The short version: what is on your screen stays on your device. Detection runs locally, in the app and in the extension. We hold only what an account, a licence key and pairing need, and we never sell it or use it for advertising.
1. Who we are
PixelBlocker+ (formerly GoonerLock) is published by J&M Productions LTD, a company registered in England and Wales, which is the controller of the personal data described here. For any privacy question or request, email support@pixelblockerplus.com.
2. What never leaves your device
- Screen captures, screenshots and video frames. The detector in the Sub app captures, processes and discards frames in memory; nothing is saved to disk or sent over the network.
- What the detector found on your screen: labels, boxes and counts per frame.
- In the browser extension: page content, images, video frames, the addresses of the pages you visit, and your browsing history.
3. What we hold, and why
- Licence key and device ID. The Sub app checks your key with our activation server. The check sends your key and a one-way hash of your device’s details, never a raw hardware identifier. The answer is signed by the server and kept on your device so the app also works offline for a while. Why: to provide the licence you bought (contract).
- Username. You choose it at setup. It is your identity for pairing and the leaderboards. Why: contract.
- Your PixelBlocker+ account (if you make one): your email address and whether you confirmed it; your password as a one-way hash only (we cannot read it); your sign-ins (a hash of each sign-in token, the device name and device ID your app sends, the IP address the sign-in came from, and when it was made and last used); the usernames linked to your account; which browser, computer and phone hold Premium; and short-lived email codes, stored only as hashes. Why: to run your account (contract), and to keep accounts secure and stop abuse, for example the sign-in IP address and limits on attempts (legitimate interests).
- Your subscription (if you subscribe): the plan, its status, the end of the current period, the Stripe customer and subscription IDs and the email used at checkout. Why: contract, and payment records for tax (legal obligation).
- Session data between a Dom and a Sub. Session settings (targets, length, censor style, lock level, status) travel over an encrypted connection between the two apps; a signalling server only helps the two connect. The browser extension, when paired, also sends a short status every few seconds (whether censoring is on, whether Premium is active, whether it is covering the page). Never page or screen content. Why: contract.
- Chastity verification photos (an optional game) go straight from your device to your Dom over the encrypted connection, are held only in their app’s memory, and are dropped when they give a verdict. They never reach our servers.
- Leaderboards. Your username and session totals (durations and counts), nothing about what was on your screen. Why: legitimate interests (running the boards).
- Payment card details are handled entirely by Stripe. We never see or store them.
- Email you send us. Your address and message, kept as long as we need to help you, typically up to 24 months.
4. Who else handles it
- Stripe: payments and receipts (Stripe’s privacy policy).
- Resend: sends our account emails (confirming your email, resetting your password, your licence key) from noreply@mail.pixelblockerplus.com.
- Hosting: our server (Fly.io), our database (Neon), this website and our support mailbox (Cloudflare).
We never sell your data, and we use none of it for advertising.
5. Cookies and storage on pixelblockerplus.com
When you sign in on pixelblockerplus.com, our server (api.pixelblockerplus.com) sets two cookies that keep you signed in: gl_at (30 minutes) and gl_rt (30 days). Scripts on the page cannot read them. They are strictly necessary for signing in, so no consent banner is needed. We use no advertising, analytics or tracking cookies.
The site also keeps a few small notes in your browser tab (session storage), deleted when you close it: that you came from the browser extension, that you started a checkout (so we can warn you before you pay twice), and whether you picked monthly or yearly. Cloudflare, which hosts this site, may receive basic request details (IP address, browser) for security, as its own privacy policy describes.
6. How long we keep it
- Account data: while your account exists. Sign-ins expire on their own (a website sign-in after 30 days without use).
- When you ask us to delete your account, we remove it within 30 days, except payment records, which we keep for 6 years for tax.
- Data on your device (settings, stats, achievements, saved locks) stays on your device; uninstalling an app removes it from there, but does not delete your account.
7. Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to delete your account. Email support@pixelblockerplus.com from the address on your account; we aim to answer within 30 days. To delete an account we first cancel any subscription, then delete the account, its sign-ins, usernames and Premium seats. You can also complain to the Information Commissioner’s Office (ico.org.uk).
8. Children
The App is for adults (18 and over) only. We do not knowingly collect data from anyone under 18.
9. Changes and contact
We may update this policy; the date at the top shows the latest version. Questions: support@pixelblockerplus.com, or a ticket in our Discord.