Your files stay yours.

AdPreview privacy notice and preferences.

Notice version: privacy-2026-09-20-v3

Data controller

AdPreview s.r.l.

Creatives processed on your device

Images, videos, filenames and copy entered in the simulator remain in your browser and are not sent to AdPreview APIs. Closing or reloading clears your preview. The free service does not require an account.

Aggregate usage statistics

We collect daily counts of visits and site actions to improve AdPreview and decide which features to develop. We store only event type, language, page and feature of interest. We do not collect user, session or simulation identifiers, UTM codes, referrers, email addresses, files or ad copy. Statistics are not linked to contact messages or feature notification requests. Counts measure actions, not unique people.

Enabled statistics and your opt-out

First-party aggregate statistics are enabled by default without a banner and are used exclusively to produce counts for this site. This first-party system does not use cookies, persistent visitor identifiers, fingerprinting or session replay. You can disable these transmissions using the controls on this page. The default setting is not recorded as explicit consent. For technical data needed to protect the service, we rely on our legitimate interest in security (GDPR Article 6(1)(f)).

Iubenda and Google Ads

We use Iubenda to display and store preferences for cookies and trackers, and the Google tag for advertising measurement. The Google tag uses Consent Mode with consent denied by default; Iubenda updates its behavior based on your expressed preferences. These providers may process connection data, the page visited and, when authorized, cookies or identifiers under their respective notices. Iubenda preferences are separate from the first-party aggregate statistics switch.

Browser storage and retention

We store only your chosen preferences in localStorage: disabling statistics remains effective until you change it or clear browser storage. An explicit choice to enable them is stored for 186 days, after which the default applies. The language preference remains until cleared. No analytics session is created. Each event batch uses a random receipt, unrelated to a visitor or its content, retained for 24 hours to prevent double counting on retries. Daily counts are retained for 90 days with hourly cleanup; disabling does not delete existing aggregate totals.

Infrastructure, recipients and transfers

Cloudflare provides hosting, networking and the D1 database. It processes connection information, including IP addresses, to deliver and protect the site; IP addresses are not stored in our analytics tables. Abuse prevention uses a daily HMAC derivation of the IP in the rate limiting service. Access to statistics is restricted to the operator through the Cloudflare account. Cloudflare operates globally: creating the database in Europe does not guarantee all processing remains in the EU. Provider processing and safeguards for potential international transfers are described in its privacy policy and Data Processing Addendum linked below.

Feature notifications

When you request a notification, we collect your email, chosen feature, language, path, notice version and request timestamps, without analytics identifiers or attribution. We use this data only to record interest and send the requested notification, not for newsletters or advertising. Processing relies on consent (GDPR Article 6(1)(a)), expressed through the unticked checkbox. A request does not unlock a feature or promise a release date.

Contact form

To handle your message, we collect your name, email, message, language, page and date in a separate table. Processing is necessary to handle your request and any pre-contractual steps (GDPR Article 6(1)(b)). These details are needed to respond, are not used for marketing, and are retained for up to 365 days from submission unless deleted earlier. Do not include credentials or sensitive data. Your message is stored in the database; the form does not send automated emails.

Contact retention

We retain the contact for no more than 365 days after the latest request, unless it is erased or consent is withdrawn sooner. Technical submission receipts used to prevent duplicates remain for 7 days. At expiry, hourly maintenance deletes the contact and its associated interests through database constraints. If we send the notification before expiry, the contact will be deleted after the necessary technical checks and will not be reused for another purpose without a new choice.

Rights and requests

Contact the controller for access, rectification, erasure, restriction, portability where applicable, objection to processing based on legitimate interests and withdrawal of consent, without affecting prior processing. You may complain to the Italian data protection authority or your competent authority. We do not make decisions with legal effects based on statistics. Aggregate totals do not allow us to identify your individual actions.