Effective Date: May 5, 2022
When it comes to your personal information, most of this policy applies to users who choose to donate to support AdBlock or purchase one of our paid products. If all you do is use the extension then you're practically, except for an anonymous, unique ID, invisible to us.
Who is responsible for data collection and processing (contacts)?
The legal person responsible for the collection, processing and / or use of personal information in connection with our websites and products ("Controller") is:
12333 Sowden Road Suite B
PO Box #99623
Houston, Texas 77080-2059
Representative in the European Union
Our representative in the European Union in accordance with Art. 27 General Data Protection Regulation (“GDPR”) is:
Reuschlaw Legal Consultants
Piltz Rechtsanwälte PartGmbB
Mozartstraße 16, 12247 Berlin
Attention: Carlo Piltz
What is personal information?
The purpose of data protection is to protect personal information. Personal information means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name and email address, but also information in connection with payments.
Information AdBlock collects
When you visit the AdBlock website we collect IP address, unique ID, logging of some of the button clicks on our website (clicking download, for example) and user event logging data. When the AdBlock extension communicates with AdBlock servers, we receive the computer’s IP address. After six months we will remove any identifying information such as IP address from our log files and databases.
When you donate from the AdBlock website, we collect and store all information, excluding the credit card number, given during the payment process. This includes IP address, unique ID, logging some of the button clicks (payment, download buttons) and user event logging. AdBlock does not handle or have access to full credit card numbers, bank account details or payment account login information. Each payment processor stores and uses the data you provide them differently.
AdBlock uses both Stripe and PayPal as payment processors when you donate to AdBlock. To learn more about their data collection policies, please consult their respective privacy policies when using them.
AdBlock uses Firebase Functions from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. to ingest and process log messages from the AdBlock extensions and the getadblock.com website. Log messages are not kept on Firebase Functions after processing. Firebase Functions keeps the requester's IP address and other networking information in its system logs for 30 days.
When you purchase or otherwise obtain a AdBlock Premium license AdBlock will store information regarding the license, including: unique extension identifiers associated with the license, email associated with the license, last license check timestamp and license status. This data will be stored during the active lifetime of the license and for a period after cancellation.
The same data that is stored when you make a donation to AdBlock is stored when you purchase Premium.
AdBlock Premium - Sync
If you elect to use the Sync feature of AdBlock Premium then AdBlock collects information about the particular extension installation, including: unique extension identifier, sync device name and the timestamp of when the sync enrollment was made. This data will be stored during the active lifetime of the license and for a period after cancellation.
AdBlock also stores the entire set of extension settings in plain text on our servers to accommodate the sync functionality across multiple extension installations. This storage location has restricted access and is only made available to AdBlock employees to diagnose and fix errors with the sync service. Every reasonable precaution is taken to secure this storage location but no database or server is 100% secure, and we cannot guarantee the absolute security of the extension settings data. If you have concerns about the AdBlock extension settings data being compromised, since there is no current mechanism to encrypt the data from the user's end, please carefully consider whether you want to use this feature.
When you purchase an AdBlock VPN license, AdBlock will store information regarding the license, including: unique identifiers associated with the license, email associated with the license, last license check timestamp and license status. This data will be stored during the active lifetime of the license and for a period after cancellation.
We use the analytic services from Firebase Events from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. on an opt-in basis to analyze and improve the functionality of our software and to optimize your user experience. In each instance, only anonymized data is utilized.
Please note, we do not collect any data about the web pages you visit or the services you use on the internet. Furthermore, we don’t—and never will—sell or share any data about your browsing habits.
When using our mobile products, we collect data when specific interactions take place ("event tracking"), including: app/extension version, type of device, IP address, anonymous interaction events (like button clicks) and the platform (Android, iOS) used. We also collect data related to unexpected crashes or errors to analyze and solve any malfunctions, including: app/extension version, type of device, UUID and crash traces, instance and application IDs, free space and free ram, as well as the timestamp of the crash.
Data on event tracking is deleted after 60 days. Crash reports are retained for 180 days, related Instance IDs are deleted in accordance with Firebase’s retention policies.
For both event tracking and crash reporting, the data collection is solely used to improve the functionality and user experience of our mobile products and can be opted-out in the settings menu. We use the analytic services from Firebase Events from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. on an opt-out basis to analyze and improve the functionality of our mobile applications and to optimize your user experience. In each instance, only anonymized data is utilized.
The AdBlock extension captures anonymous usage information including, but not limited to, the version number of the extension, preferred language, Acceptable Ads opt-in, opt-in to advanced features like our local content caching service, number of blocked requests, number of ads blocked, and browser and operating system type. The AdBlock extension also assigns an anonymous, unique ID to each installation. We store aggregate statistics about the installation connected with each user ID indefinitely. We utilize this information to help us identify and fix potential issues with AdBlock as well as to determine the performance of AdBlock features.
The iOS extension captures connection type (wifi or mobile) in addition to the data that the browser extension captures.
Extension error information
An error report is automatically sent to AdBlock's servers whenever an error occurs in the extension. The report contains the anonymous information stated previously along with the current browser version and a description of the error. If a URL exists in the error description then the extension will attempt to remove it. The data is used for troubleshooting and to identify general defects which lead to unexpected crashes or errors. After 7 days we will remove this information from our log files and databases.
Logs for general requests made to getadblock.com or its infrastructure are kept for up to 90 days. These logs include the IP address, browser, operating system, and page address. We will anonymize the IP address by using a hash to encrypt this information and we will immediately delete the original IP address. This data is used to generate usage statistics as well as to investigate potential security issues. After 90 days, we will remove this information from our log files and databases.
