Privacy Policy
Last updated: 26 October 2026
1. Who we are
Auths is an Ireland-based project building an advertising network that helps advertisers reach real people, publishers earn from advertising, and users share in the value they help create.
The controller responsible for the personal data described in this policy is YO! TIGER LTD, trading as Auths. You can contact us about privacy or exercise your data protection rights at privacy@auths.xyz.
This policy explains how we handle personal data collected through auths.xyz, partner.auths.xyz, Auths account services, and our enquiries and business development activities.
2. Information we collect
Information you give us
Depending on how you interact with Auths, we collect:
- Registration and account information: your email address, account identifiers, information you add to your account, and your communication and privacy preferences.
- Enquiry information: your name, email address, telephone number and country code, publication, charity or company name, website address, country, and anything you include in your message.
- Business relationship information: your role, organisation, requirements, meeting notes, correspondence, proposals and records of our discussions.
- Support information: the details you provide when asking for help or raising a concern.
- Permission records: your consent choices, withdrawals and marketing preferences.
Please avoid including sensitive personal information in general enquiry forms.
Information generated when you use our services
We process technical information such as IP addresses, browser and device information, request timestamps, pages requested, error records and security logs to operate and protect our websites.
For account sign-in, we process authentication and session information. Auths supports email sign-in links and passkeys. Where you use a passkey, we store the public credential information needed to verify your sign-in. Any fingerprint or facial recognition used by your device to unlock that passkey stays within the device’s authentication system; Auths does not receive it through the passkey process.
Where you use enabled advertising or rewards features, we process the relevant viewing and interaction events, ad and publisher identifiers, timestamps, account associations, verification results, preferences, and reward or cause allocation records needed to operate those features.
Information from other sources
In our sales and partnership activities, we may obtain relevant business contact information from company websites, professional profiles, events, referrals, introductions and colleagues at your organisation.
When we contact you using information obtained elsewhere, we will explain its source and why we are contacting you, either in that communication or through accompanying privacy information.
3. How we use information
We use personal data for the following purposes and on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Respond to enquiries, arrange demonstrations and discuss potential partnerships | Our legitimate interests in responding to requests and developing relevant business relationships. |
| Create and administer accounts, authenticate sign-ins and provide requested account features | Performance of our contract with you, where necessary to provide the service you request. |
| Maintain relationships with contacts at publishers, advertisers, agencies, charities and other organisations | Our legitimate interests in managing business relationships. |
| Record eligible activity and administer rewards or cause allocations where those features are enabled | Performance of our contract with you, to the extent necessary to provide the feature you request. |
| Protect our services, investigate misuse, detect automated or fraudulent activity and resolve technical problems | Our legitimate interests in operating secure, reliable services and protecting Auths, users and partners. |
| Send optional newsletters and promotional updates | Your consent where required, or our legitimate interests where applicable marketing law permits the communication. |
| Use optional analytics or advertising tracking technologies | Your consent where required. |
| Meet legal obligations or handle legal claims | Compliance with applicable law, or our legitimate interests in establishing, exercising or defending legal rights, as appropriate. |
Where we rely on legitimate interests, we consider the effect on your rights and reasonable expectations. These interests do not override your rights automatically.
Required form fields are needed to handle your request or provide the relevant service. Without them, we may be unable to respond or provide that service. Other information is optional.
4. Partner enquiries and sales communications
If you submit a publisher, charity or other partner enquiry, we store your submission and send a notification to the Auths inbox used to manage enquiries. We use your information to respond, understand your requirements and follow up on the potential relationship.
Submitting an enquiry does not, by itself, subscribe you to a general marketing newsletter.
We may contact relevant business representatives about Auths where permitted by applicable marketing law. We do not treat a publicly available email address as automatic consent to marketing.
You can stop direct marketing at any time by using an unsubscribe option, replying to the message or contacting us at the address above. This includes any profiling related to direct marketing. We may retain the minimum information needed to ensure we do not contact you again against your wishes.
