uBlock Privacy Policy

Effective Date: February 7, 2024

This Privacy Policy describes uBlock’s information practices for its website and browserextension. Please read this policy carefully. When it comes to your personal information, mostof this policy applies to users who choose to donate to support uBlock.

What is personal information?

The purpose of data protection is to protect personal information. Personal information meansany information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, inparticular, by reference to an identifier such as a name, an identification number, locationdata, an online identifier or to one or more factors specific to the physical, physiological,genetic, mental, economic, cultural or social identity of that natural person. Thisinformation includes, for example, details such as name and email address, but alsoinformation in connection with payments.

Information uBlock collects

Personal information

When you visit the uBlock website we collect IP address, unique ID, logging of some of thebutton clicks on our website (clicking download, for example) and user event logging data.

uBlock uses MoEngage to run donation campaigns and first run page. uBlock collects and sharesextension ID, metadata associated with the request such as network geo-location, language,user-agent and additional meta data associated with the message such as type of message tooptimise performance in running campaigns. To learn more about MoEngage's data collectionpolicies, please consult their respective privacy policies.

Anonymous information

The uBlock extension captures anonymous usage information including the version number of theextension, preferred language, and browser and operating system type. The uBlock extensionalso assigns an anonymous, unique ID to each installation. We store this information on uBlockservers and we utilize this information to help us identify and fix potential issues withuBlock as well as to determine the performance of uBlock features. We will delete thisinformation from our log files and databases as soon as we are no longer using it.

Server logs

Logs for general requests made to ublock.org or its infrastructure are kept for up to 180days. These logs include the IP address, browser, operating system, and page address. We willanonymize the IP address by using a hash to encrypt this information and we will immediatelydelete the original IP address. This data is used to generate usage statistics as well as toinvestigate potential security issues. After 180 days, we will remove this information fromour log files and databases.

Analytics

uBlock uses CloudFlare Analytics to aggregate information about traffic patterns and how ourwebsite and extension are used. We use this info only to improve our extension and website.You can find information about CloudFlare Analytics’ data collection practices, as well as itsprivacy policyhere.

Error Reporting with Sentry

uBlock utilizes the Sentry service for error reporting in order to identify and fix issues with the uBlock extension. Sentry collects information such as error messages, stack traces, and device information. However, no personally identifiable information (PII) is sent to Sentry as part of this process. The information collected by Sentry is used solely for the purpose of debugging and improving the functionality and performance of uBlock.

Sentry's data collection and processing practices are governed by its own privacy policy, which you can reviewhere.

How uBlock processes and discloses collected information

We try to make uBlock better

We use the collected usage and analytics information to maintain and improve the uBlockextension, website and applications, to gain insight into how our services are being used, andin our efforts to prevent fraud. The information is only used internally.

Your information is not for sale

uBlock never has and never will sell your personal information to any third party without yourconsent. We sometimes share anonymized and aggregated information that cannot be associatedwith an individual with third parties or the public.

uBlock discloses personal information as required by law

uBlock cooperates with all valid United States law enforcement requests and court orders.

Data security

All personal and usage information that uBlock collects is stored in our databases and uBlocktakes reasonable steps to keep it secure. That said, no database or server is 100% secure andwe cannot guarantee the absolute security of your data in our system or while beingtransmitted over the Internet. Our best effort is given, but you use uBlock’s website andproducts at your own risk.

What is the legal basis?

We collect and process your personal information in compliance with the GDPR and theapplicable EU laws.

Collection and processing is based on your consent:
Art. 6 (1) a GDPR, Art. 4 (11) GDPR

We will always ask for your consent to collect and process your personal information for theaforementioned specific purposes, unless the collection and processing of your personalinformation is permitted by statutory laws. Where you have provided us with your consent tothe collection and processing of your personal information for the aforementioned specificpurposes, you have the right to withdraw your consent at any time.

