PRIVACY POLICY
Effective Date: March 20, 2019

This Privacy Policy describes AdBlock Protect's information practices for its website and browser extension. We take your privacy seriously and want you to understand exactly what information we collect, how we use that information, which pieces of information you can request us to remove, and how to contact us about this policy. Please read this policy carefully. Your continued use of the AdBlock Protect extension and/or the AdBlock Protect website constitutes your agreement to this policy.

When it comes to your personal information, most of this policy applies to users who choose to donate to support AdBlock Protect. If all you do is use our extensions then you're practically invisible to us.

Who is responsible for data collection and processing (contacts)?

Controller

The legal person responsible for the collection, processing and / or use of personal information in connection with our websites and products ("Controller") is:

BetaFish, Inc.
337 Garden Oaks Blvd, #99623
Houston, TX 77018
info@getadblock.com

Representative in the European Union

Our representative in the European Union in accordance with Art. 27 General Data Protection Regulation (“GDPR”) is:

#LOGIN Datenschutzberatung
Rommerskirchener Straße 21, 50259
Pulheim, Germany
Attention: Sascha Kremer

What is personal information?

The purpose of data protection is to protect personal information. Personal information means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name and email address, but also information in connection with payments.

Information AdBlock Protect collects

Personal information

When you visit the AdBlock Protect website we collect IP address, unique ID, logging of some of the button clicks on our website (clicking download, for example) and user event logging data. When the AdBlock Protect extension communicates with AdBlock Protect servers, we receive the computer’s IP address. After six months we will remove any identifying information from our log files and databases. IP addresses are aggregated after 7 days.

When you donate from the AdBlock Protect website or subscribe to one or more of our services, we collect and store all information, excluding the credit card number, given during the payment process. This includes IP address, which we aggregate after 7 days, unique ID, logging some of the button clicks (payment, download buttons) and user event logging. AdBlock Protect does not handle or have access to full credit card numbers, bank account details or payment account login information. All payments are handled via external payment processors. Each payment processor stores and uses the data you provide them differently.

AdBlock Protect uses both Stripe and PayPal as payment processors when you donate to AdBlock Protect. To learn more about their data collection policies, please consult their respective privacy policies when using them.

Anonymous information

The AdBlock Protect extension captures anonymous usage information, including but not limited to: current version of the extension, preferred language, Acceptable Ads opt-in, number of blocked requests, and browser and operating system type.

Extension error information

An error report is automatically sent to AdBlock Protect's servers whenever an error occurs in the extension. The report contains the anonymous information stated previously along with the current browser version and a description of the error. If a URL exists in the error description then the extension will attempt to remove it.

Server logs

Logs for general requests made to adblockprotect.com or its infrastructure are kept for up to 90 days. These logs include information about the IP address, which we are aggregating after 7 days, browser, operating system, and page address.

Logs for payment processing requests are kept for 30 days. Information in these logs includes IP address, which we are aggregating after 7 days, email (if provided), address (if provided), name (if provided), browser type and version, operating system, payment amount, and card type, expiration date, and last four digits of the card if a card is used.

Analytics

AdBlock Protect uses various analytics services to aggregate information about traffic patterns and how our website and extension is used. We limit the data sent to these services, and only do so to improve our extension and website. AdBlock Protect currently uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies" (text files that are stored on your computer and enable you to analyze your use of our Website). The information generated by the cookie on your use of our Website (including your abbreviated IP address) is transmitted to a Google server in the United States and are stored there. Google will use this information to assess your use of our Website, to compile reports on the activities for us and to provide more services connected with use of our Website and the Internet. It is also possible that Google may transmit this information to third parties if this is required by law, or if third parties process this information on behalf of Google.

You can also deactivate Google Analytics by means of a browser add-on if you do not want to participate in Website analysis. You can download this here: https://tools.google.com/dlpage/gaoptout.

How AdBlock Protect uses and discloses collected information

We try to make AdBlock Protect better

We use the collected usage and analytics information to maintain and improve the AdBlock Protect extension and website, gain insight into how our services are being used, and in our efforts to prevent fraud. The information is only used internally.

Your information is not for sale

AdBlock Protect never has and never will sell your personal information to any third party without your consent. We sometimes share anonymized and aggregated information that cannot be associated with an individual with third parties or the public.

AdBlock Protect discloses personal information as required by law

AdBlock Protect cooperates with all valid United States law enforcement requests and court orders. If possible, we'll notify you of requests for your information using the email stored in our system. Some circumstances prohibit us from contacting you about a request or order (e.g. an order under 18 U.S.C. § 2705(b) or § 215 of the Patriot Act).

"Warrant canary": AdBlock Protect has never received an order under Section 215 of the Patriot Act, and if this sentence ever disappears, you'll know it's because we have received such an order -- or similar order -- and the U.S. Government made us delete it.

AdBlock discloses personal information as part of business development

As part of the further development of our business, it may happen that the structure of BetaFish, Inc. changes. The legal structure may be adapted, subsidiaries, business units or components may be created, bought or sold. In such transactions user information may be shared with the transmitted part of the company. In the event of a transfer of personal information BetaFish, Inc. will ensure that it is done in accordance to this privacy policy and the GDPR and applicable EU laws.

