Privacy Policy

Last updated 29 July 2026 · Written to meet the notice requirements of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules.

The short version

We store your name, email address, sign-in method, and the times you sign in — nothing else. We do not track which ads you read. We do not run advertising or analytics cookies. We have never sold personal data and this policy forbids us from starting. You can see, correct, or delete everything we hold by emailing us, and we will action it within 30 days.

1. Who we are

Adventure Advertising ("we", "us") operates adventureadvertising.in, a research tool that automatically finds the most-viewed advertising on public platforms and breaks down how those campaigns were constructed. For the purposes of the DPDP Act we are the Data Fiduciary — the party that decides why and how your personal data is processed. You are the Data Principal.

2. What we collect, and why

Every item below is listed because we actually collect it. There is no other category.

Data	Why we need it	Where it is stored
Name	To show who is signed in, so a shared screen does not silently expose someone else's account.	Google Firebase
Email address	To identify your account, let you sign back in, and contact you about the service — including before we ever begin charging for it.	Google Firebase
Sign-in method (Google, or email and password)	To let you back into the same account by the same route.	Google Firebase
Time you first accepted this notice, times you sign in, and a count of sign-ins	To prove what you consented to and when — a record we are required to be able to produce, and which you can inspect.	Google Firebase
Country (country only — never a city, address or precise location)	To show the live "reading now" counter. It is read from your browser's own language setting, not from your IP address, and we do not use any geolocation service.	Google Firebase, deleted within 60 seconds of you leaving
Password, if you sign in by email	Handled entirely by Google Firebase Authentication. It is hashed by them and we never see it. We cannot read, recover or reset it.	Google Firebase

3. What we deliberately do not do

No tracking of what you read. We do not record which ads you open, how long you stay, or what you search for.
No analytics. We removed Google Analytics from this site rather than write a policy that permitted it.
No advertising or third-party cookies. The only browser storage we use keeps you signed in.
No IP-based location lookup. Your country comes from your browser's own settings.
No selling, renting or sharing of personal data with data brokers, advertisers or anyone else.
No profiling and no automated decision-making that produces legal or similarly significant effects.

4. Our lawful basis

We process your personal data on the basis of your consent, given by a clear affirmative action: choosing to sign in after reading the notice on the sign-in screen. Under section 6 of the DPDP Act that consent must be free, specific, informed, unconditional and unambiguous, and limited to what is necessary for the stated purpose. If you do not consent, you simply do not sign in, and no personal data is collected.

Withdrawing consent is as easy as giving it. Email us (below) and say so. When you withdraw, we erase your account data — we do not keep a shadow copy — unless a law requires us to retain something, in which case we will tell you what and why.

5. Who else processes your data

Google LLC, through Firebase Authentication and Cloud Firestore, acts as our Data Processor. They store the data listed above on our behalf, under Google's terms, and are not permitted to use it for their own purposes. This means your data may be processed on servers outside India. The DPDP Act permits such transfers except to countries the Central Government restricts by notification; if India restricts a country we rely on, we will migrate rather than continue.

Our web hosting provider maintains standard server access logs, which record IP addresses for security and abuse-prevention purposes. We do not use these logs to build any profile of you.

This site loads YouTube videos only when you click to play one, using youtube-nocookie.com, which does not set tracking cookies before playback. Once you press play, Google's own terms apply to that playback.

6. Your rights under the DPDP Act

All of these are free of charge. Email us and we will respond within 30 days.

Right to access — a summary of the personal data we hold about you, what we do with it, and who else we have shared it with.
Right to correction and completion — have inaccurate or incomplete data fixed or filled in.
Right to erasure — have your data deleted, unless retention is legally required.
Right to grievance redressal — complain to us first, and get a substantive answer.
Right to nominate — name another person to exercise these rights on your behalf if you die or become incapacitated.

If we fail you, you may complain to the Data Protection Board of India. You are expected to raise it with us first; we would rather fix it than be reported.

7. How long we keep things

Account data — kept while your account exists. Deleted when you ask, or when the purpose is served.
Presence data — deleted when you close the tab, and in any case ignored and removed within 60 seconds.
Consent record — the timestamp of your consent is retained while your account exists, because a consent record you can rewrite proves nothing. It is deleted with your account.

8. Security

The site is served only over HTTPS. Access to stored data is restricted by database security rules so that a signed-in person can read only their own record — nobody, signed in or not, can list our users from a browser. Passwords are hashed by Google and never visible to us. Secrets are held as server environment variables and are not part of the published website.

If a personal data breach occurs, we will notify each affected person and the Data Protection Board of India as required by the DPDP Act, describing what happened, what was exposed, and what we are doing about it.

9. Children

This service is not intended for anyone under 18. The DPDP Act requires verifiable parental consent before processing a child's data, and forbids tracking, behavioural monitoring or targeted advertising directed at children. We do not knowingly create accounts for under-18s. If you believe a child has registered, tell us and we will delete the account.

10. Payment, when it comes

Adventure Advertising is free to use today and will become a paid subscription in future. We will give you clear notice by email before any charge, and you will have to agree before you are billed. When paid plans begin, payments will be handled by a regulated payment processor — we will not store your card or bank details — and this policy will be updated to name that processor before the first payment is taken.

11. Changes to this policy

If we change what we collect or why, we will update this page, change the date at the top, and — where the change is significant — tell you by email and ask for fresh consent where the law requires it.

12. Contact and grievance redressal

For any request, question or complaint about your personal data, including all the rights in section 6, contact our Grievance Officer:

Grievance Officer, Adventure Advertising
Email: privacy@adventureadvertising.in
Midnapore, West Bengal, India

We acknowledge every request on receipt and answer substantively within 30 days.

Back to the library · Terms of Use