Privacy policy
Updated 22 October 2026. Applies to the AdsWerk campaign assurance service.
What the service processes
Account email and authentication are processed by Supabase. Workspaces store campaign URLs, approved requirements, observations, screenshots when available, incident notes, and scoped access links. Submitted URLs may contain campaign parameters; avoid personal data, secrets, and live authentication tokens.
How data is used
Data supports account access, inspections, scheduling, evidence, and abuse limits. Cloudflare hosts the application and browser checks; Supabase hosts the database and authentication. The checker hashes request identity for short-lived rate limits. Public checker results are returned to the requester and are not added to a public directory.
Access and retention
Workspace data is private to its owner. Anyone holding an unexpired developer link can see that campaign’s requirements and recent evidence and request a retest. New links revoke previous links. Retained evidence is limited to the latest 60 runs per campaign; campaign deletion removes associated data. Authentication account deletion and provider backup retention require administrator processing.
Cookies and local storage
Authentication stores session information in browser storage. No advertising or third-party analytics scripts are included in this release. Provider infrastructure may process connection metadata.
Your privacy requests
NorthKit Ventures operates AdsWerk. For access, correction, export, or deletion requests, contact legal@adswerk.xyz from your account email. We may verify account ownership before acting. Campaign data can be deleted in your workspace. Account deletion and provider backup expiry require separate processing. For product support use support@adswerk.xyz; general enquiries go to hello@adswerk.xyz.