Privacy Policy

ClickPurity ("we", "us") provides click fraud detection software for Google Ads advertisers, operated by Power Tech Service Dubai, Office 201, Oasis Mall, Al Quoz 1, Dubai, UAE. This policy explains what data we collect, why, and how it's handled — both for our direct customers (advertisers who sign up for ClickPurity) and for visitors to our customers' websites (whose clicks our tracking script analyzes).

When you sign up and use the ClickPurity dashboard, we collect:

• Name, email address, company name, and WhatsApp number provided at signup
• Your chosen plan and billing/payment reference details
• Your Google Ads account information, if you connect it (via Google's own OAuth — we never see your Google password)
• Usage data within the dashboard (pages visited, settings configured)

Our tracking script (installed on your website) analyzes each click to detect fraud. For every visit, it captures:

• IP address, and geolocation derived from it (country, city, ISP)
• A device fingerprint derived from browser/hardware characteristics (screen size, timezone, GPU/canvas rendering, audio processing) — this identifies repeat devices, not individual people by name
• The Google Click ID (gclid), UTM parameters, referrer, and landing page URL
• Browser user agent and language

This data is collected on behalf of, and for the benefit of, the website owner who installed our script (our customer) — it exists to determine whether a click is genuine or fraudulent, not to build advertising profiles or track individuals across unrelated sites.

If an IP address is confirmed as fraudulent on one customer's account, that IP signal — the IP address itself, not any other data — can be shared across other ClickPurity accounts to block it there too, if those accounts have this feature enabled (it's on by default and can be turned off in Settings). No customer ever sees another customer's website data, traffic, or account details through this feature — only the anonymized fact that a given IP has a history of fraud.

Our tracking script (t.js) does not set or read cookies — it relies on device fingerprinting and a per-request beacon instead. The ClickPurity dashboard itself (where our customers log in) uses a session cookie to keep you signed in — this is strictly necessary for the dashboard to function and isn't used for advertising.

We rely on the following sub-processors to run ClickPurity:

• Supabase — database hosting and authentication
• Resend — transactional email delivery (signup confirmation, alerts, contact form)
• Google Ads API — reading campaign data and applying IP exclusions, only if you connect your Google Ads account
• Google Sheets API — creating spreadsheets in your own Google account, only if you use the "Export to Google Sheets" feature
• ip-api.com — IP geolocation and VPN/hosting-provider detection
• Netlify — application hosting

We do not sell any data to third parties, ever.

Click event data is retained for as long as your account is active, so historical fraud patterns remain useful for detection. If you close your account, you can request deletion of your data by contacting us — see below.

You can request access to, correction of, or deletion of your personal data at any time by emailing admin@clickpurity.com. If you're a visitor to one of our customers' websites and have questions about data collected about your visit, please contact that website directly — they are the data controller for their own site's traffic; we act as their processor.

ClickPurity is a business tool and is not directed at, or knowingly used by, children.

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.

Power Tech Service Dubai
Office 201, Oasis Mall, Al Quoz 1, Dubai, UAE
Email: admin@clickpurity.com