Privacy Policy

Last updated: August 27, 2026

Highsky is operated by Streamlined Solutions SRL, Vasile Alecsandri 72, Baia Mare, Romania ("Highsky", "we", "us", or "our"). This policy explains how we process information when you explore the Highsky world, interact with advertising spots, or purchase a campaign.

1. Data controller

The data controller is Streamlined Solutions SRL. Privacy questions and data-rights requests can be sent to support@highsky.com.

2. Information we process

Information you provide

When purchasing or managing an advertising campaign, you may provide:

company and campaign information, including a company name, tagline, destination URL, brand colour, and company domain;
contact and billing information collected during Stripe Checkout, such as name, email address, billing address, and tax information;
messages and information you send when requesting support or reporting a campaign.

We do not receive or store your complete payment-card number. Stripe processes payment credentials on its hosted Checkout page.

Usage and advertising metrics

Highsky may record limited events needed to operate the marketplace and report aggregate campaign performance, including:

the campaign or advertising spot viewed or clicked;
an event timestamp and event type;
the Highsky page or placement associated with the event;
coarse technical information needed for security, rate limiting, and aggregate measurement.

We do not store raw visitor IP addresses in campaign click or impression records. We do not build visitor profiles from advertiser clicks. If a temporary keyed hash is needed to prevent abuse or duplicate counting, it is kept only for the shortest operational period required and is not used to identify a person.

Standard hosting and security infrastructure may process request metadata, including an IP address and user agent, transiently in server logs. IP addresses can constitute personal data under applicable law.

3. Cookieless analytics

Highsky configures PostHog in permanent cookieless mode with person profiles disabled. Highsky does not use PostHog to identify visitors and does not store a PostHog visitor identifier in cookies, local storage, or session storage.

PostHog may receive an IP address and user agent to calculate a server-side, privacy-preserving daily hash for audience measurement. PostHog states that the salt changes daily and the IP address is stripped before enrichment. This produces less detailed analytics and does not allow Highsky to follow the same visitor across days.

Highsky does not currently place non-essential analytics or advertising cookies on its own domain. We therefore do not display a cookie-consent banner. If we later introduce non-essential browser storage or tracking, we will update this policy and add consent controls where required.

4. Payments and Stripe

Purchases use Stripe-hosted Checkout. Stripe processes payment, billing, fraud-prevention, and transaction information as our payment processor or under the roles described in Stripe's own notices. Stripe may use cookies or similar technologies on its hosted domains for payment, security, and fraud prevention. Highsky receives transaction status, customer contact details, amounts, and identifiers needed to activate the purchased campaign, maintain financial records, prevent duplicate fulfilment, and provide support.

5. Why we process information

We process information to:

provide the interactive sky and advertising marketplace;
validate campaigns, bids, and destination URLs;
process one-time payments and transfer spot ownership;
report aggregate clicks and impressions to advertisers;
prevent fraud, abuse, duplicate events, and security incidents;
send transactional purchase or campaign-status messages;
meet accounting, tax, legal, and regulatory requirements.

Depending on the processing, our legal bases include performance of a contract, steps requested before entering a contract, legitimate interests in operating and securing Highsky, compliance with legal obligations, and consent where the law specifically requires it.

We do not sell personal data. We may disclose limited information to providers that help us operate Highsky, including:

hosting and infrastructure providers;
PostgreSQL database hosting;
Stripe for payments and fraud prevention;
Resend for transactional email;
PostHog for cookieless aggregate analytics;
a favicon or company-logo provider when resolving public company imagery.

We may also disclose information when required by law, to protect legal rights, or in connection with a corporate transaction. International transfers are handled using legally recognised safeguards where required.

7. Retention

Campaign, bid, ownership, payment, and accounting records are retained for the periods required to operate the marketplace, resolve disputes, prevent fraud, and comply with legal obligations. Aggregate advertising metrics may be retained longer when they no longer identify a visitor. Support records are deleted or anonymised when no longer needed.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive your personal data, object to certain processing, and lodge a complaint with a supervisory authority. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Contact support@highsky.com to exercise a right. We may need to verify your request before acting on it.