Security Policy
At AdGlare, security is one of our highest priorities. In the spirit of openness and transparency, here are some of the security measures we take to protect and defend the platform.
We protect your data
All data is written to multiple disks instantly (RAID10), backed up daily, and stored in multiple locations.
Your data never leaves our servers
We distinguish between data about your visitors and about you and your team. Your billing information is shared with Stripe. Your profile, campaigns, zones and settings are accessible to us in our help desk software to be able to help you in case you need support. Data about your users are never shared with any external providers, and never leaves our server cluster.
We don't collect information from your users
When the ad tag is loaded on a web page, the only information that's required to be sent to AdGlare is the user's IP address for geotargeting and logging. Any user attributes you want to include is completely in your control, like Keyword or Key/Value Targeting. That data will only be used for targeting during the selection of a campaign, and will be discarded right after.
Encrypting data in transit
Data encryption using SSL/HTTPS is enforced whenever possible. Ad tags are using protocol-relative URLs, loading data from secure URLs if the page on which the ad is loaded is also secure. To be compatible with non-secure pages, ads may load over HTTP when the page doesn't use SSL.
Concurrency and rate limiting
We employ several layers to protect against abuse and DDoS attacks, such as concurrency limiting and rate limiting. Our servers gracefully queue requests coming from the same IP address when under high load.
Development practices
- All code changes is tested in a staging environment before deploying to production.
- We use several tools and services to automatically monitor uptime and availability.
- Server logs are permanently deleted after 14 days.
Regularly-updated infrastructure
Our software infrastructure is updated regularly with the latest security patches. Our products run on a network of dedicated servers which is locked down with firewalls and carefully monitored.
Regarding your billing information
All credit card transactions are processed via Stripe using secure encryption - the same level of encryption used by banks. Card information is transmitted, stored, and processed securely on a PCI-Compliant network.