Separate from ad measurement (which is off), the manager's sign-in does one piece of security processing: it counts failed sign-in attempts per network address to block passphrase guessing. The address itself is not stored; what is stored for up to 15 minutes is a keyed one-way hash of it plus the count. That hash is pseudonymous, not anonymous: it does not contain the address, but anyone holding the key could test candidate addresses against it. The counter deletes itself after 15 minutes, is used for nothing else, and is never combined with ad traffic. It exists only because the manager has a sign-in.
The card renders inside a shadow root, which keeps its markup and styles separate from the page that carries it. A shadow root is not a security sandbox: the script runs with the carrying page's normal privileges. The no-cookie, no-storage claims on this page describe the code as published today, verified in pre-live review - they are not enforced by the visitor's browser.
AdOrbit is hosted on Cloudflare Pages. To deliver any website, Cloudflare's servers process technical request data such as IP addresses, and Cloudflare keeps its own logs under its own privacy policy. We do not receive per-visitor logs from Cloudflare; the dashboard shows us only aggregate hosting statistics (total requests and data transferred).
Cards link to book pages on Google Play Books via a short redirect on this domain. Once you leave AdOrbit, Google's own policies apply on play.google.com.
AdOrbit is run by High Definition Learning Group.