Privacy Policy

1. Who we are

PixelBlocker+ is run by J&M Productions LTD, a company registered in England and Wales. We decide how your personal data is used (we are the “controller”).

This notice covers this website (including the web Dom page), your PixelBlocker+ account, the desktop apps, the Android apps and the browser extension. Contact us about your data at [email protected].

2. What never leaves your device

Your screen is checked on your device only. Screen images, video frames and the pages you visit in the browser extension are never sent to us or to your partner. Recordings and exports are saved only on your device.

What the detector finds stays on your device too. Only totals and status leave it: how long you were covered goes into your stats, and your partner sees whether the extension is covering a page. Section 3 lists these.

Your app settings stay on your device, except the session settings, stats and lock details in section 3.

3. What we collect and why

• Your account. Your email address, your password (stored so that no one can read it, us included), and a record of each sign-in: the device name, a device code, the IP address and the time. Why: to run your account and keep it secure.
• Your device. A one-way code made from your device’s details, so a licence or Premium works on the devices it is meant for, and the app version you use. On a computer, the device name is the name of your computer, which may include your own name. You can see your devices in your account.
• Your licence and payments. Your licence key, the plan you bought, the email used at checkout, the status of any subscription, any refund or payment dispute, and what you agreed to at checkout and when. Card details are handled entirely by our payment processor; we never see them. We pass it your email, your account reference and your username so the payment reaches the right account. It tells us whether a payment worked, was refunded or was disputed.
• Your username and role. Your username (one you choose, or one made for you) and whether you use it as a Sub or a Dom. Anyone can check whether a username is taken, and whether it is a Sub or a Dom.
• Pairing and sessions. Who you are paired with, whether you are online, and your session settings and progress, whether you run them from an app or from the web Dom page. These pass through our server to your partner, and we hold the current settings until the session ends. A paired browser extension reports whether it is on and covering the page, never what is on it. To connect your app directly to your partner’s, each app learns the other’s IP address.
• Chastity locks. The state of a lock (times, rules, status, the two usernames), so your keyholder can see it. Verification photos go only to your keyholder, encrypted. We never store them and cannot see them. A toy’s state and commands also go only between the two apps.
• Lockbox photos. If you pick Escrow on a lock, you upload a photo of your lockbox dials. We hold it until you clear the lock or your account is deleted, give it back only to you, and your keyholder never sees it.
• Stats, session history and leaderboards. Each session’s usernames, start, end and length, and weekly totals (such as your streak and how long you were covered). The public leaderboards show your username, your totals, your profile picture, the number of Subs and when you were last active. Each day the top 25 are also posted in our community server.
• Dom profile (optional). Your bio, links and picture. Anyone can see a Dom profile.
• Support. What you send us by email or in a ticket in our community server.
• Technical logs. When your app or browser talks to our server we log the IP address, the username and what was asked for, never what we send back and never your email address. We use them to keep the service running and fix faults.
• Visiting this website. Our website host receives your IP address and browser details to deliver the pages and protect the site. Our pages load their fonts from a font service, which also receives your IP address and browser details.

Some of this comes from other people: your partner (the session settings they choose), and our payment processor (payment status, refunds and disputes).

You must give an email address to make an account, a licence key to use a licence and a username to pair. Without them we cannot provide those parts of PixelBlocker+.

Extras that share data with other services

• Chat status, in the Dom app on a computer. While the Dom app runs, it shows a short status to your contacts in the chat app on the same computer, for example the number of active Subs. To stop it, turn off activity status in that chat app. The Sub app shows no status.
• Your keyholder’s channel. Your keyholder can post your username, the lock time and their reason to a chat channel they choose, where its members can read it. They can do this only on a lock where you allowed it: it is off unless you turn it on for your own lock, or accept a lock request that lists it.
• Game challenges. If you set up a game whose results come from the game’s own online service, the app sends your player name and the key you entered to that service. Other games are read on your computer only.
• The Android in-app browser. The pages you open go directly to those websites, and searches go to the browser’s search engine.

