Privacy policy

What you blur never leaves your device

Applies to the BlurPilot browser extension, its pages at cirrabit.com/blurpilot and the license service at api.cirrabit.com. Last updated 17 October 2026.

Who we are

BlurPilot is published by Cirrabit. Contact: support@cirrabit.com.

Website content stays on your device

BlurPilot reads the web pages you open only to find and blur sensitive information on your device. Website content is processed locally and is never transmitted to us or to anyone else, never sold, and never used for any other purpose, including advertising, analytics or creditworthiness.

Your settings, custom word list and blur rules are stored in your browser's local extension storage. They are not synced to any account and we cannot see them.

Personal information we process

DataWhyKept
Random install ID, generated by the extensionLink a purchase to your device; daily license checkWhile a license exists, then deleted
Email address, only if you buy or restore ProManage your license, send restore codes and license emailsWhile a license exists and up to 24 months after, or as tax records require
Plan, status, expiry, payment-provider IDsProvide the paid features you boughtAs above
Team member emails (Team plan)Give each member a seatUntil the team owner removes them
Early-access email, role and browser (if you join)Email you at launch, and about the beta if you askedUntil launch plus 6 months, or until you unsubscribe
Optional anonymous counts (off by default)Count feature use by extension versionAggregated daily counts only
"Report a miss": data type and site domainImprove detectionAggregated daily counts only

The server also keeps standard access logs (IP address, time, request path) for security, for up to 14 days.

Payments

Purchases are processed by Stripe, which collects payment and billing details under its own privacy policy. We never receive your card details; Stripe tells us the email, plan and payment status needed for your license.

Service providers

  • Stripe: payments and receipts.
  • Resend: sending restore-code, license and launch emails.
  • Contabo: server hosting for cirrabit.com and api.cirrabit.com.
  • Google Fonts: typefaces on these web pages (not used by the extension).

We do not sell or share personal information with anyone else, and we do not use it for advertising.

Legal bases (EU and UK)

Performance of a contract (providing your license), legitimate interests (security, preventing abuse, improving detection with aggregated counts) and consent (early access emails and optional anonymous counts, which you can withdraw at any time).

Your rights

You can ask for a copy of your data, correction or deletion, or object to processing, by writing to support@cirrabit.com. Deleting your license data ends Pro on your devices. You can also complain to your local data protection authority. Removing the extension deletes everything it stored on your device.

Security

Data in transit is encrypted with TLS. The database is not reachable from the internet. Restore codes are stored only as salted hashes and expire after 15 minutes. See the security overview.

Children

BlurPilot is a business tool and is not directed at children under 16.

Changes

We post changes here and update the date above. Material changes are announced in the extension's release notes.