Privacy policy.

1. Account information

SideSpot uses your account identifier, email address, profile settings, sign-in records, and connected-device credentials to provide access and protect your account. If an enabled sign-in provider is used, it supplies the information needed to authenticate you. Available sign-in providers are shown when you sign in. Information you send when asking for help also becomes part of your support request.

2. Information from your Mac

The app sends the device and session information needed to connect one Mac, deliver an ad, and decide whether a full impression qualifies. These records are associated with your account so earnings can be credited correctly.

• Connection, readiness, timing, and supported display or ad-window states.
• Whether the Mac is awake, unlocked, online, and recently active. Five minutes of inactivity stops earnings.
• Ad assignments, completed impressions, clicks, validity decisions, and related earnings.
• SideSpot does not collect screenshots, window contents, keystrokes, browsing history, or precise device location. It does not request Accessibility, Screen Recording, or Input Monitoring access.

3. Location and audience preferences

Campaign matching uses an approximate country derived from the request IP address. VPNs and network routing can make it inaccurate. You can optionally select one city or postal area and languages you understand in Settings. You can skip, change, or clear those preferences. Place names and approximate area centres come from GeoNames. These preferences do not require a street address or precise device coordinates.

4. Advertising and transaction records

For advertisers, SideSpot stores submitted artwork, brand and destination information, audience choices, bids, budgets, schedules, review decisions, and delivery reports. Account balances, ledger entries, payment and payout references, statuses, adjustments, and review records support financial reconciliation. Live payment and payout services remain gated. When enabled, a provider may collect payment, bank, identity, or tax information under its own notice. The final provider list and data flows must be verified before live use.

5. Why we use this information

We use the information described here to operate SideSpot and administer accounts, campaigns, and earnings.

• Authenticate users, pair or revoke a Mac, and protect access to accounts.
• Match approved campaigns, verify eligible displays, and calculate charges and earnings.
• Process authorized payment and payout requests, reconcile balances, and maintain accounting records.
• Review ads, investigate invalid activity, respond to support requests, and diagnose service failures.
• Meet applicable legal duties and resolve transaction or account disputes.

6. Reports and advertiser links

Campaign reports distinguish eligible display starts from completed billable impressions and show delivery, spend, and click measurements. Choosing to open an ad takes you to the advertiser’s website. That site receives a normal browser request and handles information under its own privacy policy. SideSpot does not control what that website collects.

7. Optional conversion reporting

If an advertiser enables conversion reporting, the destination link can contain a random SideSpot click identifier. The advertiser can report a signup, a purchase amount in USD, or a purchase reversal against that identifier. Attribution lasts seven days. It does not track activity across devices or other advertising channels. These reports do not request customer emails or order contents and do not change ad charges or user earnings. Click identifiers and individual conversion events are removed after 90 days. Conversion totals are retained for up to 366 days after the click.

8. Cookies and browser storage

Account features use authentication cookies. Browser storage remembers your light or dark theme and helps keep dashboard data in sync across tabs. Clearing or blocking storage can reset preferences or affect sign-in. Infrastructure handling a web request may process its IP address and technical request details.

9. Who receives information

Configured infrastructure and service providers process the information needed for their roles, which may include hosting, storage, authentication, delivery, and authorized transactions. An enabled sign-in or payment service also handles information under its own terms. Information may be disclosed when required by applicable law or needed to investigate abuse or a dispute.

10. Retention and deletion

Account and device records support access while an account is active. Some accounting, transaction, security, and dispute records may need to remain after a deletion request. Conversion records follow the periods stated above. Requesting account deletion in Settings immediately revokes Mac credentials and sends the request for review. It is not a promise that every record is erased immediately.

11. Your choices and requests

You can edit available account settings, clear optional audience preferences, unlink your Mac, request account deletion, and quit the Mac app. Depending on the law that applies, you may also have rights to access, correct, obtain a copy of, delete, restrict, or object to processing of your information. Requests may require identity checks and may be subject to legal exceptions. Email zerowaves.io@gmail.com for privacy questions.

12. Security, children, and international use

SideSpot restricts access through account and device authorization and revocable credentials. No system can guarantee complete security. The service is intended for adults aged 18 or older.

13. Connected advertiser agents

You can authorize an AI agent through browser consent to read and manage your advertiser campaigns, artwork, audiences, reports, funding requests, and attribution settings. The agent and its service receive the information returned by those operations and handle it under their own terms and privacy practices. SideSpot stores the connection, consent, token records, operation audit records, and retry records needed to authorize access and avoid duplicate changes. Sensitive replay responses are encrypted and available for up to ten minutes; expired encrypted responses are removed by maintenance while durable retry records remain.

• Offline access can continue after you sign out or the original browser session expires, while consent and refresh access remain valid.
• Revoking a connected agent in Settings immediately denies its existing access tokens and further refresh. A password reset also revokes agent grants.
• Revoking only an OAuth refresh token prevents further refresh but can leave an already issued access token usable for up to ten minutes. Use Settings to end access immediately.
• Revocation stops future access; it does not erase information an agent already received or undo completed campaign changes.

14. Changes to this notice

The date above identifies the latest update to this notice. Material changes are subject to any notice or consent required by applicable law.