LEGAL

Privacy policy

Last updated: October 1, 2026

Fiero Ads helps businesses turn their brand into games, playable ads and videos, and shows them which ads bring customers through the door. This policy explains what we collect, why, who receives it, how long we keep it and how you can use your rights.

1. Who we are

Fiero Ads is operated by Alab Dananeer ("we", "us"), Amman, Jordan. We decide how and why the information described here is processed. For anything about your data, including your rights below, write to our data protection contact at [email protected].

2. What this policy covers

• this website (ads.playfiero.com)
• Fiero Ads Studio, where businesses build and share their games (ads.playfiero.com/studio)
• the game pages players open from a link or an ad (ads-play.playfiero.com)
• the social and ad accounts a business connects to Studio

Each business that publishes a game with us runs its own shop and decides its own prize. What happens when a player visits that shop is covered by the business's own privacy policy.

3. Your consent

We process personal data with your consent, given for the purposes described in this policy:

• business users give it when they create a Studio account, and again when they connect a social or ad account
• players are told about it on each game page, and give it when they claim a voucher

You can withdraw your consent at any time by writing to [email protected], or by disconnecting an account or deleting your Studio account. Withdrawing doesn't affect what we did before. We may still keep information where the law requires it.

We don't profile you and we don't make decisions about you by automated means, apart from anti-abuse limits such as one voucher per browser and limits on how many requests a device can send.

4. Businesses using Studio

• Your account: your name and email address from your Google account, or your phone number if you sign in with a phone code; your time zone and notification settings.
• Your business: business name, type, city, branches and the brand content you add (logos, photos, menus, products, prices, fonts, music). If you give us your Lezzoo store link, we read the store's public details (name, logo, menu and prices) from Lezzoo.
• Your team: names, emails or phone numbers of the people you invite, and their roles.
• What you make: games, prizes, voucher codes you upload, videos, share links and campaign bookings.
• API keys: we keep only a scrambled (hashed) copy of each key.
• Security records: sign-in times, device, browser and IP address, and a record of every change made in your account.

We use this to run Studio, build your brand kit, games and videos, show your results, keep your account secure and contact you about your account. We send you marketing messages only if you agree to them, and you can stop them at any time.

To build brand kits, games and videos, we send your brand content (never your team's contact details) to the AI services that generate them.

Our staff may open your Studio to help you, at your request or to fix a problem. Everything they change is recorded.

5. Players

Players never sign in, and we never ask them for a name, phone number or email address. When someone opens a game page, we record:

• a random ID for their browser, and a random ID for the visit (see Cookies and device storage)
• the ad or link that brought them: campaign tags (UTM values) and the click IDs that ad platforms add to links (for example fbclid, ttclid, gclid, ScCid)
• the referring page, the browser, operating system, language and screen size
• the approximate country and city, worked out from the IP address when the visit arrives; we then shorten the IP address before storing it
• what happens in the game: loaded, started, finished, score, and whether a voucher was offered, claimed or used
• vouchers claimed, and when and where a voucher was redeemed (for example the branch and order amount the business reports)

We use this to run the game and its voucher limits, to stop abuse, and to show each business which of its ads and links led to plays, claims and redemptions. A business sees totals and the voucher codes used in its own shop, never information that identifies a player.

These records are pseudonymous: they carry random IDs and click IDs, not your name. A click ID can be linked to your account by the ad platform that created it.

Measuring ads. When a player claims or uses a voucher, we may send a record of it to the ad platform the business used (Meta, TikTok, Google or Snap), with the click ID from the ad and the time. The platform uses it under its own privacy policy to measure and deliver ads. We send it only to the business's own ad account on that platform, never your name or contact details. You can control how platforms use this in their ad settings: Meta, TikTok, Google, Snapchat.

6. Connected social and ad accounts

A business can connect its Facebook Page, Instagram, TikTok, YouTube and Snapchat accounts to Studio, so we can publish its game videos for it. The business signs in with that platform and chooses which Pages, profiles or channels to share. We then receive:

• the account's ID, name, username and profile picture, and the Pages, profiles, channels or ad accounts the business chose to share
• access tokens that let us act for the business within the permissions it granted
• the IDs, links, status and (where the business turns it on) view and reach figures of the posts we publish for it

We use these only to do what the business asks: publish or schedule its posts, show whether they were published, and show how they did. We never post without the business's instruction, never read private messages, never sell this data, and never use it to train AI models or send it to AI services. It's stored by the service providers named in section 9.

