Legal

Privacy Policy

Last updated: 5 July 2026

Haashield ("we", "us"), operated by Haachi Digital, provides click-fraud detection and prevention services for online advertising campaigns. This policy explains what data we process, why, and the choices available to you. It covers our website (haashield.cloud), client dashboards, and the tracking services we operate on behalf of our customers.

1. The two roles we play

As a controller — for data about our own customers (account holders): contact details, login credentials, and billing records.

As a processor — for ad-click traffic data we analyse on behalf of our customers (the advertisers). Our customers determine the purpose (protecting their ad spend); we process the data under their instructions.

2. Data we process for fraud detection

When a visitor clicks a protected ad or lands on a protected page, we process:

• Network data — IP address. By default we store a salted one-way hash of the IP, rotated monthly; the raw address is retained only where required to enforce an active block (for example, submitting an IP exclusion to Google Ads).
• Device data — user-agent string, screen resolution, timezone, browser family, and a non-invasive device fingerprint used solely for repeat-click detection.
• Click data — timestamp, campaign identifier, landing page path, and sanitised query parameters. We strip parameters that could contain personal data (names, emails, phone numbers, click identifiers such as GCLID) before storage.
• Derived data — country-level geolocation and network-type indicators (VPN/proxy/datacenter), used to score click quality.

We do not collect names, email addresses, or contact details of ad visitors, do not read cookies from other sites, and do not build cross-site behavioural profiles.

3. Consent

Our tracking honours consent state. Where a customer's website signals that a visitor has not granted consent, we operate in minimal mode: the click is routed and counted without device data, fingerprint, or stored IP identifiers.

4. Legal bases

• Legitimate interest — fraud prevention and protection of our customers' advertising spend (including limited retention of blocked IP addresses, which is necessary to enforce exclusions).
• Contract — operating accounts, dashboards, and support for our customers.
• Consent — enhanced device signals where consent frameworks apply.

5. Retention

Click and traffic records are retained according to the customer's plan (90–365 days by default) and then deleted by scheduled cleanup jobs. Blocked-IP enforcement records persist while the block remains active. Account data is retained for the life of the account plus statutory record-keeping periods.

6. Sharing and sub-processors

We do not sell data. We share data only with:

• Google Ads — IP addresses identified as fraudulent are submitted to the customer's own Google Ads account as campaign IP exclusions.
• Hosting infrastructure — our servers are operated on Hostinger infrastructure; data is stored in managed databases under our control.
• Geo/network lookup services — country and network-type resolution may use third-party IP intelligence services, receiving only the IP address being checked.

7. Security

Transport encryption (HTTPS) on all endpoints, salted hashing for stored IP identifiers, hashed access credentials, session controls with idle and absolute timeouts, rate limiting, and audit logging of administrative actions.

8. Your rights

Depending on your jurisdiction, you may have rights of access, correction, deletion, restriction, and objection. Ad visitors should direct requests to the advertiser (the controller); we support our customers in fulfilling them. You can reach us directly at hello@haashield.cloud and we will respond within 30 days.

9. International transfers

Data is hosted in our hosting provider's data centres. Where data moves across borders, we rely on our provider's compliance frameworks and contractual safeguards.

10. Changes

We will post updates to this policy on this page and, for material changes, notify account holders by email.

11. Contact

Haachi Digital — Haashield
Email: hello@haashield.cloud