Privacy Policy

Who is responsible

Arda AI, Inc., a Delaware corporation, operates Gimmick Ads and is responsible for information processed through gimmickads.com. Our mailing address is PMB 1995, 1000 Brickell Ave, Suite 715, Miami, FL 33131, United States. Privacy questions and requests may be sent to contact@ardaapp.com.

Information we handle

• Public directory metadata: website names, URLs, titles, descriptions, canonical links, favicons, Open Graph images, advertised prices, reported figures, purchase links, and public analytics-dashboard links.
• Messages and update requests: your email address, relationship to a listing, requested change, supporting URL, confirmation, and anything else you include in a form or email concerning a submission, correction, legal notice, or support request.
• Paid-placement information: sponsorship destination and selected term; imported sponsor name, headline, description, and favicon; listing boost targets and amounts; predicted and confirmed ranks; placement, payment, and expiration dates; payment status; customer email; and customer, Checkout Session, Payment Intent, and other transaction identifiers supplied by Stripe.
• Payment information: card and billing details are submitted directly to Stripe. We do not receive or store full card numbers. Stripe may provide us with limited billing, customer, and transaction information needed to confirm a purchase, handle a refund or dispute, and keep required business records.
• Technical information: standard request information such as IP address, user agent, referrer, timestamps, and error logs may be processed by our hosting and infrastructure providers for delivery, security, and debugging.
• Outbound click activity: when you follow a listing link, we record the listing identifier and add to its public aggregate click count. Short-lived, hashed request signals may be used to filter obvious bots and rapid repeat clicks. Those signals are held only in server memory for a brief deduplication window and are not added to the persistent click-count record.

Gimmick Ads does not currently offer visitor accounts. Please do not include sensitive personal information in a listing-update request or general message unless it is necessary for us to address the request.

How metadata imports work

Our automated checks request public pages and read common HTML and social metadata, including title, meta description, canonical URL, favicon, and Open Graph image tags. We also look for public pricing, purchase links, and publicly accessible analytics dashboards. We do not treat a privately installed analytics script as public statistics.

These requests may reveal to a publisher or its infrastructure that Gimmick Ads accessed the page. Directory metadata is public and may be indexed by search engines. Sponsor metadata is reviewed before publication and may be formatted, cropped, or shortened to fit a sponsor card.

Cookies and analytics

Gimmick Ads uses DataFast to understand aggregate website usage and improve the directory. The DataFast script uses cookies and may receive information such as pages visited, link and goal events, referrer, timestamps, IP address, user agent, device information, and campaign parameters. Current goal events include outbound directory clicks and visits to our public analytics page. We do not use this information to serve targeted advertising.

A public widget on Gimmick Ads displays DataFast’s current-online and total-visitor figures and links to our public DataFast dashboard. The widget obtains aggregate figures through our server and does not expose visitor-level analytics through the widget.

The site also relies on essential technical storage and request logs provided by its infrastructure. You can limit cookies through your browser settings, although some features may not work as expected. If we add accounts, targeted-advertising cookies, or other materially different tracking, we will update this policy and provide any notice or choice required by law.

Outbound and sponsor links

Following a directory or sponsor link takes you to a third-party site. Directory and sponsor URLs may contain campaign parameters identifying Gimmick Ads, the listing, or the placement. Directory listing links may also increment a public aggregate outbound-click count. The destination will receive the normal request information your browser sends and may process it under its own privacy policy. We do not control third-party tracking or privacy practices.

What is public

Directory metadata, listing ranks, aggregate click counts, public analytics links, and limited boost history may be displayed publicly. Public boost history may show the amount, payment date, resulting rank, expiration, and status, but not the purchaser’s email, Stripe customer identifier, or payment credentials. An active sponsor card publicly displays the destination’s imported metadata and link. Listing-update forms, customer emails, review notes, and non-public payment records are not published as part of these features.

Why we use information

• To build, maintain, search, rank, and correct the directory.
• To verify public metadata, availability, prices, purchase routes, and public statistics.
• To provide sponsor placements and listing boosts, calculate paid ranks, review sponsor eligibility, and confirm payment, placement, and expiration dates.
• To measure aggregate usage and outbound clicks, display public visitor and click counts, attribute referrals, and improve the service.
• To respond to messages, rights notices, and privacy requests.
• To secure, debug, and prevent abuse of the service and comply with legal obligations.

Legal bases for processing

Where data-protection law requires a legal basis, we process information as necessary to perform a contract or take requested steps before a contract, including sponsorships and listing boosts; for our legitimate interests in operating, securing, measuring, improving, and maintaining the directory; to comply with legal obligations; and with consent where consent is required. You may object to processing based on legitimate interests or withdraw consent where applicable, subject to legal limitations.

Service providers and disclosures

We may use hosting, database, email, and payment providers to operate the service. Current infrastructure includes Railway for hosting, Supabase for database services, DataFast for website analytics, and Stripe for checkout and payment processing. These providers process information under their own privacy notices and our arrangements with them.

We may also disclose information to professional advisers, authorities, or a successor to the service where reasonably necessary to comply with law, protect rights and security, resolve a dispute, or transfer the project. We do not sell personal information.

Retention

Public directory metadata remains while a listing is maintained and may persist temporarily in backups or cached builds. Correspondence is kept as long as needed to respond, verify the request, and preserve an appropriate record. Persistent outbound-click records contain aggregate counts and listing identifiers, not the short-lived hashed request signal used for rapid-repeat filtering. Sponsorship, listing-boost, and payment-confirmation records will be kept for service delivery, public boost history, accounting, tax, fraud prevention, and dispute handling. Public boost history does not display the customer’s email or payment credentials. Infrastructure and analytics data are retained according to provider settings, our operational need, and applicable legal requirements. We may retain information longer where necessary for legal compliance, fraud prevention, accounting, tax, dispute resolution, or enforcement, and may retain de-identified or aggregate information where permitted.

Your choices and rights

You may request correction or removal of a listing and may ask to access, correct, delete, restrict, object to, or export personal information where applicable law gives you those rights. We may need information to verify your identity and locate the relevant record. You may also complain to the data-protection authority available in your jurisdiction. These rights are subject to applicable exceptions, and we may retain information where law permits or requires it.

Security and international processing

We use reasonable technical and organizational measures appropriate to the service, but no internet service is completely secure. Providers may process information in countries other than yours, subject to the safeguards available through those providers and applicable law.

Children

The service is intended for adults and business users. We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information.

Changes

We may update this policy as the service and its providers change. The date at the top identifies the current version. Material changes will be posted on this page.