1. Local Processing Guarantee

BlurShield's core protection functionality—scanning supported webpage content, identifying sensitive patterns, and applying visual blur effects—runs inside your browser using packaged regular expressions and DOM manipulation.

• No cloud scanning: We do not send webpage text, screenshots, pasted content, or detected secrets to an external server for analysis.
• No telemetry: We do not track the URLs you visit or the content you view.
• No remote execution: The scanning engine does not rely on cloud infrastructure.

2. Data We Process and Collect

BlurShield processes only the information needed to provide its protection, account, trial, and licensing features:

• Local protection processing: BlurShield may locally inspect webpage content, credentials, personal communications, financial identifiers, current tab or domain context, and text being copied or pasted solely to detect and visually protect sensitive information. This content is not uploaded to BlurShield servers, sold, or shared for advertising.
• Account authentication: If you choose Google Sign-In, Firebase receives the identity information required to authenticate you. BlurShield stores your user ID, email address, display name, profile photo URL, and authentication tokens in extension-local browser storage to maintain your session.
• Trial and subscription status: Firebase stores the minimum user identifier and trial record required to determine trial access. Lemon Squeezy manages purchases and validates user-provided license keys. BlurShield does not receive or store payment-card details from purchases.
• Settings and custom patterns: Preferences, whitelisted domains, paste-trusted domains, custom zones, custom patterns, and license configuration are stored using browser extension storage. If browser synchronization is enabled, the browser vendor may synchronize this data across your signed-in browser profiles. BlurShield does not upload custom patterns or webpage contents to its own servers.
• Local activity statistics: Counts such as secrets blurred, reveals, and active days are stored locally in the extension and are not transmitted to BlurShield.

3. Third-Party Services

We use the following trusted third-party services to handle account management and payments:

• Google Firebase: Used for optional Google authentication, session renewal, and trial/access records.
• Lemon Squeezy: Used as our merchant of record to process payments securely. BlurShield never sees or stores your credit card details.
• Browser synchronization: Chrome or Microsoft Edge may synchronize extension settings according to your browser account and sync preferences.

4. Permissions We Request

BlurShield requests certain Chrome Extension permissions to function fully. Here is why we need them:

• Site access and scripting: Scan supported pages locally, apply visual protection, and run user-requested actions such as Risk Preview and custom zone selection.
• tabs: Check open tabs during an explicit pre-share scan, update protection status, and focus a tab the user chooses to review.
• storage: Save settings, protection zones, local statistics, account session, and access status.
• identity: Provide optional Google Sign-In, maintain an authenticated session, and create or retrieve a free-trial record without requesting your Google password.
• notifications: Alert you when screen sharing is stopped or blocked because sensitive information may be exposed, and confirm license activation.
• downloads: Save a PNG screenshot only when you explicitly request a Full Screen or Selected Area capture.
• contextMenus: Provide right-click actions for blurring an element, managing a domain, and opening Settings.
• alarms: Periodically refresh access and badge state and remove old locally stored activity statistics.

5. Changes to this Policy

We may update our Privacy Policy occasionally to reflect changes in our practices or product. Any modifications will be posted here with an updated "Last Updated" date.

6. Contact Us

If you have any questions or concerns about this Privacy Policy or our practices, please reach out to us at blurshield2006@gmail.com.