Privacy

What we store, where it lives, and why an ad bought here cannot track anybody. There are two different people on this page — the advertiser and the visitor who sees the ad — and they are kept separate on purpose.

If you buy an ad

We store the email address you bought with, your name if you gave one, which slot you bought and for how long, the artwork you uploaded, its alt text, the click-through address, and the Stripe identifiers for the payment.

The email address is what identifies the booking. There is no account and no password: you prove a booking is yours with the reference and the address you bought with, which is also why we keep it.

We never see your card details. Payment happens on Stripe's own pages. What comes back to us is an identifier for the payment and the amount — enough to issue a refund against, and nothing you could pay with.

We keep booking records for seven years after the booking ends, because they are accounting records. The artwork itself is deleted a year after the booking ends; we do not need it after that.

If you just saw an ad

This is the part worth being precise about.

An ad slot here is a plain image file served from our own server. There is no third-party ad tag, no tracking pixel, no script, and no cookie. The advertiser does not get to run code on the page their ad appears on, and this product does not offer that at any price.

What the advertiser learns about you: nothing. They do not get your IP address, your location, a device identifier, a profile, or a count broken down by anything about you. We tell them the slot ran. That is the whole report.

Because we serve the image ourselves, your browser does ask our server for it, and our web server writes an ordinary access log — IP address, time, which file, your browser's user-agent string. That is the same log every web server keeps, it is kept for 14 days, and it is not joined to anything, not used to build a profile, and not shared with the advertiser or anyone else.

If you follow an ad, you leave for the advertiser's own site, and what happens there is theirs. The link carries no identifier we added. What the destination site does is covered by its own privacy policy, not this one.

Nothing on this service sets a cookie on a visitor to a site carrying an ad.

Where the data actually is

Everything described above is stored on servers in a Hetzner Online GmbH data centre in Helsinki, Finland. Not the United States. We are a Florida company, but the machines are in the EU and the data stays there.

Stripe processes payments and holds the card side of the transaction under its own privacy policy. Our outbound email goes through our mail provider in order to be delivered. Those two are the only companies that touch any of this; there is no analytics vendor, no ad network, no data broker and nobody we sell anything to.

Your rights over your own data

Whether or not you are in the EU or the UK, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to support@hyperspacemediagroup.com and you will get an answer from a person within 30 days.

The one limit: we cannot delete the accounting record of a payment inside the seven years we are required to keep it. We can delete everything else, including the artwork, and we will.

If you are in the EU, our lawful basis for the booking data is performance of the contract you entered into when you bought the slot, and for the access log it is our legitimate interest in operating and securing the server. You can complain to your national data protection authority; in Finland, where the servers are, that is the Office of the Data Protection Ombudsman.

Breach

If something is taken that should not have been, we will tell the people affected directly and say what happened, rather than posting a notice and hoping it is read.

Last updated 12 October 2026. Hyperspace Media Group LLC, a Florida limited liability company · support@hyperspacemediagroup.com