Essential account or security messages may still be sent while you use the service.
5. Who we share information with
We use service providers to host and operate our websites, store information, deliver emails and help protect our services. Our technical providers include:
- Vercel, for website and application hosting.
- Neon, for database services.
- Resend, for account emails and enquiry notifications.
Where an anti-bot check is displayed on a form, its provider also processes technical information needed to perform that check.
Business correspondence and sales records are also processed through the email and business administration services we use to manage enquiries and relationships.
Access is limited to people and providers who need the information for the relevant purpose. Providers processing information on our behalf must act under appropriate data protection terms.
We may disclose information to professional advisers or competent authorities where necessary for advice, legal obligations, disputes or the lawful protection of rights.
Submitting a partner enquiry does not authorise us to pass your contact details to advertisers, publishers or charities for their own marketing.
6. Cookies and similar technologies
We use cookies and similar storage technologies to support requested functions such as secure sign-in and session management.
Where optional analytics, advertising or other non-essential tracking technologies are used, we seek consent before activating them where required by law. Information about the particular technologies and the available choices is provided where they are offered.
You can withdraw consent using the relevant consent control. You can also manage cookies through your browser, although blocking essential cookies may prevent some requested features from working. Deleting a cookie does not by itself withdraw consent already recorded elsewhere.
7. International processing
Our providers may process personal data outside Ireland and the European Economic Area, including in the United States, through their infrastructure, support operations or authorised subcontractors.
Where a transfer outside the EEA requires a transfer mechanism, we rely on an applicable European Commission adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, with additional protections where necessary.
You can contact us for information about the safeguards relevant to your data and how to obtain a copy.
8. How long we keep information
We keep personal data for as long as needed for the purpose for which it was collected:
- Enquiries and potential partnerships: while responding to the enquiry and while there is a reasonable prospect of relevant follow-up, assessed against the progress of discussions, the time since meaningful contact and any request to stop.
- Account information: while needed to provide your account, followed by any limited period necessary to complete closure, resolve outstanding matters or meet legal obligations.
- Business relationship records: during the relationship and afterwards where needed for contractual, accounting or legal purposes.
- Technical and security records: for the period needed to diagnose problems, investigate abuse and protect the service, taking account of the nature and seriousness of an incident.
- Consent and opt-out records: for as long as needed to demonstrate compliance and respect your choices.
We delete or anonymise information when it is no longer needed. Some information may remain temporarily in backups until those backups expire under the relevant provider’s retention cycle. Where we must retain information after a deletion request, we will explain the reason.
9. Security and automated checks
We use technical and organisational measures appropriate to the information we hold and the risks involved. No online service can guarantee absolute security.
Automated security checks may help identify suspicious requests or sign-in activity and may prevent a request from completing. If you believe a check has incorrectly blocked you, contact us so we can investigate.
This policy does not authorise new uses of your information for personalised advertising, public blockchain publication or decisions with legal or similarly significant effects. Any such processing requires its own assessment and the specific information and choices required by law before it begins.
10. Your rights
Depending on the circumstances, you have rights to:
- Obtain access to your personal data and information about its use.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Restrict processing.
- Receive a portable copy of qualifying information.
- Object to processing based on legitimate interests.
- Withdraw consent where processing relies on consent.
You can object to direct marketing at any time, without giving a reason.
Withdrawal of consent does not affect processing that was lawful before you withdrew it.
Contact us at the email address in section 1 to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month. If a lawful extension is needed because a request is complex or you have made multiple requests, we will explain this within that first month.
You can complain to the Irish Data Protection Commission at dataprotection.ie, or to the relevant supervisory authority where you live or work or where an alleged infringement occurred. You do not have to contact us first.
11. Changes to this policy
We will update this policy when our practices change and show the latest update date above. Where a change requires additional notice or consent, we will provide it before the new processing begins.