4. Our lawful basis

• Contract: your account, licence, Premium, pairing, sessions, locks, the game challenges you set up, the Android in-app browser and the emails that go with them.
• Legal obligation: payment and tax records.
• Legitimate interests: keeping accounts and the service secure, stopping licence sharing and abuse, technical logs and app versions, handling refunds, payment disputes and chargebacks, keeping the record of what you agreed at checkout, answering support, and delivering this website and its fonts. Our interest in each case is running a safe, working service and protecting our business.
• Special data. Your role as a Sub or Dom, sessions, chastity locks, toys, your stats, session history, the leaderboards, your Dom profile, chat status and your keyholder’s channel can say something about your sex life. The law treats that as special data, and so do technical logs where they show your username or what you asked for. You choose your role and each of these features yourself, and we use this data only to provide them. You can ask us at any time to delete your username and its data; we can then no longer provide those features.
• Chat status: shown by your own chat app while the Dom app runs, and stopped with that app’s activity status setting.
• Your keyholder’s channel: your agreement on that lock (section 3).

We make no decisions about you by automated means alone that have legal or similarly significant effects.

5. Who receives your data

We share only what each one needs:

• our hosting, network and connection providers, who run our service and this website, store our data, deliver app downloads and updates, and help your app reach our server and your partner’s app;
• our email providers, who send our emails and receive and store the mail you send us;
• our payment processor, which takes payments and handles refunds and disputes;
• our community server, where support tickets and the daily top 25 appear;
• our font service, when you visit this website;
• your partner or keyholder, as described in section 3;
• your chat contacts, while the Dom app shows chat status;
• the members of a chat channel your keyholder chooses, only on a lock where you allowed it;
• services you set up or open yourself: a game’s online service for a challenge, and the websites and search engine you use in the Android in-app browser;
• anyone, for the username check (including whether a username is a Sub or a Dom), the leaderboards and Dom profiles;
• our professional advisers, such as accountants and lawyers;
• the police, regulators or courts, where the law requires it.

You can ask us who they are (see section 9).

6. Where it is processed

Some of our providers process data outside the UK, for example in the United States or the European Economic Area. Where they do, the transfer relies on UK regulations that recognise the other country’s protection, or on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for a copy of the safeguard.

We protect your data and limit who can see it.

7. How long we keep it

• Account, sign-in and device records: while your account is open. When you ask us to delete your account, we delete it within one month, with everything held under your username, except what the law makes us keep. Copies in backups are gone within 7 days after that.
• Licence keys: while the licence can be used, then as a payment record.
• Payment, refund and dispute records, and what you agreed to at checkout: 6 years from the end of the financial year they belong to, as tax law requires, then deleted.
• App version records: with the licence or device they belong to.
• Session settings: until the session ends, or the next session replaces them. Group sessions: up to 6 hours. Pairing codes and the pairing they start: up to 15 minutes. Pairing requests: up to 24 hours.
• Pairings: until either of you unpairs.
• Chastity lock state: until the lock is archived. Lockbox photos: until you clear the lock or your account is deleted.
• Stats, session history and your username: until you ask us to delete them, or your account is deleted.
• Dom profile: until you delete it.
• Support messages: as long as we need them to help you and to keep a record of what we agreed.
• Technical logs: for a limited time set by our hosting provider.
• What our website host receives when you visit: only as long as needed to deliver and protect the site. The font service keeps what it receives under its own rules.

8. Cookies and storage on this website

When you sign in here we set two cookies that keep you signed in: one for 30 minutes and one for 30 days, renewed when used. The account pages also store, in your browser, a device code for sign-in and your Dom username. Some pages keep short notes in your browser tab until you close it: that you came from the extension, and that you started a checkout and whether you chose monthly or yearly, so we can warn you before you pay twice.

The account pages also store your light or dark theme in your browser, which only sets how the pages look. The rest is needed for what you ask the site to do. We use no advertising, analytics or tracking cookies. You can clear any of these in your browser settings; you will then be signed out.

9. Your rights

You can ask us to:

• give you a copy of your data, and tell you who has received it;
• correct it;
• delete it;
• limit how we use it;
• give it to you, or another company, in a common format;
• stop using it (see “Your right to object” in section 4).

Email [email protected] from the address on your account, or give your username. We may ask you to prove who you are. We answer within one month. If a request is complex, or you send several, we may take up to two more months; we will tell you why within the first month. It is free.

10. Complaints

If you are unhappy with how we use your data, tell us first at [email protected]. We will confirm we have your complaint within 30 days, look into it without undue delay and tell you the outcome.

You can also complain to the Information Commission (ICO), the UK regulator: ico.org.uk/make-a-complaint.

11. Adults only

PixelBlocker+ is for people aged 18 and over. We do not knowingly collect data from anyone under 18, and we delete it if we find we have.

12. Changes to this notice

We will update this notice when what we do changes. The date at the top shows the latest version. Before we use your data for a new purpose, we will tell you.