Logs for payment processing requests are kept in accordance with US tax law retention periods and will be deleted after the end of the respective retention period. Information in these logs includes IP address, email (if provided), address (if provided), name (if provided), browser type and version, operating system, payment amount, payment type, card type, expiration date, and last four digits of the card if a card is used. This data is used to provide insights into the financial performance of AdBlock.
For non-EU/EEA users only: Google Analytics
You can deactivate Google Analytics by means of a browser add-on if you do not want to participate in Website analysis. You can download this here.
How AdBlock processes and discloses collected information
We try to make AdBlock better
We use the collected usage and analytics information to maintain and improve the AdBlock extension and website, gain insight into how our services are being used, and in our efforts to prevent fraud. The information is only used internally.
Your information is not for sale
AdBlock never has and never will sell your personal information to any third party without your consent. We sometimes share anonymized and aggregated information that cannot be associated with an individual with third parties or the public.
AdBlock discloses personal information as required by law
AdBlock cooperates with all valid United States law enforcement requests and court orders. If possible, we'll notify you of requests for your information using the email stored in our system. Some circumstances prohibit us from contacting you about a request or order (e.g. an order under 18 U.S.C. § 2705(b) or § 215 of the Patriot Act). "Warrant canary": AdBlock has never received an order under Section 215 of the Patriot Act, and if this sentence ever disappears, you'll know it's because we have received such an order -- or similar order -- and the U.S. Government made us delete it.
AdBlock discloses personal information as part of business development
We will not transfer your personal data to third parties as a matter of course without letting you know in advance. We will ask for your prior permission unless the transfer of such data is permitted by GDPR or any other applicable EU laws.
All personal and usage information that AdBlock collects is stored in our databases and AdBlock takes reasonable steps to keep it secure. That said, no database or server is 100% secure and we cannot guarantee the absolute security of your data in our system or while being transmitted over the Internet. Our best effort is given, but you use AdBlock's website and browser extension at your own risk.
What is the legal basis?
We collect and process your personal information in compliance with the GDPR and the applicable EU laws.
Collection and processing is based on your consent: Art. 6 (1) a GDPR, Art. 4 (11) GDPR
We will always ask for your consent to collect and process your personal information for the aforementioned specific purposes, unless the collection and processing of your personal information is permitted by statutory laws. Where you have provided us with your consent to the collection and processing of your personal information for the aforementioned specific purposes, you have the right to withdraw your consent at any time.
Collection and processing is necessary for taking steps prior to enter into a contract: Art. 6 (1) b GDPR
The collection and processing of your personal information may be necessary for the performance of a contract to which you may be a party. Prior to entering into such a contract, the collection and processing of your personal information may also be necessary in order to take steps at your request. This applies for installation and the use of our extension as well as any payment processing in connection with donations.
Collection and processing is necessary for compliance with a legal obligation to which the Controller is subject: Art. 6 (1) c GDPR
Collection and processing of your personal information may be necessary for compliance with a legal obligation to which we are subject under EU laws or the laws of a EU Member State.
Collection and processing is necessary for the purposes of our legitimate interests: Art. 6 (1) f GDPR
The collection and processing of your personal information may be necessary for the purposes of our legitimate interests. We collect and process server logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs. We use information collected and processed via subscription downloads, extension update checks, emergency notifications and feedback data sent by you, for technical reasons, such as, but not limited to, ensuring the security of the extension version used by you. Ensuring the security of our extension is in your and our vital interest and therefore we use such data. Furthermore, we collect and process such data to ensure that our website and extension are constantly improved and adjusted to the changing requirements for an efficient usability and the technical environment. Ensuring the usability of our websites and of our extension is in your and our vital interest and therefore we use such data.
Jointly determining purposes and means of data processing: Art. 26 (1) GDPR
What rights do you have?
In compliance with the GDPR and the applicable EU laws and to the extent legally permitted, you have the following rights to protect your personal information collected and processed by us:
Information, access, rectification and restriction rights
Naturally you have the right to receive, upon request, information about the personal information stored by us about you and information about how we collect, process and store your personal information. Where that is the case, you have the right to gain access to such personal information stored by us. You have the right to request from us the rectification of your inaccurate personal information. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal information completed. You have the right to request restriction of processing.
Right to data portability
You also have the right (1) to receive all personal information concerning you and which you have provided to us, in a structured, commonly used and machine-readable format and (2) to transmit that data to another controller.
Right to erasure of your data
You have the right to demand from us the erasure of your personal information, where – inter alia – one of the following grounds applies:
- If we no longer need your personal information for the aforementioned purposes.
- If you withdraw your consent on which the collection and processing is based and where there are no other legal grounds for the collection and processing.
- If you object to the collection and processing and there are no overriding legitimate grounds for the collection and processing.
Please note, if data needs to be retained for legal purposes pursuant to Art. 17 (3) GDPR, we will restrict the use of the respective data.
Personal information in connection with payments
If you have attempted a payment on the AdBlock website then you can request to have your email and name removed from our system. To do this, please open a private ticket on our support site that contains your Order ID or email for the purchase. Please note that AdBlock can only remove information from our own systems and cannot make changes to data that you give to a payment processor.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the collection and processing of personal information relating to you infringes the GDPR.
Right to object to the processing of your data
You have the right to object at any time to the collection and processing of your personal information on grounds relating to your particular situation, when collection and processing is based on our legitimate interest (Art. 6 (1) f GDPR).
Right to withdraw your consent at any time
You have the right to withdraw your consent at any time, when you have provided us with your consent to the collection and processing of your personal information for one or more specific purposes.
How to exercise your rights
To exercise your rights, please contact us here.
Changes and updates to this policy