Draft for legal review. This text is not yet final and may change before launch.

Privacy Policy

Last updated 28 October 2026

How Popnet, Inc. collects and uses personal data for account holders and for visitors who see ads served by our network.

  1. Account holders
  2. Visitors who see our ads
  3. Cookies
  4. Sharing
  5. Retention
  6. Your rights
  7. Security
  8. Contact

Account holders

We collect your name, email, company, country, optional Telegram handle, password hash, sign-in records (IP address, browser), payout details and transaction history. For identity checks we, or our verification partner, process ID documents, selfies and proof of address.

We use this to run your account, pay you or bill you, prevent fraud, meet legal duties (tax, anti-money-laundering) and contact you about your account.

Visitors who see our ads

When our script runs on a publisher's site, we receive the visitor's IP address, browser user agent, country (from the IP), referring page and the zone. We store a hashed form of the IP address, not the address itself, and use these signals to choose an ad, apply frequency caps and detect fraud.

We do not build cross-site advertising profiles and do not sell personal data.

Cookies

The dashboard uses a strictly necessary session cookie to keep you signed in and, on some forms, a security check by Cloudflare. Our ad script stores the times of recent opens in browser storage (or, if that is blocked, a first-party cookie on the publisher's site) to respect the frequency cap set by the publisher. We do not use advertising or analytics cookies on the dashboard.

Sharing

  • Payment providers (card and crypto processors) to process deposits and payouts.
  • Identity verification partner for KYC checks.
  • Email delivery and hosting providers who process data on our behalf.
  • Authorities, when the law requires it or to stop fraud and abuse.

Retention

Account and transaction records are kept for as long as the account is open and then for the period tax and financial law requires. Identity documents are deleted after the retention period set in our admin settings (5 years by default); documents sent for a payment review are deleted after 90 days. Ad-serving logs are kept in aggregate; raw events are kept for up to 90 days.

Your rights

Depending on where you live (for example the EU, UK or California), you can ask to access, correct, export or delete your data, or object to some processing. Email [email protected]. We may need to keep some data for legal reasons, such as tax records.

Security

Passwords are hashed with Argon2, documents are encrypted at rest, staff access requires two-factor authentication, and every staff action on money or accounts is logged.

Contact

Popnet, Inc., [registered office address]. Email: [email protected].