Privacy Policy

1. Controller

Daniel Klose, Talstraße 62, 55218 Ingelheim, Germany
Phone: +49 171 1656423 · Email: info@daniel-klose.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Hosting

AdLoop Cloud runs on European infrastructure: the MCP service on servers operated by Hetzner Online GmbH (Germany), the dashboard and database on Laravel Cloud in the AWS Frankfurt region (Germany). When you visit the website, IP addresses, meta and communication data, and website access data may be processed.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in secure, efficient provision of the service (Art. 6(1)(f) GDPR).

3. Your rights

You have the right at any time to obtain information about your stored data, rectification of inaccurate data, erasure (unless retention obligations apply), restriction of processing, data portability, and withdrawal of any consent you have given. Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object on grounds relating to your particular situation. You may also lodge a complaint with the competent supervisory authority.

4. Cookies

Cookies are small data packets stored on your device. We use the following categories:

• Necessary cookies: required for operation (session, CSRF protection). Always active.
• Analytics cookies: for website analytics (Google Analytics). Only with your consent.
• Marketing cookies: for advertising and remarketing (Google Ads). Only with your consent.

Google Consent Mode v2: We use Google Consent Mode v2. The analytics and marketing scripts are technically loaded but respect your cookie settings: without your consent, no cookies are set and no personal data is collected. In that case only anonymized, cookieless signals are transmitted that do not allow conclusions about individual users.

Open cookie settings

5. Registration

When you register, we store your name, email address, and password (encrypted) to provide the platform. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

6. Your Google account connection

The core of the service is connecting your Google accounts (Google Ads, Google Analytics, Google Tag Manager, Google Search Console, Google Merchant Center) to AI tools of your choice.

• Stored data: one OAuth refresh token (encrypted; the key is held outside the database), your Google email address, the permissions you granted, and the account IDs you selected (Google Ads customer ID, GA4 property, GTM container, Search Console property).
• No storage of campaign or analytics data: AdLoop Cloud operates as a pass-through. Advertising and analytics data are fetched from Google at your AI tool's request and forwarded directly, without being stored by us.
• Change log: write changes to your advertising accounts are logged for accountability (type of change, time, affected account).
• Disconnect anytime: disconnecting in the dashboard revokes the access at Google and deletes the stored token.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Google API Services — Limited Use: AdLoop Cloud's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Google Analytics

We use Google Analytics 4 (GA4) to analyze website usage. We employ Google Consent Mode v2: the analytics scripts are technically loaded but set no cookies and store no personal data without your consent. Personalized tracking only takes place after your explicit consent.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Data collected: page views, session duration, devices and browsers, approximate location (country/region). IP addresses are automatically anonymized by GA4.
• Legal basis: consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings.
• Data transfers: transfers to the USA are possible. Google is certified under the EU-US Data Privacy Framework.
• More information: policies.google.com/privacy

8. Processors

• Hetzner Online GmbH (Germany) – hosting of the MCP service
• Laravel Cloud (USA, data processing in the AWS Frankfurt region) – dashboard and database
• Google Ireland Limited (Ireland) – Google Ads / Google Analytics APIs (at your instruction) and website analytics (only with consent)

All processors were selected carefully and meet the requirements of the GDPR.

If you use AdLoop Cloud as a processor for data you are responsible for yourself (e.g. as an agency managing client accounts), our data processing agreement under Art. 28 GDPR applies. It is concluded electronically (Art. 28(9) GDPR) and takes effect upon registration and use — no signature required. You can view it at any time and save it as a PDF.

9. SSL encryption

This site uses SSL/TLS encryption to protect data transmission. You can recognize an encrypted connection by the "https://" in the address bar and the lock icon.