Privacy Policy

Last updated: September 14, 2026

BannerPeek ("we", "us") is a web service that lets designers and agencies upload display ads (HTML5, image and video banners) and share them with their clients for review and approval. This policy explains what data we collect, why, and what your rights are.

1. Data we collect

Account holders

Account data: email address, name, and profile picture (if you sign in with Google). Passwords are stored hashed by our authentication provider; we never see them.
Content you upload: banner files, campaign and client names, comments, and any settings you configure.
Usage data: server logs (IP address, browser, pages requested, timestamps) needed to run and secure the service.

Reviewers (people who open a preview link)

Comments and approvals: the name you type, the text of your comment, the time, and your IP address. The IP address is recorded with approvals so the account holder has a verifiable record of who approved what.
Page views: when a preview link is opened, we may log the time and IP address so the account holder can see that the preview was viewed.

We do not use advertising trackers on preview pages and we do not sell personal data.

2. How we use data

To provide the service: hosting your banners, generating preview links, delivering comments and approvals.
To send transactional emails (share notifications, comment and approval alerts, password resets). These are not marketing emails.
To keep the service secure, prevent abuse, and debug problems.

3. Google Sign-In

If you sign in with Google, we receive your Google account email, name and profile picture. We use them only to create and identify your BannerPeek account. We do not access your Google Drive, Gmail, contacts or any other Google data. BannerPeek's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Where data is stored and who processes it

We rely on the following providers to run BannerPeek:

Supabase (database and authentication) – servers in the European Union.
Cloudflare (file storage and CDN for uploaded banners, DNS).
Vercel (application hosting).
Resend (transactional email).

Each provider processes data only on our instructions and under their own data-processing terms.

5. Retention

Your content stays as long as your account exists or until you delete it. Deleting a campaign removes its files from storage. If you delete your account, we delete your data within 30 days, except where we must keep it for legal reasons. Server logs are kept for a limited period for security purposes.

6. Cookies

We use only strictly necessary cookies: a session cookie to keep you logged in, and a cookie that remembers that you unlocked a password-protected preview. We do not use analytics or advertising cookies that require consent.

7. Your rights

Depending on where you live (including the EU/EEA under the GDPR), you may have the right to access, correct, export or delete your personal data, or object to certain processing. Write to us at hello@bannerpeek.com and we will respond within 30 days. If you are a reviewer who left a comment on a preview and want it removed, contact the agency that sent you the link or us.

8. Children

BannerPeek is a business tool and is not intended for children under 16.

9. Changes

We may update this policy. Material changes will be announced by email or on the site before they take effect.

10. Contact

Questions about privacy: hello@bannerpeek.com