Privacy Policy

Last updated: this is a beta — expect this to be revised as the product matures.

What we collect

• Account identity. When you sign in with GitHub, we receive your GitHub username, display name, and email address (if GitHub shares it), via Supabase Auth.
• IP addresses — hashed, never stored raw. Every ad-serving and dwell-confirmation request is fingerprinted using a salted, one-way hash of your IP address, used only to detect fraud (e.g. many accounts run from one machine). We cannot reverse this hash back to your IP, and we never store the raw address.
• Ad interaction data. Which ads were shown, on which surface (sidebar/status bar/explorer), how long they were visible, whether you clicked, and the coding-activity trigger that caused the ad to refresh (e.g. a build finishing). This is tied to your account to calculate earnings and detect abuse.
• Tech stack tags — optional. If "share tech stack" is enabled in the extension settings (on by default), we detect coarse language/framework tags from manifest files (e.g. "typescript", "react") to show more relevant ads. We never collect file contents, file paths, or source code.

How we use it

• To authenticate you and operate your dashboard and balance.
• To select relevant ads and calculate verified-impression earnings.
• To detect and prevent fraudulent activity (see our Terms).
• To report aggregate, non-identifying performance stats to advertisers (impression counts, click-through rate, surface/country breakdowns). We never share your identity, GitHub username, or individual activity with advertisers.

Infrastructure

Data is stored with Supabase (database) and served via Vercel (hosting). Both act only as infrastructure processors — neither uses your data for their own purposes.

Retention & your rights

We retain account and activity data for as long as your account is active. To request access to or deletion of your data, contact us at the address below — this is currently a manual process while the product is in beta.

Children

This service is not directed at, and should not be used by, anyone under 16.

Changes

We may update this policy as the product evolves during and after beta. Material changes will be reflected on this page.

Contact

Questions or requests: malay@virdl.com