Privacy Policy

Last updated: 14 May 2026 Effective date: 14 May 2026

This Privacy Policy describes how Reko Design Studios ("we," "us," or "our") collects, uses, stores, and shares information when you use the Blur It Chrome extension ("the Extension"). By installing or using the Extension you agree to the practices described below. If you have any questions, contact us at support@blur-it.app.

1. Who We Are

Blur It is a privacy-utility Chrome extension that lets you blur sensitive content on any webpage. Useful for screen sharing, demos, recordings, and tutorials. The Extension is developed and maintained by Reko Design Studios, a sole-proprietor business registered in Nigeria (CAC-registered).

2. Summary (Plain English)

We use the information described above only for the following purposes:

• We do not see, read, transmit, or store the contents of the webpages you blur. All blurring happens locally inside your browser.

• We do not track your browsing history, the URLs you visit, or the websites you use the Extension on.

• We do collect a limited set of data to operate the free trial, validate paid licenses, count usage against your trial quota, and improve the product. Every category is itemised below.

3. Information We Collect

We collect only the data described in this section. We do not collect anything else.

3.1 Information you provide to us

• Email address - Provided voluntarily when you start a free trial during onboarding. Used as your trial identifier and for transactional and product communication related to the trial.

• License key - Provided by you when you activate a paid license inside the Extension.

Feedback content - Optional text, reason codes, and feedback type that you submit through in-Extension feedback prompts (for example, the uninstall feedback form).

3.2 Information generated automatically

• Anonymous user ID — A random identifier generated by our backend when a trial is started. It is used to associate trial usage and product events with your trial without exposing your email in subsequent requests.

• Usage events — Limited product analytics tied to the anonymous user ID: trial start, first successful blur (activation), each blur applied during the trial, completion of purchase, and timestamps for these events. We do not capture what you blurred, the contents of the page, the URL, or any identifying page metadata.

• Trial quota counters — A numeric count of blurs remaining during a free trial (default 10).

• Usage events — Limited product analytics tied to the anonymous user ID: trial start, first successful blur (activation), each blur applied during the trial, completion of purchase, and timestamps for these events. We do not capture what you blurred, the contents of the page, the URL, or any identifying page metadata.

• Local preferences — Your in-Extension settings: blur intensity, toolbar visibility, "keep blurs on reload" preference, and smart-blur category toggles (email, financial, numeric patterns). These remain on your device.

• Install metadata — Install timestamp and a "first blur" timestamp used to compute activation metrics. These remain on your device; only an aggregate timeToActivateMs value is sent with the activation event.

3.3 Information we explicitly do NOT collect

• The text, images, or any other content of the webpages you visit or blur.

• The URLs of the websites you visit.

• Your browsing history.

• Your IP address (we do not log or store IP addresses; standard network logs at our hosting providers may temporarily record them — see Section 6).

• Screenshots. The Extension may use the browser's tabs.captureVisibleTab API for local in-browser features only; captured frames are processed locally and are never transmitted to our servers.

• Personal data of any kind beyond what is listed in Sections 3.1 and 3.2.

4. How We Use Your Information

We use the information we collect only for the following purposes:

• To operate the Extension and its free trial. Your email and the anonymous user ID let us track remaining trial blurs and reconcile trial state between your device and our backend.

• To validate paid licenses. Your license key is sent to our payment providers (Polar.sh and, for legacy customers, LemonSqueezy) to verify entitlement.

• To improve the product. Aggregate, anonymous usage events (such as activation rate and trial-to-paid conversion) help us understand how the Extension is used.

• To communicate with you. We may use your trial email to send transactional messages (trial status, purchase receipts) and product communications related to your use of Blur It. You can unsubscribe at any time using the link in any such email.

• To collect feedback. When you voluntarily submit feedback (including at uninstall), we use it to improve the Extension.

• To comply with legal obligations. We may use or disclose information where required by law.

We do not sell your data. We do not use your data for advertising. We do not use your data to build user profiles for resale or targeting. We do not transfer your data to third parties for purposes unrelated to the operation of the Extension.

5. Where Your Data Is Stored

• On your device — Local preferences, install metadata, trial counters, and your license key are stored via the Chrome storage.sync API. If you are signed into Chrome with sync enabled, this data is synchronised across your Chrome profile by Google. You can clear it at any time by removing the Extension or by clearing extension data in Chrome settings.

• On our backend — Trial email, anonymous user ID, trial quota state, event logs, and feedback are stored on Supabase, our hosted-database provider, in the United States.

• With our payment providers — License keys and payment metadata are stored by Polar.sh and (for legacy customers) LemonSqueezy.

6. Third-Party Services We Share Data With

We share specific, limited categories of data with the following sub-processors strictly for the purposes described. We do not share data with anyone else.

6.1 Supabase (hosted database and serverless functions)

• Data shared: Trial email, anonymous user ID, event types and metadata, feedback content, trial quota state.

• Purpose: Hosting our backend, storing trial state, recording product events and feedback.

• Location: United States.

• Privacy policy: https://supabase.com/privacy

6.2 Polar.sh (payments and license issuance)

• Data shared: License key (sent for validation); payment and billing information (collected by Polar at checkout, not by us).

• Purpose: Processing purchases and validating license keys.

• Location: United States / European Union.

• Privacy policy: https://polar.sh/legal/privacy

6.3 LemonSqueezy (legacy payments and license validation)

• Data shared: License key (sent for validation only, for customers who purchased before our migration to Polar.sh).

• Purpose: Validating legacy license keys.

• Location: United States.

6.4 Tally.so (uninstall feedback form)

• Data shared: When you uninstall the Extension, your browser may open a Tally-hosted feedback form with the following query parameters: anonymous user ID, current tier (trial / pro / unlicensed), and the number of trial blurs used. No license key is passed. You are under no obligation to fill out the form.

• Purpose: Collecting voluntary uninstall feedback so we can improve the Extension.

• Location: European Union.

6.5 Email delivery (transactional and product email)

If you provide your email during the trial, we use a transactional email service to send trial-related and product messages. Contact us at support@blur-it.app for the current provider. We do not share data with advertising networks, data brokers, or analytics platforms beyond what is described above.

• Purpose: Hosting our backend, storing trial state, recording product events and feedback.

• Location: United States.

• Privacy policy: https://supabase.com/privacy

7. Data Retention

• Local data on your device is retained until you uninstall the Extension or clear extension data in Chrome.

• Trial email and anonymous user ID are retained on our backend for as long as the trial account exists, and for up to 24 months after the last recorded event for the purposes of fraud prevention, refund handling, and account recovery. You can request earlier deletion at any time (see Section 8).

• License records (license key, purchase history) are retained for the duration of the license plus the period required by applicable tax and consumer-protection law (typically 6–7 years).

• Feedback submissions are retained indefinitely in anonymous form. We will delete or further anonymise feedback associated with you on request.

When you start a free trial, your email is sent to our backend (Supabase) so we can issue you an anonymous user ID and track your remaining trial blurs. When you purchase or activate a paid license, your license key is sent to Polar.sh, and (for legacy customers) LemonSqueezy, solely to validate your entitlement. These exchanges do not include browsing history, page content, or any information beyond what is needed to operate the trial or verify the license.

7. What We Do Not Do

• We do not collect browsing history.

• We do not read, transmit, or store the content of the webpages you visit.

• We do not track you across websites.

• We do not sell your data, and we do not share it with anyone for advertising or marketing purposes. The only third parties we share data with are the sub-processors listed in Section 4, who help us operate the extension.

• We do not use third-party analytics services (such as Google Analytics, Mixpanel, or similar) that build user profiles or track behaviour across sites.

8. Your Rights

Depending on where you live, you may have the right to:

• Request a copy of the personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your data ("right to be forgotten").

• Object to or restrict certain processing.

• Withdraw consent for trial communications at any time.

• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@blur-it.app with your trial email and your request. We will respond within 30 days.

If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with specific data-subject rights (including GDPR, UK GDPR, and CCPA/CPRA), the rights above apply to you. California residents additionally have the right to non-discrimination for exercising their privacy rights. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

9. Security

We protect your data using HTTPS/TLS for all transmission between the extension and our backend or any third-party service, authenticated and scoped access to our Supabase backend, least-privilege access to license and payment data at our payment providers, and Chrome's built-in storage.sync API for local data, which is encrypted in transit by Google.

No method of transmission or storage is perfectly secure. We take reasonable steps to protect your data but cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify affected users in accordance with applicable law.

10. International Data Transfers

Our backend (Supabase) and several of our sub-processors are located in the United States. If you access the extension from outside the United States, your data will be transferred to, stored, and processed in the United States and other jurisdictions where our sub-processors operate. By using the extension, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.

11. Children's Privacy

Blur It is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact support@blur-it.app and we will delete it.

12. Permissions Used by the Extension

The Extension requests the following Chrome permissions. We use each one only for the purpose described.

• activeTab — Lets the Extension act on the page you are currently viewing when you click the toolbar icon or use the keyboard shortcut. Used to apply blurs to that page locally.

• scripting — Lets the Extension inject the content script that performs blurring into the active page.

• storage — Lets the Extension save your preferences, trial state, and license locally via chrome.storage.sync.

• alarms — Lets the Extension run periodic, lightweight tasks (re-checking license validity and reconciling trial state with the backend).

• Host permission for https://*.supabase.co/* — Required to communicate with our backend at yuwbeeidzcvmdphrfdem.supabase.co for trial start, event recording, and feedback submission.

• Content scripts running on all URLs — Required so that the Extension can blur sensitive content on any webpage you choose. The content script does not transmit page content; all blurring is local.

Blur It complies with Chrome's "Limited Use" policy: we use, transfer, and disclose user data only for the purposes described in this Privacy Policy, and only as permitted by Chrome Web Store policy.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the extension after an update means you accept the revised policy.

14. Contact

If you have questions about this Privacy Policy or want to exercise any of the rights described in Section 9, contact us at: support@blur-it.app. For privacy-specific requests, please include "Privacy Request" in the subject line. We will respond within 30 days. Reko Design Studios, the developer of Blur It, is a sole-proprietor business registered in Nigeria.