Privacy Policy

1. Who We Are

AdOff is a Chrome extension that blocks advertisements and trackers. The data controller is the AdOff team, reachable via the support page.

2. Data we do not collect

AdOff non raccoglie, non trasmette e non conserva:

• Cronologia di navigazione o URL dei siti visitati
• Contenuto delle pagine o dati inseriti nei moduli
• Cookie di profilazione o tracciamento di terze parti
• Dati comportamentali o di profilazione
• Qualsiasi dato che possa essere usato per profilarti senza il tuo consenso

By default AdOff does not collect navigation data. If you voluntarily enable the Anonymous Navigation Telemetry described in section 15, see that section for details.

The FREE version works without registration or account. No data is collected from free users beyond what is stored locally on the device.

3. Account and Support Data

If you create a free account or choose to voluntarily support the project, we collect the following data:

• Email address — collected when you create your free account, and via Stripe if you choose to make a voluntary contribution. Used for: account login, service communications, and (for contributors) payment receipt. Legal basis: contract performance for the free account (Art. 6(1)(b) GDPR); consent for voluntary contributions (Art. 6(1)(a) GDPR).
• Password, stored as irreversible hash (SHA-256 + salt). Never in plain text. Never shared with third parties.
• Google OAuth, if you use "Sign in with Google", we receive your Google email and profile ID. We do not access any other data from your Google account.
• Device UUID, a random identifier generated when you install the extension. Used to enforce device limits per license. Not connected to your identity. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Data Stored Locally

AdOff uses chrome.storage.local and chrome.storage.sync to store the following locally on your device:

• Your free account license key
• Extension preferences (such as site whitelist and UI settings)
• Activation status (active/inactive per site)

This data is never sent to third-party servers and remains on your browser. chrome.storage.sync may synchronize data between your devices through your Google account, according to Google's policies.

5. License Validation

If you have created a free account, the extension contacts our servers to verify your license key. The following information is transmitted:

• Your license key
• Device UUID
• Browser/OS identifier (for device management panel)
• Extension version

Your IP address is visible to our server (Cloudflare) but is not stored permanently. We derive only country and city level geolocation for aggregated analytics. Server access logs are deleted within 30 days.

AI Support Assistant

Our website and extension include an AI support assistant. When you use the chat, the following applies:

• The messages you type are processed by our self-hosted AI (running on our own infrastructure) to generate support answers. They are not sent to external AI providers.
• Conversations are stored for up to 90 days to provide support continuity, quality assurance, and abuse prevention, then automatically deleted. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• If your request requires a human operator, the conversation and the email you provide are turned into a support ticket and may be forwarded to our support team.
• Please do not share passwords or other sensitive data in the chat. Do not share full payment card numbers. To protect the service from automated abuse we use Cloudflare Turnstile (anti-bot) and rate limiting.
• You can request deletion of your conversation history at any time via the support page.

Newsletter

If you subscribe to our newsletter, we collect your email address. This data is used solely to send you updates about AdOff. Your email is never shared with or sold to third parties. You can unsubscribe at any time by contacting us. The legal basis is your consent (Art. 6(1)(a) GDPR), given when you subscribe.

6. Third Parties

AdOff does not share, sell, or transfer data to third parties for marketing or profiling. We do not use:

• Behavioral analytics services
• Advertising services
• Third-party tracking SDKs

Third-party services we use to deliver the Service:

• Stripe — payment processing, used only if you choose to make a voluntary contribution. Payment data is handled by Stripe according to their Privacy Policy.
• Google Sign-In, if you use "Sign in with Google", authentication is managed by Google. See Google's Privacy Policy.
• Cloudflare, hosting and content distribution. Cloudflare may process IP addresses according to their Privacy Policy.
• AdGuard DNS, public DNS resolver used by our Android Private DNS setup (dns.adguard.com). DNS queries are resolved by AdGuard's servers. AdOff does not log or store DNS queries, but AdGuard may process them according to their own privacy policy. See: AdGuard DNS Privacy Policy.

7. Extension Permissions

AdOff requires the following Chrome permissions, all necessary for operation:

• declarativeNetRequest, to block network requests (ads, trackers)
• storage, to save preferences and license locally
• tabs, to apply settings to the active tab
• scripting, to inject CSS hiding rules on web pages
• webNavigation, to reapply filters when you navigate between pages in the same tab

None of these permissions are used to collect or transmit browsing data.

8. Your Rights (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

• Access, request a copy of any data we hold about you
• Rectification, request correction of inaccurate data
• Erasure, request deletion of your data (right to be forgotten)
• Data portability, receive your data in portable format
• Restriction, request limitation of processing
• Objection, object to processing of your data
• Complaint, lodge a complaint with a supervisory authority in the EU
• Account deletion, delete your account and all associated data
• Data export, export your account data
• Device management, manage your licensed devices at adoff.app/account

To exercise your rights, contact us through the support page.

