This policy describes how AdsGame collects, uses, and protects information about you when you use our Amazon Ads optimization service.
1. Who We Are
AdsGame is operated by MAI Publishing, a California sole proprietorship. Questions about this policy can be directed to ads@adsgame.io.
2. Information We Collect
| Category | What we collect | Why |
|---|---|---|
| Account info | Name, email address, password (bcrypt-hashed) | Authentication and account management |
| Amazon Ads data | Campaign names, keyword bids, spend, impressions, clicks, orders, search terms via the Amazon Advertising API | Running the optimizer on your behalf |
| KDP royalty data | Monthly royalty statements downloaded from your KDP account (if you provide credentials) | Calculating your target TACoS and royalty floor for bid decisions |
| Amazon OAuth tokens | Refresh tokens issued by Amazon's Login with Amazon (LWA) service | Making API calls to Amazon Advertising on your behalf |
| KDP credentials | KDP email and password (if provided) | Downloading your KDP royalty reports automatically |
| Billing data | Subscription plan, billing status, Stripe customer ID | Managing your subscription (payment details held by Stripe, not us) |
| Usage data | Portal login timestamps, settings changes, approval/rejection actions | Account health monitoring and service improvement |
3. How We Use Your Information
We use the information we collect to:
- Operate the Amazon Ads optimizer on your behalf (bid changes, negatives, harvest, dayparting)
- Generate and deliver weekly and monthly performance reports
- Alert you to significant TACoS changes, budget anomalies, or account issues
- Manage your subscription and process payments via Stripe
- Provide customer support and respond to your inquiries
- Monitor account health to proactively flag issues before they compound
We do not sell your data, use it for advertising, or share it with third parties except as described below.
4. Data Sharing and Third Parties
| Third party | What they receive | Purpose |
|---|---|---|
| Amazon | API requests made using your OAuth token | Reading campaign data and writing bid changes on your account |
| Stripe | Email address, subscription plan, billing events | Payment processing and subscription management |
| SendGrid | Your email address and the HTML content of reports | Delivering weekly/monthly reports and transactional emails |
| Railway | Infrastructure hosting — your data resides on Railway's servers | Application hosting and database |
No other third parties receive your personal information or campaign data.
5. How We Protect Your Data
- Passwords are hashed with bcrypt and never stored in plaintext
- Amazon OAuth tokens are encrypted at rest using Fernet symmetric encryption (AES-128-CBC)
- KDP credentials are encrypted at rest using the same scheme and never logged
- All traffic is encrypted in transit via TLS (HTTPS)
- Database access is restricted to the application server; no public access
6. Data Retention
We retain your data as long as your account is active. If you cancel your subscription:
- Your account data, campaign history, and performance snapshots are retained for 30 days, then permanently deleted
- Amazon OAuth tokens and KDP credentials are deleted immediately upon account termination
- Billing records are retained as required by applicable law (typically 7 years)
You may request immediate deletion of your account and data by emailing ads@adsgame.io.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information via your portal settings
- Delete your account and all associated data
- Export your campaign performance data (contact us to request)
- Revoke Amazon access at any time via your portal settings or Amazon's security console
- Opt out of proactive outreach emails by contacting us
To exercise any of these rights, email ads@adsgame.io. We will respond within 30 days.
8. Cookies and Tracking
The AdsGame portal uses a single session cookie (portal_token) to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics SDKs. We do not track you across other websites.
9. Children's Privacy
The Service is intended for adults operating Amazon Advertising accounts. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy periodically. We will notify you of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact
Privacy questions or requests: ads@adsgame.io