Advertising & Analytics Disclosure

Why this disclosure exists

A privacy tool that shows ads owes its users a plain explanation. SecretPNG (secretpng.com), operated by SecretPNG (legal entity to be confirmed before launch), is free to use. To help cover its costs, public informational pages may display advertising and may use limited analytics. This document states exactly where that happens, what gates it, and where it categorically never happens.

The dividing line: public pages versus the secure workspace

The site has two distinct zones with different rules.

Public informational pages — guides, landing pages, and similar content — may show Google AdSense ads and may use Google Analytics 4 and/or Cloudflare Web Analytics, subject to the consent rules below.

The secure workspace — every page under /app/*, where the tools actually run — never contains ads, analytics, third-party scripts, or marketing pixels. This is a deliberate design commitment: no third-party code executes in the environment where you handle files, passwords, and secrets, so no advertiser or analytics provider can observe anything about your tool usage there.

Google AdSense

Public pages may display ads served by Google AdSense. AdSense scripts are loaded only after you consent where consent is required; if you decline, ads served through those scripts do not load. Where Google offers non-personalized ad options — ads targeted by page context rather than by a profile of you — we use them.

Google acts under its own policies when serving ads. We do not pass Google any information about your use of the tools, because that activity happens in the workspace where Google's scripts are never present.

Google Analytics 4

We may use Google Analytics 4 on public pages to understand aggregate traffic: which guides are read, where visitors come from, and how pages perform. GA4 loads only after consent where required. It is never present in the secure workspace, so it cannot measure tool usage, file handling, or anything you do at /app/*.

Cloudflare Web Analytics

Public pages may also use Cloudflare Web Analytics, a measurement tool designed to avoid tracking individuals: it does not use cookies and does not build visitor profiles. We use it for aggregate page-level statistics. Like every other third-party component, it is excluded from the secure workspace.

The consent banner

Where consent is required, a banner on public pages asks before any consent-gated advertising or analytics script is loaded. Your choice is stored in a first-party consent-preference cookie or localStorage entry (see the Cookie Policy). You can change your choice at any time via the consent settings link in the site footer. Declining has no effect on tool functionality.

What we do not do

For clarity, SecretPNG does not:

• Sell personal information to anyone.
• Place ads, analytics, third-party scripts, or marketing pixels anywhere in the secure workspace (/app/*).
• Share anything about your tool usage with advertisers — we could not even if we wanted to, since tool activity happens locally in your browser.
• Use session-replay, fingerprinting, or cross-site tracking scripts of our own.
• Load consent-gated Google scripts before you consent, where consent is required.

Sponsored content and affiliations

At launch, SecretPNG's guides and informational content are not sponsored, and we do not accept payment for editorial recommendations. If that ever changes, sponsored content will be clearly labeled as such on the page where it appears, and this disclosure will be updated first.

How advertising relates to the privacy model

The honest framing: advertising funds the free service, and the architecture limits what advertising can ever learn. Ad and analytics providers can, at most, observe consented visits to public informational pages — the same pages any web crawler can read. They cannot observe file contents, passwords, secrets, secret-link ciphertext, or workspace behavior, because no third-party code runs where those exist.

Opting out

You can avoid consent-gated advertising and analytics entirely by declining the consent banner, and you can revisit that choice anytime via the footer link. Browser-level controls (content blockers, cookie settings, Global Privacy Control) provide additional layers, and using them does not violate our terms or degrade the tools.

Changes to this disclosure

If we add or remove an advertising or analytics provider, or change where these components may appear, we will update this disclosure and its effective date before the change takes effect. The commitment that the secure workspace stays free of ads, analytics, third-party scripts, and marketing pixels is a load-bearing promise of this product; any change to it would be a fundamental change to the service, announced prominently, not a quiet policy edit.

Contact and draft status

Questions about advertising or analytics can be sent to support@secretpng.com.

This document is a draft prepared for launch and requires review by qualified legal counsel before public launch.