9. Data Retention

• Local preferences: stored on your device until you uninstall the extension or clear browser data
• Account data: (email, hashed password) retained while your account is active. Deleted on request
• Device UUIDs: removed when you remove the device from your account dashboard
• IP-derived geolocation: aggregated at country level only. No individual IP address is stored permanently
• Hashed passwords: deleted when your account is deleted
• License validation logs: automatically deleted within 30 days
• Payment data: managed by our payment processor according to their retention policies

10. Legal Basis for Processing

The legal basis for processing account data is contract performance (Art. 6(1)(b) GDPR), necessary to provide your free account and deliver the service. Device UUID processing is based on legitimate interest (Art. 6(1)(f) GDPR), necessary to enforce device limits per account.

11. Minors

AdOff is not intended for persons under age 13. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy in the future. Any significant changes will be communicated through the extension or website. Continued use of AdOff after a change constitutes acceptance of the updated policy.

14. Voluntary Diagnostic Data (Ad-Leak Reports)

When you uninstall AdOff and voluntarily choose to report which website still showed ads, you may optionally share only the domain name (e.g., example.com) of that website. This helps us identify and fix ad-blocking bugs.

• What we collect: Only the domain name — no URLs, no browsing history, no page content, no personal data.
• Always opt-in: This data is never collected without your explicit, voluntary consent (checkbox). It is never automatic.
• Not linked to you: Domain reports are not linked to your device ID or account. They are stored with an anonymized uninstall identifier.
• Deletable: You can request deletion of your diagnostic data at any time via the support page.
• Purpose: Used exclusively to improve ad-blocking effectiveness and fix broken-site false positives.
• Possible publication: If you report a site where ad blocking did not work, the report may be published as a public issue in a code repository to help track the problem (including the reported domain, the extension version and your optional comment): such content becomes publicly visible.

14. Dati Diagnostici Volontari (Segnalazioni Ad-Leak)

Quando disinstalli AdOff e scegli volontariamente di segnalare quale sito mostrava ancora annunci, puoi condividere facoltativamente solo il nome di dominio (es. example.com) di quel sito. Questo ci aiuta a identificare e correggere i bug del blocco annunci. Insieme al dominio vengono trasmessi anche: la versione dell'estensione AdOff installata, dati tecnici sull'elemento pubblicitario visibile (es. selettore CSS, posizione), l'elenco delle regole di filtro attive (non la cronologia di navigazione) e informazioni di base su browser e sistema operativo.

• Cosa raccogliamo: Solo il nome di dominio — mai l'URL completo, nessuna cronologia di navigazione, nessun contenuto di pagina, nessun dato personale.
• Sempre opt-in: Questi dati non vengono mai raccolti senza il tuo consenso esplicito e volontario (casella di selezione). Non è mai automatico.
• Non collegati a te: Le segnalazioni di dominio non sono collegate al tuo ID dispositivo o account. Vengono conservate con un identificatore di disinstallazione anonimizzato.
• Possibile pubblicazione: Se il motivo della segnalazione è un sito su cui il blocco non ha funzionato, la segnalazione può essere pubblicata come issue pubblica su un repository di codice per tracciare il problema (con dominio segnalato, versione dell'estensione ed eventuale commento): tali contenuti diventano quindi pubblici.
• Eliminabili: Puoi richiedere l'eliminazione dei tuoi dati diagnostici in qualsiasi momento tramite la pagina di supporto.
• Finalità: Utilizzati esclusivamente per migliorare l'efficacia del blocco annunci e correggere i falsi positivi di siti non funzionanti.

Le segnalazioni diagnostiche vengono conservate per un massimo di 90 giorni, poi eliminate.

15. Anonymous Navigation Telemetry (Optional)

If you enable consent in Options → Privacy, AdOff shares in aggregated form: the hostname of the sites you visit (e.g. example.com, never the full URL or page content) and the number of ads blocked/possibly not blocked on that site. This helps verify that ad-blocking actually works on the sites you visit.

• Always opt-in: Disabled by default. Only activates with your explicit consent, revocable at any time.
• Revocation means immediate deletion: When you disable consent, data already collected for your device is deleted immediately, not just future collection stopped.
• Not linked to your identity: Your device is identified by a non-reversible hash, never by account or email.
• Retention: 90 days, then automatic deletion.
• Consent is logged: We keep a technical log of when you activated/deactivated this option (date and policy version accepted), as proof of consent.

13. Contact

For questions about privacy or to exercise your rights (access, rectification, deletion), contact us via:

Support page