Gizlilik & KVKKKullanım KoşullarıMesafeli Satışİade & İptalPrivacy (EN)

Privacy Policy

Last updated: September 13, 2026

This Privacy Policy explains how Ads Kalkan (“Ads Kalkan”, “we”, “us”), available at https://www.adskalkan.com and operated by Yavuz Selim Aykaç, collects, uses, stores, shares and deletes information when you use our click-fraud protection service for Google Ads. Contact: destek@adskalkan.com. A Turkish version (KVKK notice) is available at /yasal/gizlilik.

1. What Ads Kalkan does

Ads Kalkan helps advertisers stop wasting their Google Ads budget on fake clicks. Our customers add a small tracking script to their website. The script evaluates visits coming from ads, detects bots, repeated clicks, VPN/proxy and data-center traffic, and lists suspicious IP addresses in the customer's dashboard. If the customer chooses, these IP addresses are added to their Google Ads campaigns as IP exclusions so that ads are no longer shown to them.

2. Information we collect

  • Account information (our customers): email address, a salted hash of the password (we never store plain passwords), subscription plan and payment status, and the website names and domains the customer adds.
  • Visitor / click information (visitors of our customers' websites): IP address, browser user-agent, referrer, landing page URL, Google click identifier (gclid) and UTM parameters, country (derived from the IP address), time spent on the page and simple interaction signals (whether the mouse moved or the page was scrolled). We do not collect names, contact details, form inputs or keystrokes of visitors.
  • Google user data (only if the customer connects Google Ads): see Section 4.
  • Technical data: a single strictly necessary session cookie to keep customers signed in. We do not use advertising or third-party tracking cookies.

3. How we use information

  • to provide the service: detect invalid and fraudulent ad clicks and show the results in the dashboard;
  • to block fraudulent IP addresses on the customer's website and, when enabled, in Google Ads;
  • to protect other customers in the same business sector with a shared list of IP addresses that were independently flagged as fraudulent (“sector pool”; only IP addresses and a risk score are shared, never account or Google data);
  • to manage accounts, billing and customer support, and to comply with legal obligations.

We do not sell personal information and we do not use it for advertising or profiling.

4. Google user data (Google Ads API)

When a customer clicks “Connect Google Ads” and grants consent through Google OAuth, Ads Kalkan requests the Google Ads scope https://www.googleapis.com/auth/adwords. We access Google user data only as follows:

  • Data accessed: the list of Google Ads customer (account) IDs the user can access, the names and IDs of the campaigns in the selected account, and campaign performance metrics (clicks, impressions, cost, invalid clicks) for the account health report.
  • Actions performed:adding IP addresses that Ads Kalkan flagged as fraudulent for that customer's website as negative “IP block” campaign criteria (IP exclusions). This happens only after the customer connects the account and can be switched off in the dashboard at any time.
  • Storage and protection: we store the OAuth refresh token and the selected Google Ads customer ID in our database, which is encrypted at rest and reachable only over encrypted (TLS) connections. Campaign metrics are fetched on demand to render the report and are not stored permanently.
  • Sharing: Google user data is never sold, never shared with or transferred to third parties, never used for advertising, and never used to train AI/ML models. It is visible only to the customer who connected the account.
  • Retention and deletion:when the customer clicks “Disconnect Google Ads”, we revoke the token with Google and delete it from our database immediately. Deleting a website or the account also deletes the related Google data. Customers can also revoke access at any time from Google Account permissions, or ask us to delete their data by emailing destek@adskalkan.com (completed within 30 days).

Ads Kalkan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Service providers

We use the following processors only to run the service: Vercel (hosting), a managed PostgreSQL provider (database), iyzico (payments) and IP intelligence lookups for VPN/proxy detection, which receive only the IP address. They process data on our instructions and under appropriate safeguards.

6. Retention

Account data is kept while the account is active. Click and visitor data is kept only as long as the related website remains in the customer's account and is deleted together with the website or account. Sector pool entries expire after 90 days.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and object to its processing, by contacting destek@adskalkan.com. Residents of Türkiye also have the rights listed in Article 11 of Law No. 6698 (KVKK); residents of the EEA/UK have equivalent rights under the GDPR.

8. Children

Ads Kalkan is a business service and is not directed to children under 16.

9. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be communicated to customers by email.

10. Contact

Ads Kalkan — https://www.adskalkan.com — destek@adskalkan.com