Collection and processing is necessary for taking steps prior to enter into a contract: Art. 6(1) b GDPR

The collection and processing of your personal information may be necessary for theperformance of a contract to which you may be a party. Prior to entering into such contract,the collection and processing of your personal information may also be necessary in order totake steps at your request. This applies for installation and the use of our extension as wellas any payment processing in connection with donations.

Collection and processing is necessary for compliance with a legal obligation to which theController is subject: Art. 6 (1) c GDPR

Collection and processing of your personal information may be necessary for compliance with alegal obligation to which we are subject under EU laws or the laws of a EU Member State.

Collection and processing is necessary for the purposes of our legitimate interests: Art. 6(1) f GDPR

The collection and processing of your personal information may be necessary for the purposesof our legitimate interests. We collect and process server logs for technical reasons, suchas, but not limited to, preventing denial of service attacks. Denial of service is typicallyaccomplished by flooding the targeted machine or resource with superfluous requests in anattempt to overload systems and prevent some or all legitimate requests from being fulfilled.Preventing such overloads of our systems and any security issues by denial of service attacksis in your and our vital interest and therefore we use the website logs. We use informationcollected and processed via subscription downloads, extension update checks, emergencynotifications and feedback data sent by you, for technical reasons, such as, but not limitedto, ensuring the security of the extension version used by you. Ensuring the security of ourextension is in your and our vital interest and therefore we use such data. Furthermore, wecollect and process such data to ensure that our website and extension are constantly improvedand adjusted to the changing requirements for an efficient usability and the technicalenvironment. Ensuring the usability of our websites and of our extension is in your and ourvital interest and therefore we use such data.

What rights do you have?

In compliance with the GDPR and the applicable EU laws and to the extent legally permitted,you have the following rights to protect your personal information collected and processed byus:

Information, access, rectification and restriction rights

Naturally you have the right to receive, upon request, information about the personalinformation stored by us about you and information about how we collect, process and storeyour personal information. Where that is the case, you have the right to gain access to suchpersonal information stored by us. You have the right to request from us the rectification ofyour inaccurate personal information. Taking into account the purposes of collecting andprocessing your data, you have the right to have incomplete personal information completed.You have the right to request restriction of processing.

Right to data portability

You also have the right (1) to receive all personal information concerning you and which youhave provided to us, in a structured, commonly used and machine-readable format and (2) totransmit that data to another controller.

Right to erasure of your data

You have the right to demand from us the erasure of your personal information, where – interalia – one of the following grounds applies:

• If we no longer need your personal information for the aforementioned purposes.
• If you withdraw your consent on which the collection and processing is based and where thereare no other legal grounds for the collection and processing.
• If you object to the collection and processing and there are no overriding legitimategrounds for the collection and processing.

Please note, if data needs to be retained for legal purposes pursuant to Art. 17 (3) GDPR, wewill restrict the use of the respective data.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in theMember State of your habitual residence, place of work or place of the alleged infringement ifyou consider that the collection and processing of personal information relating to youinfringes the GDPR.

Right to object to the processing of your data

You have the right to object at any time to the collection and processing of your personalinformation on grounds relating to your particular situation, when collection and processingis based on our legitimate interest (Art. 6 (1) f GDPR).

Right to withdraw your consent at any time

You have the right to withdraw your consent at any time, when you have provided us with yourconsent to the collection and processing of your personal information for one or more specificpurposes.

How to exercise your rights

To exercise your rights, please contact us[email protected].

Who is responsible for data collection and processing (contacts)?

Changes and updates to this policy

uBlock reserves the right to change this policy for any reason, and may make small,inconsequential changes to this policy with or without notice. Each time this policy ischanged we will revise the "Effective Date" at the top of this page. Your continued use of theuBlock website or browser extension constitutes your agreement to this Privacy Policy and anyrevisions or updates.

Contact

You can always contact us with questions or feedback about our privacy policyat[email protected]or[email protected].