Keitaro Expands Telemetry Collection and Data Disclosure Rules

Keitaro has expanded the technical data it automatically collects from customer installations under updated Terms of Use effective October 13, 2026.

The self-hosted advertising tracker now defines a category called Operational Telemetry that includes server infrastructure IP addresses, configured domain names, installation identifiers, licence activation data and the names users assign to campaigns, offers and flows.

Keitaro, operated by Estonia-based Apliteni OÜ, says the information can be correlated across different installations to detect policy violations and attempts to circumvent sanctions.

For affiliate and performance marketing businesses, including companies working in iGaming, the change means infrastructure and campaign-level metadata stored inside a self-hosted Keitaro installation can now be transmitted back to the software provider.

Telemetry Includes Domains and Campaign Names

The updated terms specify that Operational Telemetry can include machine_id installation identifiers, server IP addresses, licence key activation and validation signals, configured domains and technical information about an installation.

Campaign, offer and flow names are also explicitly included.

Keitaro says the telemetry does not include advertising creative assets, traffic data, targeting parameters or information about end users processed through the tracker.

The distinction is significant because the company is not claiming access to the full advertising traffic passing through a customer's self-hosted installation.

However, domains and internal campaign naming can still reveal information about how an affiliate or advertiser has structured its infrastructure and activities.

Users Cannot Block Telemetry

Customers are prohibited from blocking, filtering, falsifying or otherwise circumventing Operational Telemetry or licence validation.

Deliberate interference is classified as a material breach of the agreement.

If telemetry transmission fails for ordinary technical reasons, Keitaro must notify the customer and provide between seven and 14 calendar days to restore it before treating the failure as a breach.

The company also has broader powers to suspend or terminate accounts and licence keys where it reasonably suspects fraud, sanctions circumvention, false identities, unlawful activity or other material compliance risks.

Data Can Be Stored for Up to Three Years

Under the new terms, standard Operational Telemetry can be retained for up to two years after collection.

Where information relates to suspected policy violations, fraud investigations, sanctions issues or other enforcement proceedings, retention can be extended to three years.

Information may be kept for longer where applicable law requires it.

Keitaro also reserves the right to respond to legitimate requests from government authorities, courts and law enforcement agencies, including by disclosing user data.

The clause does not mean customer information will routinely be sent to authorities. Disclosure is tied to legitimate official requests and applicable legal obligations.

Keitaro Can Request Source of Funds and Beneficial Owner Data

The updated agreement also strengthens Keitaro's verification powers.

The company can require additional KYC, KYB or enhanced due diligence where it identifies relevant compliance risks.

It may specifically request documents establishing the source of funds and the ultimate beneficial ownership of tracked advertising campaigns where there are reasonable grounds to suspect violations of EU restrictive measures or when competent authorities request the information.

Customers must receive at least seven calendar days to provide requested documentation. Keitaro can grant one additional seven-day extension following a reasoned request.

Failure to complete verification can result in suspension and, depending on the circumstances and applicable deadlines, termination. Where an agreement is terminated because verification was not completed, previously paid licence fees are generally non-refundable.

For iGaming affiliates using Keitaro, the practical change is that a tracker previously viewed primarily as self-hosted infrastructure now has a more explicit compliance layer linking installations, domains, campaign metadata and customer verification.