Last updated: August 23, 2026
This Privacy Policy describes how Blurrica (“the Extension”, “we”) collects, uses, stores, and protects data when you use our browser extension.
Blurrica is published by PuzzWe, a Société par Actions Simplifiée Unipersonnelle (SASU) registered under number 107 118 499 R.C.S. Paris, with its registered address at 47 rue Vivienne, 75002 Paris, France.
For any question regarding this policy or your data, contact us at: privacy@blurrica.com
Blurrica automatically detects and hides video game spoilers on the web pages you visit, based on the games you select as “to avoid.” This is the Extension’s sole purpose, and all data collected is used exclusively to provide or improve this functionality.
In line with the data categories defined by the Chrome Web Store, here are the types of data processed by Blurrica:
When you create an account, we collect your email address and an encrypted password (managed by Supabase Auth, never stored in plain text by us). This allows us to authenticate you and link your subscription to your account.
Subscriptions are processed by Stripe. Blurrica never stores your full payment card details (card number, CVV): this data only passes through Stripe’s PCI-DSS certified servers.
We do retain, linked to your account:
technical Stripe identifiers (customer ID, checkout session ID, subscription ID, refund ID where applicable) — used solely to ensure reliable synchronization between Stripe and your access to the Extension;
the precise status of your subscription (trial, active, expired, refunded, canceled, payment failed, cancellation scheduled);
key dates of your subscription lifecycle (first payment, trial end, access expiration, cancellation, refund).
This data allows us to grant access to premium features at the right time and to respond correctly in case of a failed payment or a refund.
As soon as you create an account, you get a free trial period giving you access to the Extension’s premium features. There is no limited free (“freemium”) tier: once the trial period ends, access to your account is suspended.
To restore access, you must subscribe to a paid plan. Since access to Blurrica Premium is granted immediately upon payment confirmation, before you proceed to payment we ask you to explicitly check a box by which you expressly request that the paid service begin immediately upon payment confirmation, before the end of the applicable 14-day withdrawal period.
You nevertheless retain your 14-day right of withdrawal from the date of subscription, under the conditions described in our Terms of Sale.
If you exercise this right within the applicable period, Blurrica will refund the full amount paid for the Subscription in accordance with our Terms of Sale.
We retain proof of your request for immediate access and acceptance of the contractual documents, including the date/time of acceptance and the versions of the texts presented, so that we can demonstrate the conditions under which your Subscription was entered into.
To detect spoilers, the Extension analyzes the text of visible zones on the page you are viewing (titles, text excerpts) and compares it against a list of keywords linked to the games you follow. Only the text zones relevant to detection (scannedZonesText) are processed — the Extension never captures the full content of the page, nor your overall browsing history. This analysis only occurs on pages you actively visit and is not retained after processing.
When you search for a game to add to your tracking list, your search keyword is sent to our server, which queries the IGDB API to retrieve the matching game’s name and cover image. Your IGDB API credentials are never exposed in the browser: this request passes exclusively through our secured backend, which first verifies your authentication and applies rate limiting to prevent abuse. IGDB only receives the searched keyword, never your identity, email, or any other personal identifier.
If you delete your account, we retain certain billing data in a manner dissociated from your identity (see Section 5), in accordance with our legal bookkeeping retention obligations.
In accordance with GDPR, every processing of personal data relies on a specific legal basis. Below, for each purpose, is the corresponding legal basis:
| Data / Processing | Legal Basis (GDPR Art. 6) | Explanation |
|---|---|---|
| Email, password (authentication) | Performance of a contract (6.1.b) | Necessary to create your account and provide access to the Extension |
| Stripe identifiers, subscription status | Performance of a contract (6.1.b) | Necessary to manage your paid subscription |
| Retention of billing data after account deletion | Legal obligation (6.1.c) | Required by Article L123-22 of the French Commercial Code (10-year accounting retention) |
| Proof of the request for immediate performance and acceptance of contractual documents | Legal obligation (6.1.c) and performance of a contract (6.1.b) | Necessary to demonstrate the conditions under which the Subscription was entered into and immediate performance was requested |
Page text analysis for spoiler detection (scannedZonesText) |
Performance of a contract (6.1.b) | Core functionality you explicitly request by using the Extension |
| Search keyword sent to IGDB | Performance of a contract (6.1.b) | Necessary to let you search for and follow a game |
We do not process any data on the basis of legitimate interest, nor for direct marketing purposes without separate consent.
