Advertising that proves
a match without
revealing the person.

In the default mode, ads are personalised and delivered without sharing any of your data with third parties. A second, opt-in mode lets you hand a specific advertiser a specific fact — your size to a clothing brand, your location to a restaurant, your taste in music to a concert promoter — and be rewarded for it. You choose what, and with whom. Nothing else moves.

A zero-knowledge ad server sends your device an encrypted pool of candidate ads. Your device picks the relevant one locally and renders it — the server never sees your data, and never learns which ad matched. A peer-to-peer network routes every message so your IP address is never exposed either. Under the GDPR an IP address is personal data; here it never leaves the network.

Today’s AdTech builds a profile by guessing from your browsing history — and inference has been shown to be inaccurate. This solution is active: you declare what you’re interested in, so the ads you see are strongly aligned with what you actually said, not with what an algorithm assumed about you.

Granting consent, revoking it, delivering an ad, settling the bill — each action generates a cryptographic, non-repudiable proof, stored in an auditable repository (a blockchain with smart contracts). If an advertiser keeps using your data after you revoke consent, there is undeniable evidence of it. The privacy guarantee is auditable, not just promised — by you, and by third parties.

Users are compensated for interacting with ads and for any data they choose to share. And the design is deliberately light: simulations deliver ads in tens of milliseconds — inside programmatic advertising’s few-hundred-millisecond budget — while consuming under 2.5% CPU and under 0.1% memory. It works on battery-powered handheld devices, not just servers.

Can advertising be personalised and settled without any party — advertiser, exchange, or anyone else — learning who the person is? The paper’s answer is yes, and it proves it cryptographically. The privacy guarantee becomes a proof, not a promise.