This policy explains what the RuntimeAds extension, web application, and APIs collect and how we use it. RuntimeAds is operated by Cognitobit Innovations Private Limited (“we”), the controller of the personal data described here. RuntimeAds measures idle AI-agent attention to power a developer revenue share and an advertising marketplace. We designed the pipeline to collect operational signals — not the content of your work.

What we collect

Account & identity: Google account email and a developer/advertiser ID; authentication tokens.
Install identity: a random, pseudonymous install ID for your extension instance, used to attribute impression and click events to your account for earnings.
Signup & install origin: the IP-derived country (and, for the extension, your timezone) at account creation and on install, retained for fraud review and admin visibility only — never used to block access.
Operational telemetry: events such as login, runtime started, and dashboard opened; runtime health counters (queue/cache sizes, heartbeat timestamps).
Attention signals: agent session start/wait/working markers and hook metadata (event name, normalized session ID, tool category, source).
Render telemetry: allocation, surface, campaign, and display/impression/ click events used to verify and bill impressions.
Advertiser campaign content: brand, headline, icon, and destination URL you submit.

What we never collect

We do not collect your prompts, AI responses, terminal output, source code, file contents or paths, repository or branch names, environment variables, secrets, or clipboard contents. Hook payloads are stripped to metadata before they ever leave your machine.

Local storage on your machine

Your sign-in credentials are kept only in your editor’s built-in secure storage, never in plain text.
Ad content and operational state are cached locally and integrity-protected, so tampered data is rejected rather than used.
Processing happens on your machine; only the operational signals described above are ever sent to our servers. The extension reads your editor’s AI session activity locally only to detect timing (when an agent starts, waits, or resumes) — no transcript content (prompt, response, code, file path, or tool name) is ever transmitted.

Analytics & cookies

On the web application we may use privacy-respecting product analytics (e.g. Google Analytics 4) only after you consent via the cookie banner. You can decline; essential session functionality does not depend on analytics cookies.

Third parties

Google — sign-in (OAuth) and, with consent, analytics.
Payment/payout providers — used to verify identity (KYC) and move developer payouts; subject to their own privacy terms.

Retention & your choices

We retain account, ledger, and payout records as needed to operate the Service and meet legal/financial obligations.
You can uninstall the extension at any time, which restores patched editor surfaces and stops local collection.
To request access to or deletion of your personal data, contact us using the address below. Some records (e.g. financial ledgers) may be retained where required.

Contact

Privacy questions can be sent to [email protected], or reach us on X (@devanujhere). For common questions see the FAQ, and report issues or request features on GitHub. RuntimeAds is operated by Cognitobit Innovations Private Limited. See also our Terms of Service.

Privacy Policy