We will not transfer your personal data to third parties as a matter of course without letting you know in advance. We will ask for your prior permission unless the transfer of such data is permitted by GDPR or any other applicable EU laws.

External services

AdBlock Protect uses external services that may require you to enter personal information. We currently use FreshDesk (privacy policy here) for AdBlock Protect's knowledge base and support system at https://help.getadblock.com.

AdBlock Protect has used other services in the past and may use more in the future. We do not control the data on these external services and can not remove or delete the data; any data given to external services is not bound by this policy, and you should read the external service's privacy policy before providing any information.

Your information choices and options

Personal information removal

If you have attempted a payment on the AdBlock Protect website then you can request to have your email and name removed from our system. To do this, please open a private ticket on our support site that contains your Order ID or email for the purchase. Please note that AdBlock Protect can only remove information from our own systems and cannot make changes to data that you give to a payment processor.

Data security

All personal and usage information that AdBlock Protect collects is stored in our databases and AdBlock Protect takes reasonable steps to keep it secure. That said, no database or server is 100% secure and we cannot guarantee the absolute security of your data in our system or while being transmitted over the Internet. Our best effort is given, but you use AdBlock Protect's website and browser extension at your own risk.

What is the legal basis?

We collect and process your personal information in compliance with the GDPR and the applicable EU laws.

Collection and processing is based on your consent: Art. 6 (1) a GDPR, Art. 4 (11) GDPR

We will always ask for your consent to collect and process your personal information for the aforementioned specific purposes, unless the collection and processing of your personal information is permitted by statutory laws. Where you have provided us with your consent to the collection and processing of your personal information for the aforementioned specific purposes, you have the right to withdraw your consent at any time.

Collection and processing is necessary for taking steps prior to enter into a contract: Art. 6 (1) b GDPR

The collection and processing of your personal information may be necessary for the performance of a contract to which you may be a party. Prior to entering into such contract, the collection and processing of your personal information may also be necessary in order to take steps at your request. This applies for installation and the use of our extension as well as any payment processing in connection with payments.

Collection and processing is necessary for compliance with a legal obligation to which the Controller is subject: Art. 6 (1) c GDPR

Collection and processing of your personal information may be necessary for compliance with a legal obligation to which we are subject under EU laws or the laws of a EU Member State.

Collection and processing is necessary for the purposes of our legitimate interests: Art. 6 (1) f GDPR

The collection and processing of your personal information may be necessary for the purposes of our legitimate interests. We collect and process server logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs. We use information collected and processed via subscription downloads, extension update checks, emergency notifications and feedback data sent by you, for technical reasons, such as, but not limited to, ensuring the security of the extension version used by you. Ensuring the security of our extension is in your and our vital interest and therefore we use such data. Furthermore, we collect and process such data to ensure that our website and extension are constantly improved and adjusted to the changing requirements for an efficient usability and the technical environment. Ensuring the usability of our websites and of our extension is in your and our vital interest and therefore we use such data.

What rights do you have?

In compliance with the GDPR and the applicable EU laws and to the extent legally permitted, you have the following rights to protect your personal information collected and processed by us:

Information, access, rectification and restriction rights

Naturally you have the right to receive, upon request, information about the personal information stored by us about you and information about how we collect, process and store your personal information. Where that is the case, you have the right to gain access to such personal information stored by us. You have the right to request from us the rectification of your inaccurate personal information. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal information completed. You have the right to request restriction of processing.

Right to data portability

You also have the right (1) to receive all personal information concerning you and which you have provided to us, in a structured, commonly used and machine-readable format and (2) to transmit that data to another controller.

Right to erasure of your data

You have the right to demand from us the erasure of your personal information, where – inter alia – one of the following grounds applies:

Please note, if data needs to be retained for legal purposes pursuant to Art. 17 (3) GDPR, we will restrict the use of the respective data.

Personal information in connection with payments

If you have attempted a payment on the AdBlock Protect website then you can request to have your email and name removed from our system. To do this, please open a private ticket on our support site that contains your Order ID or email for the purchase. Please note that AdBlock Protect can only remove information from our own systems and cannot make changes to data that you give to a payment processor.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the collection and processing of personal information relating to you infringes the GDPR.

Right to object to the processing of your data

You have the right to object at any time to the collection and processing of your personal information on grounds relating to your particular situation, when collection and processing is based on our legitimate interest (Art. 6 (1) f GDPR).

Right to withdraw your consent at any time

You have the right to withdraw your consent at any time, when you have provided us with your consent to the collection and processing of your personal information for one or more specific purposes.

How to exercise your rights

To exercise your rights, please contact us here.

Changes and updates to this policy

AdBlock Protect reserves the right to change this policy for any reason, and may make small, inconsequential changes to this policy with or without notice. Each time this policy is changed we will revise the "Effective Date" at the top of this page. When substantial changes are made to the disclosure of your personal information AdBlock Protect will attempt to notify you through the email that was provided during the payment process. Your continued use of the AdBlock Protect website or browser extension constitutes your agreement to this Privacy Policy and any revisions or updates.

Contact

You can always contact us with questions or feedback about our privacy policy here.