We do not collect your overall browsing history or the list of sites you visit outside of the targeted spoiler-detection analysis.
We never sell, rent, or share your data with data brokers or for personalized advertising purposes.
We do not track your activity for marketing profiling purposes.
| Partner | Data Shared | Purpose |
|---|---|---|
| Supabase (hosted in the European Union) | Email, encrypted password, account ID | Authentication and secure storage (Postgres database with Row Level Security) |
| Stripe | Customer ID, subscription status | Payment processing and subscription management |
| IGDB | Game search keyword (anonymous) | Retrieval of game name and cover art |
| Render (hosted in the European Union) | All requests passing through our API | Hosting of our application server |
All data that we host directly (account, authentication, analyzed content) is hosted on servers located in the European Union, via Supabase and Render.
Exception: Stripe. Our payment provider, Stripe, is a US-based company. Stripe’s processing of your payment data may involve a transfer to the United States. This transfer is governed by the safeguards Stripe has put in place under GDPR (European Commission Standard Contractual Clauses). You can review Stripe’s privacy policy at stripe.com/privacy for more details on these safeguards.
Outside of Stripe, we do not transfer any personal data outside the European Economic Area (EEA). Should this change, we will update this policy to inform users and specify the safeguards in place.
You can delete your account at any time from within the Extension. Upon deletion:
Your account is immediately signed out and your local session is cleared.
The direct link between your user identifier and our internal records is severed (user_id is set to NULL): we can no longer, internally, directly link the retained billing record to your Blurrica account.
However, due to legal bookkeeping retention obligations, we retain certain technical Stripe identifiers (customer ID, subscription ID, refund ID) along with the status and dates of your subscription. These identifiers remain indirectly linkable to your identity via Stripe itself, which maintains its own correspondence between these identifiers and your payment information, in accordance with its own legal obligations and privacy policy.
In accordance with Article L123-22 of the French Commercial Code, this billing data is retained for 10 years from the date of the transaction, strictly for accounting and tax compliance purposes, and is no longer used for any other purpose.
In accordance with the data minimization principle (GDPR Article 5.1.c), after deletion we only retain the fields strictly necessary for this legal obligation — no other account data (preferences, authentication data, activity) is retained.
If you reside in the European Union, you have the following rights regarding your personal data:
Right of access: obtain a copy of the data we hold about you.
Right to rectification: correct inaccurate data.
Right to erasure: request deletion of your account (available directly within the Extension).
Right to data portability: receive your data in a structured format.
Right to object: object to certain processing activities.
To exercise these rights, contact us at privacy@blurrica.com. We will respond within one month, in accordance with GDPR.
If you believe your rights are not being respected, you also have the right to lodge a complaint with a supervisory authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL):
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr
If you reside in another EU member state, you may contact the data protection authority of your own country.
Blurrica is available internationally. If you reside in a jurisdiction with specific data protection laws (CCPA in California, LGPD in Brazil, PIPEDA in Canada, etc.), the transparency and minimization principles described in this policy apply to you as well. For any jurisdiction-specific request, contact us at the address above.
All data is transmitted over encrypted connections (HTTPS/TLS). Our database uses Supabase’s Row Level Security (RLS) policies, ensuring that one user can never access another user’s data, including in the event of an application-level vulnerability.
Blurrica is not designed to be used unsupervised by individuals under the age of 16. We do not knowingly solicit account creation or the collection of personal data from children under 16 without the consent of a parent or legal guardian. If you believe a child under 16 has provided us with personal data without such consent, please contact us at privacy@blurrica.com so that we can delete it. The conditions for subscribing to a paid plan, which require separate contractual capacity, are set out in our Terms of Sale.
Our use of information received from the APIs we rely on complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: data is only used to provide or improve the Extension’s user-facing functionality, is never transferred for advertising purposes, and any human access to this data is strictly limited and justified (user support, security, legal obligations).
This policy may be updated to reflect changes in our practices, technical partners, or applicable regulations. The “Last updated” date at the top of this document will be revised accordingly each time. We encourage you to review this page periodically.
For any question regarding this Privacy Policy or your personal data:
Email: privacy@blurrica.com
Website: blurrica.com