicable, the GDPR, you may request access to, correction or deletion of your personal data, object to or restrict its processing, and receive a copy of it.

Send requests to [email protected]. We respond within 30 days.

You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or with the data protection authority in your country.

To decide with the lawyer: whether a separate Turkish notice (Aydınlatma Metni) is needed

13. Children

adGlitch accounts are for people aged 18 and over. We do not knowingly collect personal data from children through advertiser accounts.

14. Changes

We may update this policy. Material changes are notified to account holders by email.