Who controls your data
Privblur, the seller and operator of PrivBlur.com, is the data controller for personal data processed to operate this service. Paddle separately handles payment-related personal data as Merchant of Record under its own privacy notice.
Your photos and videos stay on your device
Face detection, blurring and exports run in your browser. We do not upload, host or store your input media or exported media on our servers. When signed in, blur history contains metadata only, such as file name, file type, detected-face count and processing date. File names can contain personal information, so choose them thoughtfully.
Data we process and why
- Account and sign-in data: email address, account identifier, authentication records and provider identifiers from Google or Apple when selected. Email/password credentials are handled by our authentication service, not stored as readable passwords. We use this data to create and secure accounts and provide access, based on contract performance and legitimate interests in account security.
- History and usage: file metadata, processing dates, daily usage totals and account preferences. We use these to show private history and enforce plan limits, based on contract performance.
- Purchase entitlements: customer and transaction references, subscription status, billing periods and credit balances. We use these to deliver purchased features and maintain financial records, based on contract performance and legal obligations. We do not store your full card or bank details.
- Technical and security data: IP addresses, device/browser information, request logs and error diagnostics received by hosting and authentication services. These support reliable operation, abuse prevention and troubleshooting, based on legitimate interests and applicable legal obligations.
- Support communications: information you supply in an inquiry, used to respond and resolve issues, based on contract performance or legitimate interests. We do not use your media to train AI models.
Who receives data
We share necessary account and technical data with service providers for hosting, authentication, database operation and diagnostics, including Lovable Cloud. Google or Apple receives information necessary for sign-in if you choose that option. Paddle receives information needed for product sales, subscription management, payments, invoicing and tax compliance. We may disclose required data to professional legal or accounting advisers and to authorities where required by law. We do not sell your personal data.
Retention
Account and entitlement data are retained while needed to provide your account and resolve purchase or security issues. Blur-history metadata remains until you clear it or request deletion. Anonymous usage counts and preferences are held locally in your browser and can be removed by clearing site data. Financial or compliance records may be kept for the legally required period. Data is deleted or anonymized when no longer needed, subject to legitimate legal and security retention requirements.
Security and international transfers
We use appropriate technical and organizational measures, including encrypted connections and access controls to protect private account records. No system can guarantee absolute security. Our service providers may process data outside your country, including outside the UK or European Economic Area. Where required, transfers rely on applicable safeguards such as adequacy decisions or standard contractual clauses.
Your rights
Depending on your location, you may have rights to access, correct, delete or export your data; restrict or object to processing; and withdraw consent where consent is the basis. UK/EEA users also have the right to complain to their supervisory authority, and requests are normally answered within one month, subject to lawful extensions. You can clear history within your account. For other data-rights requests, contact Paddle buyer support, identify Privblur as the seller and request that your inquiry be forwarded to us. Paddle handles requests about data it controls separately.
Cookies and browser storage
Essential cookies or browser storage support sign-in, security, payment checkout, theme preferences and local free-use tracking. Clearing site data may sign you out and reset local preferences. We do not intentionally set optional analytics or advertising cookies in the app. If optional tracking is introduced, we will provide notice and obtain consent where required. Manage storage and cookies through your browser settings; payment and sign-in providers may also use their own cookies under their notices.
Updates
Changes to this notice are published here with a revised effective date. We will provide additional notice where required by law.