Privacy policy

The short version: what you make in AdTechKit stays on your computer. Your account only holds your email address and plan. Nothing is sent to an AI service until you click to send it, and customer lists never leave your browser.

Last updated 1 October 2026

Who we are

AdTechKit is run by Jamie Hallitt, trading as AdTechKit, in the United Kingdom. For the information described here, we are the "data controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can contact us at [email protected].

You can use the free tools without an account. If you sign in, we keep only what's described under Your account. We never ask for your name.

What stays on your computer

Building, resizing and downloading your ads all happen inside your web browser. These are saved in your browser's own storage on this computer, and we never receive them:

your designs, images, logos and fonts, and your recent images
your brand kits
your campaigns in the Campaign Builder, and your drafts in the AI Ad Generator, AI copy writer and Ad previews
your settings in the free tools, such as the UTM Builder and Daily budget calculator
customer lists you load into the matched audience formatter: they're cleaned in your browser and are never saved or sent anywhere
the access code for AI features, while they're in testing

Because this information is only on your computer, it doesn't move between your devices, and clearing your browser's data deletes it.

Your account

You sign in with a link we email to you, so there's no password. When you sign in, we keep:

your email address, your plan, the date you joined and when you last signed in
a record of each browser you're signed in on, so you stay signed in for up to 90 days; we store only a scrambled fingerprint of the sign-in cookie, never the cookie itself
for each sign-in link we send: the email address it went to, a scrambled fingerprint of the link, and a scrambled fingerprint of the internet address that asked for it (to stop anyone flooding people with emails). These are deleted after 2 days.

This is stored in Cloudflare's database service (Cloudflare D1). Your designs, brand kits, campaigns and customer lists are not part of your account: they stay in your browser as described above.

We keep your account until you delete it. Our legal basis is "contract": we need these details to provide the account you asked for.

What's sent, and to whom

Some features need help from another company. Each one tells you what it sends and to whom, and nothing is sent until you click to go ahead.

AI design, reference ads, brand guidelines, copy suggestions, the AI copy writer, A/B headlines and audience suggestions: Go to Anthropic (the company behind Claude) through our server. What's sent depends on the feature: for example, a picture of your design and its words, a reference ad, your brand guidelines, or the brief you typed. Anthropic doesn't use this to train its models. Anthropic's privacy centre
AI images: The description of the image you want goes to Google (Gemini) through our server. We use Google's paid Gemini service, so Google doesn't use it to improve its products; Google keeps requests for up to 55 days to check for misuse. Gemini API terms
Stock photos: Your search words go to Unsplash through our server, and the photos you see load straight from Unsplash's image server, so Unsplash can see your internet address, as with any website. When you use a photo, we tell Unsplash which one, as its rules require. Unsplash's privacy policy
Sign-in emails: Your email address and the sign-in email go to Resend, the service that delivers our emails. Resend keeps a log of the emails it sends for up to 30 days. Resend's privacy policy
Hosting: The website and its account database run on Cloudflare. Like any web host, Cloudflare handles your internet address and basic technical details to deliver the pages and keep them secure. Our server keeps daily totals of how often each AI feature is used, to enforce fair-use limits; these totals don't identify you. Cloudflare's privacy policy

We don't sell your information, and we don't use it for advertising.

Our legal basis is "legitimate interests": providing the feature you asked for, and keeping the service secure and fair to use. These companies may handle information outside the UK, using safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.

When paid plans arrive, payments will be handled by a payment company, and this policy will be updated before then to explain what it receives.

Cookies

AdTechKit doesn't use cookies for tracking or advertising, and there are no third-party trackers on the site. The only cookie is set when you sign in: it keeps you signed in on that browser for up to 90 days, and is removed when you sign out. It's strictly necessary for the account you asked for, and the browser storage described above is only used to make the tools work for you, so no cookie banner is needed. If we add privacy-friendly visitor statistics in future (counting visits without tracking individuals), we'll say so here first.

Your rights

Under UK data protection law you can ask to see, correct or delete personal information we hold about you, object to how we use it, or ask us to limit it. As we keep almost nothing about you, most requests can be answered quickly: email [email protected].

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

AdTechKit is for businesses and is not intended for anyone under 18.

Deleting your data

Everything you make in AdTechKit is stored in your own browser, so you can delete it at any time:

To delete your account, open Your account (sign in first if you need to), then choose Delete my account. This deletes your email address, plan and sign-in records straight away.
Delete single designs from the Ad Builder's Open list, and single campaigns from the Campaign Builder.
To delete everything, clear this website's data in your browser. In Chrome or Edge: click the icon to the left of the web address, choose Site settings, then Delete data. In Safari: Settings, Privacy, Manage Website Data, choose AdTechKit, then Remove. In Firefox: click the padlock, then Clear cookies and site data.

We don't keep copies of your work on our servers. If you've used an AI feature and want us to ask the AI provider to delete what was sent, email [email protected] with the date and the feature, and we'll help.

When AdTechKit can connect to your LinkedIn or Meta ad account (planned for later), this section will explain how to disconnect it and delete what that connection stores.

Changes to this policy

If we change how we handle information, we'll update this page and the date at the top before the change happens.

Contact

Jamie Hallitt, trading as AdTechKit, United Kingdom. Email: [email protected]