GAM SentinelBack

Privacy Policy

Last updated: June 22, 2026

1. Introduction

This Privacy Policy explains how H&T GAMING LTD ("we," "us," or "our"), operating as GAM Sentinel ("the Platform"), collects, uses, discloses, and safeguards your information when you use our website at gamsentinel.com and our ad monitoring services. We are committed to protecting the privacy of our users and complying with applicable data protection laws including the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant legislation.

By accessing or using GAM Sentinel, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Data Controller

The data controller responsible for your personal data is:

  • Company: H&T GAMING LTD
  • Email: privacy@hntgaming.me
  • Website: https://hntgaming.me
  • Role: AdTech Solutions Provider

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

  • Full name and business name
  • Email address
  • Password (stored in hashed form only)
  • Role designation (Admin, Parent, Partner)
  • Google Ad Manager network codes (for API integration)

3.2 Google Ad Manager Data

When you connect your GAM account, we access the following data through the official Google Ad Manager API:

  • Ad performance metrics (impressions, clicks, revenue, eCPM, CTR, fill rate)
  • Ad unit configurations and inventory hierarchy
  • MCM child account information (network codes, names, statuses)
  • Geographic and device-level reporting breakdowns
  • Traffic quality indicators and viewability metrics

Important: We access this data solely through authenticated service accounts with read-only permissions. We do not modify your GAM configuration without explicit authorization for compliance actions you enable.

3.3 Usage Data

We automatically collect:

  • IP address and approximate geolocation
  • Browser type and version
  • Device type and operating system
  • Pages visited and features used within the Platform
  • Timestamps of access and session duration
  • Referral source

3.4 Communication Data

If you contact us via email or support channels, we retain the content of your messages, your email address, and any attachments for support resolution purposes.

4. How We Use Your Information

We use collected data for the following purposes:

  • Service delivery: To provide ad monitoring, alert generation, compliance automation, and reporting features
  • Account management: To authenticate users, manage permissions, and maintain account security
  • Alerting and notifications: To send smart alerts via email when anomalies or policy violations are detected
  • Analytics and improvement: To understand usage patterns and improve Platform features
  • Compliance: To enforce our Terms of Service and comply with legal obligations
  • Communication: To respond to inquiries, provide support, and send service-related updates

5. Legal Bases for Processing (GDPR)

Under GDPR, we process personal data based on the following legal bases:

  • Contract performance: Processing necessary to deliver our services per your subscription agreement
  • Legitimate interest: Fraud prevention, security monitoring, and service improvement where your interests are not overridden
  • Consent: For optional marketing communications (you can withdraw consent at any time)
  • Legal obligation: Where we are required to retain data by law

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Google APIs: To fetch your Ad Manager data (governed by Google's API Terms of Service)
  • Email services: SMTP providers for sending alert notifications
  • Legal authorities: When required by law, court order, or to protect our rights

6.1 Infrastructure & Hosting Providers

We use the following infrastructure providers for server hosting, data storage, and platform operations. Each provider is bound by their respective data processing agreements and privacy policies:

Data may be processed across multiple regions depending on service availability and redundancy requirements. All providers maintain SOC 2, ISO 27001, or equivalent certifications.

All third-party processors are bound by data processing agreements that require them to protect your data to the same standard we maintain.

7. Data Retention

  • Account data: Retained for the duration of your active subscription plus 30 days after account deletion request
  • Ad performance data: Retained per your plan tier (7 days to unlimited, depending on subscription)
  • Alert logs: Retained for 12 months from generation date
  • Support communications: Retained for 24 months after resolution
  • Usage analytics: Aggregated and anonymized after 90 days

8. Data Security

We implement enterprise-grade security measures including:

  • Strong encryption for all data in transit (TLS) and at rest
  • Token-based authentication with automatic rotation
  • Role-based access control (RBAC) with the principle of least privilege
  • Network and host-level firewalls with intrusion detection and prevention
  • Key-based server access with password authentication disabled
  • Regular security audits and continuous monitoring

9. Your Rights

Depending on your jurisdiction, you have the following rights:

  • Access: Request a copy of all personal data we hold about you
  • Rectification: Correct inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Limit processing of your personal data in certain circumstances
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: Where processing is based on consent

To exercise any of these rights, contact us at privacy@hntgaming.me. We will respond within 30 days (or as required by applicable law).

10. International Data Transfers

H&T GAMING LTD is registered in the United Kingdom. Our primary processing infrastructure is located in the European Union (Germany). The UK and EU maintain mutual adequacy decisions, ensuring lawful data transfers between both jurisdictions. If you access our services from outside the UK/EU, your data will be transferred to and processed in Germany. For transfers to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the UK International Data Transfer Agreement (IDTA) as appropriate.

11. Children's Privacy

GAM Sentinel is a business-to-business service. We do not knowingly collect personal data from individuals under 16 years of age. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users via email of material changes at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related inquiries: