Privacy policy

Who is responsible

Runads is made and run by dzhfrv.com. Contact: runads@dzhfrv.com.

Short version

We do not store your data. Keys are encrypted in your browser cookie. Creatives, texts and drafts pass through the server to Meta or to your model provider and are not saved.

Meta token

You paste the token on the Setup step. The server checks it with one request to the Graph API, encrypts it with AES-256-GCM and returns it as an HttpOnly cookie for 1 hour.

The server decrypts the cookie for each request to Meta and does not write the token anywhere. Disconnecting deletes the cookie.

Model key

The key of OpenRouter, Groq, NVIDIA, OpenAI, Google or Anthropic is kept in the same encrypted cookie. The server uses it only with the provider you chose: to check the key (the provider’s model list) and to send your brief.

The provider receives the brief, the texts, the landing link, the account currency and minimum budget, the names, sizes and durations of the files, and the draft without Meta IDs: names of campaigns, ad sets and ads, countries, ages, genders, interest names, budgets, dates, placements, goals, formats, buttons and your choices (special ad categories, Advantage+ audience, multi-advertiser ads, creative enhancements); from a source campaign also the texts of its creatives and the kind of kept targeting. It also learns the interface language, the typed default countries, budget and objective, and whether a pixel, lead forms and a catalog are available (yes or no). It does not receive the files (except the reduced images below), the token or the IDs of the account, audiences, forms and catalogs. The provider’s own terms apply to that data: some free or trial keys allow the provider to use prompts to improve its models, so keep personal data out of briefs.

Texts from images: only after you click “Write texts from images”, or “generate texts and the draft” while there are no texts of your own, up to four images (the frame for a video) go to the provider as JPEG copies reduced to 512 px in your browser, with the brief and the link. The server forwards them and keeps nothing.

Creatives and texts

Images and videos stay in your browser tab until you run Check in Meta or publish. Then each file goes through the server to Meta and is not saved. Closing the tab discards the draft.

Cookies and browser storage

Session cookie with the encrypted keys and a flag that a Meta account is connected. Both live 1 hour. Local storage keeps only the theme and the builder’s interface settings: simple or advanced mode, the open blocks, the preview placement. No drafts, texts, files or keys.

Analytics

When it is turned on, Cloudflare Web Analytics counts visits in aggregate, without cookies and without identifying you.

Rate limits

To stop abuse, Cloudflare counts requests per IP address (per /64 network for IPv6) for about a minute. The service does not store addresses.

Error reports

When the server fails, we receive the error code, route, method name and Cloudflare data center through a Telegram bot. Tokens, keys, account IDs, briefs and texts are never included.

Hosting

The service runs on Cloudflare Workers. Cloudflare processes network requests as the hosting provider.

Legal bases

Your token, drafts and files are processed to provide the service you request: performance of a contract (GDPR Art. 6(1)(b)).

Rate limits, security and error reports rely on our legitimate interest in a safe service (Art. 6(1)(f)).

Transfers

Cloudflare and the model providers may process data in the United States and other countries. Cloudflare does so under its data processing addendum; the model provider’s terms apply under your own key.

How long

The server stores nothing. The session cookie ends after 1 hour, rate limit counters after about a minute. Error reports contain no personal data.

Your rights

You may ask for access, correction, deletion, restriction, objection and portability, and complain to a data protection authority. The service keeps no personal data, so disconnecting and closing the tab removes everything. Write to runads@dzhfrv.com.

Contact

Questions and requests: runads@dzhfrv.com.