Global Compliance: GDPR (EU/UK), CCPA/CPRA (California), and DPDP (India) • Last updated: September 2026
1. Commitment to Data Minimization
Steal The Screen ("Platform", StealTheScreen.com) operates on strict principles of privacy by design and data minimization. We only collect the minimal technical and creative information strictly necessary to broadcast your takeover and deliver transactional service alerts:
Advertiser Creative Data: Destination URL, title, headline, image URL, category, and public social handle (e.g., @yourbrand). This data is displayed publicly on the live billboard and permanently archived in the Hall of Fame.
Transactional Notifications: Optional email address used exclusively for dispatching instantaneous dethronement alerts and payment receipts.
Telemetry & Security Logs: IP address, user-agent, and access timestamps collected strictly for rate limiting, DDoS defense, and bot prevention.
Zero Financial Credential Storage (PCI-DSS): All payment processing is conducted via certified PCI-DSS Level 1 compliant Merchants of Record (including Dodo Payments). We never store raw credit card numbers, CVVs, or bank details on our servers.
2. Lawful Grounds for Processing
Contractual Necessity (GDPR Art. 6.1.b)Processing your ad creative and payment webhook to fulfill the purchased live screen broadcast and airtime SLA.
Legitimate Interests (GDPR Art. 6.1.f)Preventing click fraud, blocking malicious redirects, defending against cyber attacks, and maintaining platform uptime.
3. Your International Privacy Rights
Under GDPR, CCPA, and DPDP, all users have the right to request access, rectification, or permanent erasure of their personal data (including notification emails and transaction histories). We do not sell, rent, or monetize your personal data to third-party data brokers.
4. Privacy Officer & Grievance Redressal
To exercise your rights or contact our designated Data Protection & Grievance Officer, email: privacy@stealthescreen.com.