Legal

Privacy Policy

Last updated: October 26, 2026

1. Introduction

AdHunt (“we”, “us”, “our”), operated from Slovenia at adhunt.si, is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR). For the purposes of GDPR we are the data controller for the personal data described below.

2. Information We Collect

Information you provide directly:

  • Account details: username, email address, password (stored only as a hash)
  • Profile preferences: avatar, language, notification preferences
  • Support messages and any content you submit through forms on the Platform

Information collected automatically:

  • IP address and approximate location derived from it
  • Browser type, operating system, and device information
  • Pages visited and time spent on the Platform
  • Ad-viewing data: which ads you watched, your quiz answers, response times
  • Login timestamps and session data (CSRF token, language cookie)

Information collected by Stripe (not by us):

Identity verification and bank-account collection for withdrawals is handled entirely on Stripe’s pages. Stripe is the data controller for that data and collects your full name, date of birth, address, government ID document, and bank account details. AdHunt does not see or store any of this data — we only receive a status flag from Stripe telling us whether you have completed verification. See Section 8 for more on third-party processors.

3. How We Use Your Information

We process your personal data for the following purposes:

  • To operate the Platform and provide the gameplay loop (legal basis: contract)
  • To process credit top-ups and cash-outs (legal basis: contract)
  • To deliver relevant advertisements and quiz questions (legal basis: contract)
  • To prevent fraud, cheating, multi-account abuse, and money laundering (legal basis: legitimate interest)
  • To improve the Platform and develop new features (legal basis: legitimate interest)
  • To send transactional emails about your account, cash-outs, and policy changes (legal basis: contract)
  • To send optional product update emails when you have explicitly opted in (legal basis: consent)
  • To provide aggregated, anonymised analytics to Advertisers (legal basis: legitimate interest)
  • To comply with our legal and tax obligations (legal basis: legal obligation)

4. Data Shared with Advertisers

Advertisers on AdHunt receive only aggregated, anonymised analytics about their ad performance — total views, completion rates, and quiz recall scores. We do not share individual usernames, email addresses, IP addresses, or any other personal data with Advertisers.

5. Cookies & Session Data

We use only strictly necessary cookies: a PHP session cookie that keeps you logged in, a CSRF protection token, and a language preference cookie. We do not use third-party advertising or tracking cookies. No consent banner is required because no non-essential cookies are set.

6. Data Storage & Security

Your data is stored on EU-based servers. Passwords are hashed with PHP’s password_hash using industry-standard algorithms and are never stored in plain text. We use CSRF protection, prepared SQL statements, encrypted sessions, and HTTPS for all traffic. No system is 100% secure, but we follow modern web security practices to reduce risk.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, with the following exceptions retained for legal compliance:

  • Top-up and cash-out transaction records (kept for 10 years for tax purposes, as required by Slovenian law)
  • Anti-fraud audit logs (kept for 12 months)
  • Anonymised analytics data (may be retained indefinitely — no longer linked to you)

8. Third-Party Processors

We share the minimum necessary data with the following processors:

  • Stripe Payments Europe, Ltd. — processes credit-pack purchases and ad-purchase payments. Receives your email and transaction amounts. Privacy policy: stripe.com/privacy.
  • Stripe Connect Express — handles identity verification and payouts to your bank. Stripe is the independent data controller for the identity and bank-account data you submit on their pages. AdHunt never sees this data.
  • Hosting provider — our hosting provider in the EU stores the data described in Section 2 on our behalf, under a Data Processing Agreement.

No data is transferred outside the European Economic Area without GDPR-compliant safeguards in place.

9. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Rectification — Have inaccurate personal data corrected
  • Erasure — Request deletion of your personal data (subject to retention requirements in Section 7)
  • Restriction — Restrict the processing of your data
  • Portability — Receive your data in a machine-readable format
  • Objection — Object to processing based on legitimate interest
  • Withdraw consent — Withdraw any consent you previously gave (e.g. marketing emails)
  • Complain — Lodge a complaint with the Slovenian Information Commissioner (ip-rs.si)

To exercise any of these rights, contact privacy@adhunt.si. We respond within 30 days.

10. Children’s Privacy

AdHunt is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will promptly delete it and any associated data.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated on the Platform and, where appropriate, by email at least 7 days before they take effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your data rights: