Privacy Policy — Blur It

Last updated: 3 August 2026 Effective date: 3 August 2026

This Privacy Policy describes how Reko Design Studios ("we," "us," or "our") collects, uses, stores, and shares information when you use the Blur It Chrome extension ("the Extension"). By installing or using the Extension you agree to the practices described below. If you have any questions, contact us at support@blur-it.app.

1. Who We Are

Blur It is a privacy-utility Chrome extension that lets you blur sensitive content on any webpage. Useful for screen sharing, demos, recordings, and tutorials. The Extension is developed and maintained by Reko Design Studios, a sole-proprietor business registered in Nigeria (CAC-registered).

2. Summary (Plain English)

  • We do not see, read, transmit, or store the contents of the webpages you blur. All blurring happens locally inside your browser.

  • We do not track your browsing history, the URLs you visit, or the websites you use the Extension on.

  • We do use a product-analytics service (PostHog) to understand how people use the Extension itself — things like which onboarding screen was shown, whether a trial started, or when a purchase completed. These events are tied to an anonymous device ID, never to page content, URLs, or browsing history.

  • We do collect a limited set of data to operate the free trial, validate paid licenses, count usage against your trial quota, and improve the product. Every category is itemized below.

3. Information We Collect

We collect only the data described in this section.

3.1 Information you provide to us

  • Email address — Provided voluntarily when you start a free trial during onboarding. Used as your trial identifier and for transactional and product communication related to the trial.

  • License key or redemption code — Provided by you when you activate a paid license, or redeem a promotional code (for example, an AppSumo code), inside the Extension.

  • Feedback content — Optional text, reason codes, and feedback type that you submit through in-Extension feedback prompts (for example, the uninstall feedback form).

3.2 Information generated automatically

  • Anonymous device ID — A random identifier generated locally on your device when you install the Extension (it is not derived from or linked to your name, email, or any account). It is used to associate trial usage, purchase/checkout status, and the product-analytics events described below with your installation, without exposing your email in those requests.

  • Usage events — Limited product analytics tied to the anonymous device ID: installation, trial start, first successful blur (activation), each blur applied during a trial, checkout opened, purchase completed, and which onboarding screens and buttons were shown or clicked, along with timestamps for these events. We do not capture what you blurred, the contents of any page, the URL of any page, or any other page-identifying metadata.

  • Trial quota counters — A numeric count of blurs remaining during a free trial (default 10).

  • Aggregate promotion counters — A running, non-personal count of purchases made during time-limited promotions, used only to display how many spots remain.

  • Local preferences — Your in-Extension settings: blur intensity, toolbar visibility, "keep blurs on reload" preference, and smart-blur category toggles (email, financial, numeric patterns). These remain on your device.

  • Install metadata — Install timestamp and a "first blur" timestamp used to compute activation metrics. These remain on your device; only an aggregate timeToActivateMs value is sent with the activation event.

3.3 Information we explicitly do NOT collect

  • The text, images, or any other content of the webpages you visit or blur.

  • The URLs of the websites you visit.

  • Your browsing history.

  • Your IP address, as a matter of our own collection — we do not log or store it ourselves. However, some of the network calls described in Section 6 (for example, license-key validation and analytics events) are made directly from your browser to the relevant provider rather than routed through our own servers. Those providers may see your IP address as part of their own standard connection logs, independent of anything we collect or store.

  • Screenshots. The Extension may use the browser's tabs.captureVisibleTab API for local in-browser features only; captured frames are processed locally and are never transmitted to our servers.

  • Personal data of any kind beyond what is listed in Sections 3.1 and 3.2.

4. How We Use Your Information

We use the information we collect only for the following purposes:

  • To operate the Extension and its free trial. Your email and the anonymous device ID let us track remaining trial blurs and reconcile trial state between your device and our backend.

  • To validate paid licenses. Your license key is sent to our payment providers (Polar.sh and, for legacy customers, LemonSqueezy) to verify entitlement. AppSumo redemption codes are checked directly against our Supabase database.

  • To measure product usage. We send anonymous, aggregated interaction events (such as which onboarding screen you saw, whether a trial started, or when a purchase completed) tied to your anonymous device ID to PostHog, our product-analytics provider, so we can understand feature usage and improve the Extension. These events never include page content, URLs, or your browsing history, and are never used for advertising.

  • To communicate with you. We may use your trial email to send transactional messages (trial status, purchase receipts) and product communications related to your use of Blur It. You can unsubscribe at any time using the link in any such email.

  • To collect feedback. When you voluntarily submit feedback (including at uninstall), we use it to improve the Extension.

  • To comply with legal obligations. We may use or disclose information where required by law.

We do not sell your data. We do not use your data for advertising. We do not use your data to build user profiles for resale or targeting. We do not transfer your data to third parties for purposes unrelated to the operation of the Extension.

5. Where Your Data Is Stored

  • On your device — Local preferences, install metadata, trial counters, and your license key are stored via the Chrome storage.sync API. If you are signed into Chrome with sync enabled, this data is synchronized across your Chrome profile by Google. You can clear it at any time by removing the Extension or by clearing extension data in Chrome settings.

  • On our backend — Trial email, anonymous device ID, trial quota state, event logs, and feedback are stored on Supabase, our hosted-database provider, in the United States.

  • With our analytics provider — The anonymous usage events described in Section 3.2 are stored by PostHog, in the United States.

  • With our payment providers — License keys and payment metadata are stored by Polar.sh and (for legacy customers) LemonSqueezy.

6. Third-Party Services We Share Data With

We share specific, limited categories of data with the following sub-processors, strictly for the purposes described. We do not share data with anyone else. Where noted, a request is sent directly from your browser to the provider rather than through our servers — see the note in Section 3.3 about what that means for connection-level information like your IP address.

6.1 Supabase (hosted database and serverless functions)

  • Data shared: Trial email, anonymous device ID, event types and metadata, feedback content, trial quota state, AppSumo redemption codes (checked directly from your browser as well as from our backend), and the aggregate promotion counter described in Section 3.2.

  • Purpose: Hosting our backend, storing trial state, recording product events and feedback, and validating AppSumo codes.

  • Location: United States.

  • Privacy policy: https://supabase.com/privacy

6.2 PostHog (product analytics)

  • Data shared: Your anonymous device ID (as PostHog's "distinct ID") and the usage events described in Section 3.2 — for example, extension installed, trial started, checkout opened, purchase completed, and which onboarding screens or buttons you interacted with. No page content, URLs, or browsing history is ever included.

  • Purpose: Understanding how people use the Extension's own features and onboarding flow, and improving it accordingly.

  • Location: United States.

  • Privacy policy: https://posthog.com/privacy

6.3 Polar.sh (payments and license issuance)

  • Data shared: License key (sent for validation, in some cases directly from your browser); payment and billing information (collected by Polar at checkout, not by us); your anonymous device ID (included as checkout metadata so a completed purchase can be matched back to your installation).

  • Purpose: Processing purchases and validating license keys.

  • Location: United States / European Union.

  • Privacy policy: https://polar.sh/legal/privacy

6.4 LemonSqueezy (legacy payments and license validation)

  • Data shared: License key (sent for validation only, in some cases directly from your browser, for customers who purchased before our migration to Polar.sh).

  • Purpose: Validating legacy license keys.

  • Location: United States.

  • Privacy policy: https://www.lemonsqueezy.com/privacy

6.5 Tally.so (uninstall feedback form)

  • Data shared: When you uninstall the Extension, your browser may open a Tally-hosted feedback form with the following query parameters: anonymous device ID, current tier (trial / pro / unlicensed), and the number of trial blurs used. No license key is passed. You are under no obligation to fill out the form.

  • Purpose: Collecting voluntary uninstall feedback so we can improve the Extension.

  • Location: European Union.

  • Privacy policy: https://tally.so/help/privacy-policy

6.7 Email delivery (transactional and product email)

  • Data shared: Your trial email address, and enough status information (e.g., trial vs. purchased) to route the correct message.

  • Purpose: Sending trial-related and product messages if you provided your email during the trial.

  • Location: Depends on provider — contact support@blur-it.app for our current provider and its privacy policy.

We do not share data with advertising networks or data brokers.

7. Data Retention

  • Local data on your device is retained until you uninstall the Extension or clear extension data in Chrome.

  • Trial email and anonymous device ID are retained on our backend for as long as the trial account exists, and for up to 24 months after the last recorded event for the purposes of fraud prevention, refund handling, and account recovery. You can request earlier deletion at any time (see Section 9).

  • License records (license key, purchase history) are retained for the duration of the license plus the period required by applicable tax and consumer-protection law (typically 6–7 years).

  • Analytics events retained by PostHog are kept in line with PostHog's own data-retention settings on our account; contact us if you'd like specifics.

  • Feedback submissions are retained indefinitely in anonymous form. We will delete or further anonymize feedback associated with you on request.

8. What We Do Not Do

  • We do not collect browsing history.

  • We do not read, transmit, or store the content of the webpages you visit.

  • We do not track you across other websites.

  • We do not sell your data, and we do not share it with anyone for advertising or marketing purposes. The only third parties we share data with are the sub-processors listed in Section 6, who help us operate and improve the Extension.

  • We do not use analytics to build a profile of you for advertising, and we do not share analytics data with ad networks or data brokers.

9. Your Rights

Depending on where you live, you may have the right to:

  • Request a copy of the personal data we hold about you.

  • Request correction of inaccurate data.

  • Request deletion of your data ("right to be forgotten").

  • Object to or restrict certain processing.

  • Withdraw consent for trial communications at any time.

  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@blur-it.app with your trial email and your request. We will respond within 30 days.

If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with specific data-subject rights (including GDPR, UK GDPR, and CCPA/CPRA), the rights above apply to you. California residents additionally have the right to non-discrimination for exercising their privacy rights. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

10. Security

We protect your data using HTTPS/TLS for all transmission between the extension and our backend or any third-party service, authenticated and scoped access to our Supabase backend, least-privilege access to license and payment data at our payment providers, and Chrome's built-in storage.sync API for local data, which is encrypted in transit by Google.

No method of transmission or storage is perfectly secure. We take reasonable steps to protect your data but cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify affected users in accordance with applicable law.

11. International Data Transfers

Our backend (Supabase), our analytics provider (PostHog), and several of our other sub-processors are located in the United States. If you access the extension from outside the United States, your data will be transferred to, stored, and processed in the United States and other jurisdictions where our sub-processors operate. By using the extension, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.

12. Children's Privacy

Blur It is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact support@blur-it.app and we will delete it.

13. Permissions Used by the Extension

The Extension requests the following Chrome permissions. We use each one only for the purpose described.

  • activeTab — Lets the Extension act on the page you are currently viewing when you click the toolbar icon or use the keyboard shortcut. Used to apply blurs to that page locally.

  • scripting — Lets the Extension inject the content script that performs blurring into the active page.

  • storage — Lets the Extension save your preferences, trial state, and license locally via chrome.storage.sync.

  • alarms — Lets the Extension run periodic, lightweight tasks (re-checking license validity and reconciling trial state with the backend).

  • Host permission for https://*.supabase.co/* — Required to communicate with our backend at yuwbeeidzcvmdphrfdem.supabase.co for trial start, event recording, license/redemption-code checks, and feedback submission.

  • Host permission for https://us.i.posthog.com/* — Required to send the anonymous product-usage events described in Section 6.2 to PostHog.

  • Content scripts running on all URLs — Required so that the Extension can blur sensitive content on any webpage you choose. The content script does not transmit page content; all blurring is local.

Blur It complies with Chrome's "Limited Use" policy: we use, transfer, and disclose user data only for the purposes described in this Privacy Policy, and only as permitted by Chrome Web Store policy.

14. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the extension after an update means you accept the revised policy.

15. Contact

If you have questions about this Privacy Policy or want to exercise any of the rights described in Section 9, contact us at: support@blur-it.app. For privacy-specific requests, please include "Privacy Request" in the subject line. We will respond within 30 days. Reko Design Studios, the developer of Blur It, is a sole-proprietor business registered in Nigeria.