Privacy policy

In short

Blurr is built so that we cannot see your data. The extension does all of its work on your device, we run no server that receives what you type, and this website has no analytics.

Who is responsible

Blurr is published by Blurr Inc.. In this policy, “we” means Blurr Inc., and “Blurr” means the Chrome extension and this website.

Your use of Blurr is also covered by the Terms of Use.

What the extension processes, and where

On the AI chat sites it supports, the extension reads the text in the chat box as you type, paste or send it, and the files you attach there, in order to look for personal data. All of this processing happens on your device, inside your browser. Blurr does not send that text, those files or what it finds in them to us or to anyone else.

What you send to an AI chat site goes to that site exactly as it would without Blurr, and that site’s own policy applies to it.

A chat export that you import on the extension’s dashboard, or scan on this website, is read on your device in the same way. It is not uploaded.

What is stored on your device

The extension keeps the following in your browser’s storage for extensions, on your device. None of it is sent anywhere.

• Your settings: the language, which kinds of details to look for, the sites you switched Blurr off on, strict mode, whether to tell you when a file can’t be checked, and where you dragged the panel.
• Your own details, only if you choose to enter them in the settings: names, email addresses, phone numbers, addresses and private words that Blurr should always look for, and values it should always allow. They are stored as you typed them.
• The details you chose to keep in a chat, as keyed hashes (HMAC-SHA-256) and never as the values themselves, together with the placeholders they were given. A placeholder for an address at a large public mail provider keeps that provider’s domain, for example [email protected]. The key is random and is discarded, with these entries, when the browser closes.
• Activity counts: for each message checked, a hashed identifier of the message and of the conversation, the site, the time, and how many details of each kind went out unchanged. No text and no values.
• The files of the AI model, about 181 MB, in the browser’s cache storage.

A value that Blurr detects in your text is never stored: not on your device, and not anywhere else.

How to delete it

“Reset everything” on the extension’s dashboard clears the activity counts and the kept details. Your own saved details can be removed in the settings. Removing the extension from Chrome deletes everything it stored, the model files included.

What is sent to us: nothing

The extension sends no text, no findings, no activity counts, no settings and no diagnostics to us or to anyone else. There are no user accounts. A diagnostic report exists only if you copy it yourself and decide to send it; it contains no text from the page or from your message and nothing that Blurr found.

The one network request the extension makes

The extension makes one kind of network request of its own: it downloads the files of its AI model from Hugging Face (huggingface.co and its file servers under hf.co). This happens once for each version of the model, and again only if a stored file is missing or damaged. The request carries no cookies and no referrer, and nothing about you or about what you type. Like any download, it shows your IP address to Hugging Face, and Hugging Face’s privacy policy applies to that.

This website

This website is made of static pages. It has no analytics, no advertising and no tracking pixels, and it loads no script, font or image from any other company.

It sets one cookie, “blurr-locale”, and only when you choose a language with the switcher. The cookie holds the code of that language (en, ru or kk) for one year and nothing else.

The company that hosts the site keeps the standard logs every web server keeps (IP address, time, the page requested, browser type). We add nothing to them.

The export scanner reads the file you choose in your browser; the file is not uploaded. Its report lives in the page and is gone when you close the tab. For the session, the browser remembers only which chats you ticked as cleaned, by their identifiers from your export. The scanner downloads the same AI model from Hugging Face, as described above, into this site’s cache in your browser.

The website and the extension together

If the extension is installed and you open this website, the page can ask the extension for your totals. The extension answers with aggregate numbers only: how many messages and chats were checked, how many details went out unchanged, their categories and the score. No text and no values are passed. The extension answers this website alone, whose address is built into it, and the numbers stay in the page.

Permissions, and why

• Storage (“storage”): to keep your settings and the counts above on your device.
• Offscreen page (“offscreen”): to run the AI model and read attached files in a hidden page of the extension, away from the chat page.
• Unlimited storage (“unlimitedStorage”): so that the browser does not delete the model’s files when disk space runs low. It gives access to nothing.
• Access to the supported AI chat sites: to check the chat box there. Chrome’s install notice names whole hosts (for example huggingface.co, yandex.ru and ya.ru) even where Blurr runs on one path of them.
• Access to huggingface.co and hf.co: to download the model’s files.

Blurr cannot read any other site, your browsing history, or the addresses of your other tabs.

Chrome Web Store: Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In practice: what Blurr reads is used only to show you personal data before you send it; it is not transferred to anyone, it is not used for advertising, and no person reads it. Read the policy.

Children

Blurr is a general-purpose tool and is not aimed at children. We collect no personal data from any user, and so none from children.

Kazakhstan

With regard to the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V “On Personal Data and their Protection”: the Blurr extension does not collect its users’ personal data and does not transfer personal data to third parties, across borders or otherwise. The logs of the website’s host are described above.

Changes to this policy

When this policy changes, the new version is published on this page with a new date. A change in what the extension does with data comes with a new version of the extension.

Contact

Questions about this policy: [email protected].