Security & your data rights

This page points you to the right place for security and privacy questions — it links to the canonical pages rather than restating them.

How data is protected

• No PII in the analytics path. Interaction events carry a hashed identifier and a country-only location; personal data never enters the analytics warehouse.
• Isolated surfaces. The publisher dashboard, staff admin, and the data-buyer portal are separate, independently authenticated surfaces — the boundary is a security requirement, not just a layout choice.
• Aggregation floor. Any data offered to buyers is held above a k-anonymity minimum, so individuals can’t be singled out.

The full security overview lives on the Trust & security page.

Exercising your privacy rights

To access, correct, or delete your data, use the routes described in the Privacy Policy. Erasure requests are processed on a schedule, and withdrawing consent propagates to a suppression list so future processing stops.

Reporting a vulnerability

Found a security issue? The Trust & security page includes our responsible-disclosure terms and how to reach the team. Please report privately and give us reasonable time to fix it before any public disclosure.