Privacy Policy

Last updated: 2026-07-12

Blindfold is built so that your browsing stays yours. Blocking runs on your device, there is no account, and there is no Blindfold server that watches what you read. This policy explains that in plain terms.

The short version

Blindfold has no user accounts and asks for no personal information to work.
Ad and tracker blocking happens entirely on your device, in Safari and, if you turn on Blindfold Everywhere, system-wide.
The on-device AI that learns new ads runs locally. Nothing it analyzes is uploaded.
We don’t track you, sell data, or run advertising of any kind.

What stays on your device

Filter lists, the rules the AI writes, your custom rules, your allowlist, and your blocking statistics all live on your iPhone or iPad. Blindfold does not send your browsing history, the pages you visit, or your stats to us or anyone else.

What leaves your device, and why

Filter-list updates. Blindfold downloads updated blocking lists over HTTPS from a public rules repository. These are ordinary file downloads; like any web request they expose your IP address to the host, but they carry no account or identifier for you.
Blindfold Everywhere (optional). This feature runs on Apple’s URL Filter API and needs iOS 26. Checking an address against the blocklist uses private information retrieval: the query leaves your device encrypted so that the service answering it cannot work out which address was asked about. Blindfold operates that service, alongside an Oblivious HTTP gateway that hides your device’s network address from it. Blindfold does not receive, store, or log your browsing history at any point.
iCloud sync (optional). If you turn on sync, your settings and custom rules are synchronized through your own iCloud account by Apple. They are not sent to us and we cannot read them.
Feedback (only if you send it). If you contact us from inside the app, the message you write, and your email address if you choose to include one, is transmitted so we can reply. We use it only to answer you.
Purchases. Subscriptions and the lifetime purchase are handled by Apple. We never see your payment details.

Analytics on this website

This website uses Abner, a cookieless, privacy-friendly analytics tool. It sets no cookies and does not track individuals across sites.

Children

Blindfold is not directed at children and does not knowingly collect information from them.

Changes

If this policy changes, we’ll update the date above and post the new version here.

Contact

Questions about your privacy: [email protected]

If you request a code at /promo, we store the email address you give us, the language you used the site in, the time you gave consent, and the version of the consent wording you agreed to. We also keep a hashed form of your IP address, computed with HMAC-SHA256 using a key we hold, as a pseudonymised record that consent was given; we do not store your IP address itself. Your address is only added to the mailing list once you click the confirmation link in the email we send you, which is what records your confirmation.

We use this to send you your claim link, and to send occasional Blindfold news you’ve opted into. We keep your address until you ask us to delete it. If you unsubscribe, we stop emailing you and keep only a record that you opted out.

We do not sell your address. The mail itself is delivered through Freesend, our own sending service, using Amazon SES; we do not share your address with anyone beyond that.

Every email includes an unsubscribe link. You can also write to [email protected] at any time to be removed, and we will delete your address.

This is the only personal data getblindfold.app collects. The app itself still collects nothing.