Privacy Policy
In brief: AdOff does not collect personal browsing data. It does not track you. It does not sell data to anyone. The only communication with our servers is Pro license validation, and even there we share the bare minimum. The FREE version works without any registration or account. No data is collected from free users beyond what is stored locally on the device.
1. Who We Are
AdOff is a Chrome extension that blocks advertisements and trackers. The data controller is the AdOff team, reachable via the support page.
2. Data we do not collect
AdOff non raccoglie, non trasmette e non conserva:
- Cronologia di navigazione o URL dei siti visitati
- Contenuto delle pagine o dati inseriti nei moduli
- Cookie di profilazione o tracciamento di terze parti
- Dati comportamentali o di profilazione
- Qualsiasi dato che possa essere usato per profilarti senza il tuo consenso
The FREE version works without registration or account. No data is collected from free users beyond what is stored locally on the device.
3. Account Data (Pro Users Only)
If you create an account or purchase a Pro plan, we collect the following data:
- Email, collected at purchase (via Stripe) and at registration. Used for: license delivery, account access, service communications. Legal basis: contract performance (Art. 6(1)(b) GDPR).
- Password, stored as irreversible hash (SHA-256 + salt). Never in plain text. Never shared with third parties.
- Google OAuth, if you use "Sign in with Google", we receive your Google email and profile ID. We do not access any other data from your Google account.
- Device UUID, a random identifier generated when you install the extension. Used to enforce device limits per license. Not connected to your identity. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
4. Data Stored Locally
AdOff uses chrome.storage.local and chrome.storage.sync to store the following locally on your device:
- Your Pro license key (if purchased)
- Extension preferences (such as site whitelist and UI settings)
- Activation status (active/inactive per site)
This data is never sent to third-party servers and remains on your browser. chrome.storage.sync may synchronize data between your devices through your Google account, according to Google's policies.
5. License Validation
If you have purchased a Pro plan, the extension contacts our servers to verify your license. The following information is transmitted:
- Your license key
- Device UUID
- Browser/OS identifier (for device management panel)
- Extension version
Your IP address is visible to our server (Cloudflare) but is not stored permanently. We derive only country and city level geolocation for aggregated analytics. Server access logs are deleted within 30 days.
AI Support Assistant
Our website and extension include an AI support assistant. When you use the chat, the following applies:
- The messages you type are processed by our self-hosted AI (running on our own infrastructure) to generate support answers. They are not sent to external AI providers.
- Conversations are stored for up to 90 days to provide support continuity, quality assurance, and abuse prevention, then automatically deleted. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- If your request requires a human operator, the conversation and the email you provide are turned into a support ticket and may be forwarded to our support team.
- Please do not share passwords, full payment card numbers, or other sensitive data in the chat. To protect the service from automated abuse we use Cloudflare Turnstile (anti-bot) and rate limiting.
- You can request deletion of your conversation history at any time via the support page.
6. Third Parties
AdOff does not share, sell, or transfer data to third parties for marketing or profiling. We do not use:
- Behavioral analytics services
- Advertising services
- Third-party tracking SDKs
Third-party services we use to deliver the Service:
- Stripe, payment processing. Payment data is handled by Stripe according to their Privacy Policy.
- Google Sign-In, if you use "Sign in with Google", authentication is managed by Google. See Google's Privacy Policy.
- Cloudflare, hosting and content distribution. Cloudflare may process IP addresses according to their Privacy Policy.
7. Extension Permissions
AdOff requires the following Chrome permissions, all necessary for operation:
- declarativeNetRequest, to block network requests (ads, trackers)
- storage, to save preferences and license locally
- tabs, to apply settings to the active tab
- scripting, to inject CSS hiding rules on web pages
- webNavigation, to reapply filters when you navigate between pages in the same tab
None of these permissions are used to collect or transmit browsing data.
8. Your Rights (GDPR)
Under the EU General Data Protection Regulation, you have the right to:
- Access, request a copy of any data we hold about you
- Rectification, request correction of inaccurate data
- Erasure, request deletion of your data (right to be forgotten)
- Data portability, receive your data in portable format
- Restriction, request limitation of processing
- Objection, object to processing of your data
- Complaint, lodge a complaint with a supervisory authority in the EU
- Account deletion, delete your account and all associated data
- Data export, export your account data
- Device management, manage your licensed devices at adoff.app/account
To exercise your rights, contact us through the support page.
9. Data Retention
- Local preferences: stored on your device until you uninstall the extension or clear browser data
- Account data: (email, hashed password) retained while your account is active. Deleted on request
- Device UUIDs: removed when you remove the device from your account dashboard
- IP-derived geolocation: aggregated at country level only. No individual IP address is stored permanently
- Hashed passwords: deleted when your account is deleted
- License validation logs: automatically deleted within 30 days
- Payment data: managed by our payment processor according to their retention policies
10. Legal Basis for Processing
The legal basis for processing account and license data is contract performance (Art. 6(1)(b) GDPR), necessary to verify your Pro license and deliver the service you purchased. Device UUID processing is based on legitimate interest (Art. 6(1)(f) GDPR), necessary to enforce device limits per license.
11. Minors
AdOff is not intended for persons under age 13. We do not knowingly collect data from minors.
12. Changes to This Policy
We may update this Privacy Policy in the future. Any significant changes will be communicated through the extension or website. Continued use of AdOff after a change constitutes acceptance of the updated policy.
13. Contact
For questions about privacy or to exercise your rights (access, rectification, deletion), contact us via: