Definitions

The following capitalized terms have the meanings set forth below throughout this Privacy Policy:

• Platform The Validator Ent. streaming and ad-validation service accessible at validatorent.com and associated subdomains.
• User Any individual who creates an account, accesses, or interacts with the Platform in any role (Artist, Listener/Validator, Advertiser, or Admin).
• HitL Signal Human-in-the-Loop interaction data — micro-behavioral input captured during Validation Gates to confirm authentic human attention.
• Proof-of-Tune The Platform's proprietary heartbeat and attention verification protocol, which processes periodic listener response data to confirm active, human engagement with content.
• Validation Gate An interactive checkpoint presented during audio streams that requires a User to demonstrate active attention before an ad impression is recorded as verified.
• Credits Platform-native value units accumulated through verified participation in Paid Ad impression cycles. Credits have no monetary equivalent and are subject to the Terms of Service.
• Personal Data Any information that identifies or could reasonably be used to identify a specific User, as defined by applicable privacy law.

Account & Profile Data

When you register on the Platform or update your profile, we collect the following information:

HitL Interaction Signal Collection

Validator Ent. is built on the premise of Human-in-the-Loop (HitL) verification. To operate the Platform's core fraud-prevention function, we collect interaction signals during Validation Gate sessions.

Data Collected During Validation Gates

• Challenge response: Your answer to the presented attention check (e.g., math captcha), including response time in milliseconds.
• Session continuity: Whether the session remained active throughout the gate (tab focus, browser state).
• Gate outcome: Pass/fail result of the validation, stored as a boolean per impression event.
• Gate token: A short-lived cryptographic token issued upon successful gate completion, used only to authorize the associated account action and discarded thereafter.
• Dwell time: Total duration of engagement with the gate session, in milliseconds.
• Insertion point: The context in which the gate was presented (e.g., auth_gate, stream_gate).

Why We Collect This

Advertisers on the Platform pay for human-verified impressions. HitL signals are the technical foundation of that guarantee. Without collecting this data, Validator Ent. cannot fulfill its core value proposition to advertisers or protect Artists and Validators from credit-diluting fraud.

This collection is disclosed in accordance with FTC guidelines on material data collection and is referenced in the Platform's Ad Transparency page.

Proof-of-Tune Heartbeat & Attention Data

Proof-of-Tune is Validator Ent.'s proprietary attention verification protocol. During an active listening session, the Platform periodically checks whether you remain an engaged, active listener.

Heartbeat Data Collected

• Heartbeat timestamps: Periodic signals confirming active session state, logged at intervals during playback.
• Track progress markers: Playback position checkpoints used to verify that the stream was played through (not skipped or scripted).
• Attention verification events: Timestamped records of each Validation Gate pass within a session, linked to the associated track and ad slot.
• Session ID: A temporary, non-persistent identifier for the listening session, used to correlate heartbeat events. Stored in localStorage and cleared at session end.

What Proof-of-Tune Data Is Not Used For

• Identifying your location beyond coarse regional context (if provided by your browser and consented to)
• Building a behavioral advertising profile
• Sale or transfer to third parties for advertising or analytics purposes
• Any inference about your physical or mental state

Ad Impression Auditing & Verification Data

To provide advertisers with independently auditable, human-verified impression records, we collect and retain the following data for each ad impression event on the Platform:

Impression audit records are the foundation of the Platform's advertiser billing and verification guarantee. These records may be provided to advertisers in aggregated, anonymized form to substantiate impression delivery. Individual User identities are never disclosed to advertisers.

Session, Cookie & Tracking Data

The Platform uses the following session and tracking mechanisms:

Local Storage

• Authentication token (JWT): Stored in localStorage upon login. Used to authenticate all API requests. Contains your user ID, role, and expiration time. Cleared on logout.
• Session ID (validatorent_session_id): A temporary ID used to correlate ad impression events within a browsing session. Not linked to your account identity in external logs.
• Interest preferences: Onboarding interest selections (e.g., Music Discovery, Ad Validation) stored temporarily for processing during your onboarding flow.

Server-Side Sessions

• Gate challenge state: Math captcha challenge IDs are stored server-side in a short-lived in-memory cache (expires in 5 minutes) to validate gate responses.
• OAuth state parameters: Short-lived CSRF protection tokens used during OAuth authentication flows (where applicable). Expire immediately after use.

