What we collect
We collect the minimum needed to run the service: your email address and name (account), order and payment status (payments are handled by Paddle, our Merchant of Record — we never see or store your card details), a hashed copy of your license key, and hashed device identifiers with browser/OS labels used to enforce activation limits. If you sign in with Google, we receive your name and email address from your Google account — nothing else.
What the extension sends
The BlurSite extension never reads, stores, or transmits the content or addresses of the pages you visit or blur; blurs and settings stay in your browser. Unless you switch it off (extension Settings → Privacy), it sends usage stats to our server: a random install ID, the extension version, browser, operating system, language, time zone, plan, setup steps reached, and counts such as blurs made (and how), styles used, days used, and how many different sites you blurred on (a count, never which sites). These stats are anonymous unless you choose to sign in from the extension, which links them to your account’s name and email; you can sign out in the extension’s Settings at any time. We store the country your request came from, never your IP address. If you choose to answer the optional setup question (your role, use case, how you found BlurSite, and an email for product updates) or send a message from the extension’s Help form, we receive what you entered. When you remove the extension, a short optional survey asks why.
Cookies
We use only essential cookies: secure session cookies that keep you signed in to your account. We do not use advertising or third-party tracking cookies.
How we use your data
To provide the service, deliver license keys, process payments and refunds, respond to support requests, and understand how the extension is used so we can improve it. An email you give in the extension’s setup question is used only for occasional product updates, and you can unsubscribe anytime. We do not sell your data or use third-party advertising trackers.
Service providers we rely on
Your data is processed by a small set of infrastructure providers, each only for its purpose: Supabase (account authentication, database hosting, and abuse/rate-limit protection), Paddle (checkout, payment processing, tax, and invoicing as our Merchant of Record — Paddle collects your billing details and payment information directly), Resend (transactional email), and Vercel (application hosting). We do not share your data with anyone else.
Data retention
Account data is kept while your account exists. If you delete your account, your profile, license, and device records are deleted; order and payment records are retained only as long as required for financial and tax compliance, then removed. Extension usage stats, survey answers, and support messages are kept while they are useful for improving BlurSite; ask us through the support page to delete them.
Your rights (GDPR)
You can delete your account at any time from Dashboard → Settings, which permanently removes your personal data as described above. To request a copy of the data we hold about you (data export), or for any other privacy request, contact us via the support page — we respond within 30 days.
Security
Data is encrypted in transit (TLS) and at rest. License keys and device identifiers are stored only as cryptographic hashes. Access to production systems is restricted and audited.
Contact
For any privacy question or request, reach us through the support page on this site. We will update this policy as the service evolves and change the date above when we do.