Privacy policy

Last updated 26 October 2026

Who is responsible

Vyntro ApS, Gyldenlundsvej 47, 2920 Charlottenlund, Denmark, runs PrebidHub and is the controller for the data described here. Contact: anand@mamuka.dk.

This website, prebidhub.com

This website sets no cookies, runs no analytics or tracking and loads no third-party scripts or fonts. Our hosting provider Vercel processes your IP address and request details to deliver the pages and keep the service secure.

The application, app.prebidhub.com

The application is for invited publisher teams. For each account we store:

• name, email address, role and workspace, and the time of the last login
• the password, only as a one-way hash, never in readable form
• invitations (email, name, role) and password reset links, both stored as hashes and valid for a limited time
• a change history of each site's configuration, with who made the change and when
• an audit log of account and publishing actions with the IP address and time, kept for 400 days for security

The application keeps your login session and your light or dark theme choice in your browser's local storage. It sets no cookies and runs no analytics or tracking scripts.

We use this data to provide the service you or your organisation signed up for and to keep it secure (GDPR Art. 6(1)(b) and (f)). Account data is kept while the account exists and deleted on request.

Emails

Invitation and password reset emails are sent through Resend. Resend receives the recipient's email address and the message.

Data from publishers' web pages

A publisher can turn on two optional reports in the loader script that runs on its own pages. Both are off by default, and the publisher decides whether to use them and how consent is handled on its pages.

• Auction events for a sampled share of page views: bidder, ad unit, bid price, response time, Prebid version, configuration version, an auction id and a random page view id. No IP address and no page address are stored with them. They are kept as raw events for 14 days, then only as hourly totals, deleted after 400 days.
• Error reports when the loader fails: the type of error, the message and the page's address without its query string. Kept for 90 days.

IP addresses of these requests are held in memory for up to a minute to limit abuse and are not stored. When a publisher runs an A/B test, the loader keeps the visitor's test group in the browser's local storage so the visitor stays in one group.

Service providers

These companies help us run PrebidHub and process data on our behalf. Some of them are based in the United States.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Write to anand@mamuka.dk. You can also complain to a data protection authority, in Denmark the Datatilsynet (datatilsynet.dk).