Privacy

Data boundaries

Anonymous mode

Default

No app category signals in delivery requests.

App signals

Opt-in

Local category tags only.

Advertiser access

None

No viewer identity or device profile.

Ledger audit

Append-only

Earnings and reversals stay traceable.

Transmission contract

Sent: language, consent flags, coarse categories.

Not sent: raw app names, document names, screen contents.

Advertiser sees: aggregate campaign metrics.

Paid Glance is operated by Emanuele Ludovico Ungaro. Privacy and account requests can be sent to emanueleungaro98@gmail.com.
This notice is effective June 20, 2026 and applies to the website, account dashboards, delivery APIs, and macOS app.
The service is intended for adults aged 18 or older. App-category targeting cannot be enabled in the Mac app without confirming this requirement.

Email and account id are used to sign in, link Mac installs, show wallet balance, and credit earnings.
Each Mac app install gets a device id and token so impressions, clicks, daily caps, and fraud checks can be attributed correctly.
Device tokens are stored locally in Keychain by the Mac app and are not shown to advertisers.

Anonymous mode is the default and sends no category signal.
When category signals are enabled, the Mac app maps running apps to coarse categories like developer_tools, productivity, communication, or security_privacy.
Raw app names, bundle ids, document names, window titles, screen contents, prompts, files, chats, and clipboard contents are not sent.

Account, device linking, campaign delivery, ledger, and payout data are processed to provide the requested service and perform the user agreement.
Optional app-category matching is processed only after consent and can be disabled at any time by enabling Anonymous mode or turning category signals off.
Security, fraud prevention, abuse investigation, and service reliability are processed for legitimate interests; payment and tax records are retained where legally required.

For each ad we record campaign id, creative id, device id, session timing, completion status, click events, earnings, platform fee, and payout state.
The ledger is used to calculate pending, available, paid, and lifetime balances visible on the website and in the Mac menu bar app.
Invalid, automated, repeated, or suspicious activity can be held, reversed, or excluded from payout.

Advertisers can target language and app categories only. They do not choose viewer countries in this version.
Advertisers see campaign totals such as spend, impressions, qualified views, clicks, and aggregate category performance.
Advertisers do not receive viewer identity, device identity, raw app data, or a per-person activity profile.

Stripe processes advertiser payments, viewer payout onboarding, transfers, and required identity or compliance checks.
We store Stripe object ids, ledger entries, transfer ids, and payout status, not full card or bank details.
Payouts require a connected Stripe account and may be delayed by fraud review, compliance review, minimum thresholds, or Stripe requirements.

Vercel hosts the web application, Supabase provides authentication and database services, and Stripe provides payment and payout services.
These providers may process data outside the European Economic Area under their applicable contractual and transfer safeguards.
Advertisers receive aggregate delivery information only; they do not receive viewer identities or device-level profiles.

Account and device identifiers remain while the account is active and are deleted or anonymized after a verified request where legally possible.
Financial, tax, fraud, security, and reconciliation records may be retained for the applicable statutory period, which can be up to 10 years.
Aggregate advertiser reporting may remain after personal identifiers are removed.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing by contacting the controller.
Consent for category matching can be withdrawn at any time without affecting prior lawful processing.
People in the EEA may complain to their local supervisory authority, including the Italian Garante per la protezione dei dati personali.

We do not send your raw apps or personal activity to advertisers.

We send only consent state, language, and optional category tags used to match ads.

Advertisers buy campaign delivery. They do not buy your identity.