Cookies

Validator Ent. does not use advertising tracking cookies. Authentication is handled via localStorage JWTs. Standard browser cookies may be set by third-party CDN providers (Cloudflare) for security and DDoS mitigation purposes — these are outside our control and governed by Cloudflare's privacy policy.

Analytics

We use Polsia platform analytics to collect aggregate, anonymized usage data (page views, feature engagement). This data does not include Personal Data and is used solely for product improvement.

Media Storage — Cloudflare R2

Artist-uploaded media files (tracks, cover art, and other content) are stored on Cloudflare R2, an S3-compatible object storage service operated by Cloudflare, Inc.

What Is Stored

• Audio files: Tracks uploaded by Artists in supported formats (MP3, WAV, FLAC, etc.).
• Cover artwork: Image files associated with uploaded tracks or artist profiles.
• Other media: Any additional files uploaded by Users through Platform upload flows.

Storage Metadata We Track

• File URL on R2 (public CDN path)
• File key (internal storage path)
• File size in bytes
• MIME type / file format
• Upload timestamp and uploader User ID
• Association to a track or profile record

Media files you upload remain associated with your account. Upon verified account deletion (see §10), publicly accessible media may be removed at our discretion, subject to any third-party caching or archival that has already occurred.

Third-Party Ad Network Data Sharing

Validator Ent. operates a programmatic ad waterfall that routes Paid Ad impressions through third-party ad networks. The following partners currently participate in the Platform's ad delivery infrastructure:

HitL Verification Data & Ad Partners

The Platform's HitL verification results (pass/fail) may be transmitted to Paid Ad network partners as a verified impression signal — confirming that the impression was delivered to a real human. This signal does not include any User identity data. It is a binary quality signal only.

VAST & Programmatic Delivery

Audio and video ads delivered via VAST (Video Ad Serving Template) may include ad-network-level tracking pixels embedded in the VAST manifest. These pixels are governed by the respective ad network's privacy policy. Validator Ent. does not control the data collected by these pixels beyond what is contractually prohibited by our network agreements.

How We Use Your Data

We process your data for the following purposes, each grounded in a lawful basis:

• Service Delivery Account management, playback functionality, Validation Gate operation, Artist dashboard access, Advertiser dashboard access, credit tracking.
• Fraud Prevention HitL signal analysis, Proof-of-Tune heartbeat processing, anomaly detection, and anti-gaming enforcement as described in the Terms of Service.
• Ad Delivery & Verification Serving ads in the correct format and slot, recording verified impressions, providing advertisers with verified delivery confirmations.
• Platform Improvement Aggregate analytics on feature usage, error monitoring, performance optimization. No individual profiling for this purpose.
• Legal Compliance Maintaining audit logs required for advertiser billing disputes, responding to lawful data requests, enforcing Terms of Service.
• Communications Transactional emails (verification, security alerts, credit threshold notices). We do not send unsolicited marketing emails without opt-in consent.

Data Retention & Deletion Rights

Retention Schedule

Your Deletion Rights

You have the right to request deletion of your Personal Data. To submit a deletion request, contact us at Validatorent@mail.com with the subject line "Data Deletion Request" and include the email address associated with your account.

We will process verified deletion requests within 30 days. The following data categories are exempt from deletion due to legal or contractual obligations:

• Ad impression audit records (required for advertiser billing compliance — retained for 2 years)
• Consent records (required for regulatory compliance — retained for 5 years)
• Data subject to an active fraud investigation

Your Access & Portability Rights

You may request a copy of the Personal Data we hold about you by contacting us at Validatorent@mail.com. We will provide account data and consent records in a machine-readable format (JSON or CSV) within 30 days of a verified request.

Contact & Privacy Inquiries

For all privacy-related questions, requests, or concerns — including data access, deletion, correction, and third-party disclosure inquiries — contact us at:

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in Platform features, legal requirements, or data practices. Material changes will be communicated via email to registered Users at least 14 days before taking effect.

Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. Previous versions of this policy are available upon request.

For Terms of Service, visit: Terms of Service  ·  For ad disclosure information, visit: Ad Transparency