The permissions we request appear on each platform's consent screen. For example, on Meta we ask to list your Pages and publish to them (pages_show_list, pages_read_engagement, pages_manage_posts) and to publish to your Instagram professional account (instagram_business_basic, instagram_business_content_publish); on TikTok we ask to read your basic profile and publish videos (user.info.basic, video.publish). We'll update this list before we ask for more.

Access tokens are encrypted when stored. You can disconnect an account in Studio, or remove Fiero Ads in the platform's own settings (see Data deletion). After you disconnect in Studio, or the platform tells us access was removed, we delete that account's tokens and details within 7 days. If you remove access on the platform's side and it doesn't tell us, we delete them within 30 days of noticing that access stopped working.

7. Google, YouTube, Meta, TikTok and Snap

YouTube. Fiero Ads uses YouTube API Services. If you connect a YouTube channel, you agree to be bound by the YouTube Terms of Service, and Google's use of your data is described in the Google Privacy Policy. You can remove Fiero Ads' access at any time in your Google security settings. We refresh or delete the YouTube data we store at least every 30 days.

Google API data. Fiero Ads' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta and TikTok. When you connect these accounts, their own policies also apply: the Meta Privacy Policy and the TikTok Privacy Policy.

Snap. If you connect Snapchat, the Snap Privacy Policy is incorporated into this policy by reference. We send Snap the videos and captions you choose to publish, and read back their status and view counts.

We don't let third parties serve ads in Fiero Ads.

8. Cookies and device storage

We use no advertising trackers. What we store on your device:

Our network provider, Cloudflare, may set a strictly necessary security cookie to protect the service from abuse. You can delete these items in your browser's settings. If you do, the game treats you as a new player, but the events already sent stay with us for the period in section 11.

9. Who receives information

We don't sell personal information. It is received by:

• Service providers that run parts of Fiero Ads for us, under contract: Netcup (servers, Germany), Supabase (database, Frankfurt, Germany), Cloudflare (network and file storage, worldwide), Google Firebase (sign-in, United States), and the AI services that generate brand kits, games and videos. We'll give you the current list on request.
• The business whose game a player played: totals and the voucher codes used for that business's own games.
• The platforms a business connects, when we publish for that business or send measurement records to its own ad accounts (section 5).
• Authorities, when the law requires it, or to protect people or the service.

If our business is sold or merged, we'll tell you before your information moves to the new owner, and ask for your consent where the law requires it.

10. Transfers outside Jordan

Your information is stored and processed outside Jordan: in Germany (European Union), in the United States, and in the other countries where our service providers and the connected platforms operate. These countries may not offer the same protection as Jordanian law. By using Fiero Ads after reading this policy, and by giving the consents in section 3, you agree to these transfers. We use providers that are bound by contract to protect your information.

11. How long we keep information

• Raw game events: 13 months, then only totals are kept.
• Vouchers and redemptions: as long as the business's account exists, so its results stay correct.
• Connected-account tokens and details: until you disconnect, then deleted within the times in section 6.
• Business accounts and the record of changes in them: until the account is deleted.
• Backups: overwritten on their normal cycle after deletion.

12. Security and breaches

Connections are encrypted, access tokens and secrets are encrypted when stored, API keys are kept only as hashes, and staff access is limited to people who need it. If a breach could seriously affect you, we'll tell you promptly and inform the authorities as the law requires. Please report anything suspicious to [email protected].

13. Your rights and complaints

You can ask us, free of charge, to:

• tell you what information we hold about you and give you a copy
• correct it, or restrict how we use it
• delete it (see Data deletion)
• transfer it to you or to someone else in a common format
• stop processing it, or withdraw your consent
• tell you if a breach affects it

Write to [email protected]. We'll reply within 30 days, or sooner where the law requires. We may need to confirm the request comes from you; a player can do this by giving us their voucher code.

Complaints. Send complaints to the same address and we'll answer within 30 days. You can also complain to the Personal Data Protection Unit at Jordan's Ministry of Digital Economy and Entrepreneurship.

14. Age

Studio is for adults acting for a business. Our game pages aren't aimed at children. If you're under 18, ask a parent or guardian before you claim a voucher. A business can also set a higher minimum age for its prizes. If you think a child has given us personal information, contact us and we'll delete it.

15. Changes and contact

If we change this policy, we'll update the date at the top and tell business owners in Studio or by email before a significant change applies. Questions: [email protected].