Privacy.

What Blobby sees

On-device only: which monitored app is in the foreground and how long it's been open. That's the trigger signal. The content of your feed is never inspected.

In the browser extension and the Android app, Blobby also keeps the minutes you spent on your watched sites and apps each day, for the last 14 days, to show you your week. It is one number per day, with no site or app name. It stays on the device: never synced, never sent.

What leaves your device

For analytics: anonymous, aggregated event data, and only if you opt in. App names are normalized to social_app before any network call. No PII. No fingerprinting. No third-party trackers.

Anything else leaves only when you use a feature that needs it: Pro, sync once you sign in, making your own pack, or sending a correction or a report. Each one is explained below.

The browser extension

The extension watches which of your monitored sites is in the foreground and how long you have been there. That is all. It never reads the page, never looks at your feed, and never sends a site name anywhere.

Settings (your sites, budgets, topics) and each day's spend against them are kept in your browser. If your browser profile syncs extension data, they follow you through that sync, which belongs to your browser's maker, not us; we never see it.

If you buy Pro or redeem a code, the device token it returns is stored locally on that one browser and is deliberately excluded from sync. Free installs never have one.

The extension asks permission for the sites you choose to monitor, so it can show up on them. It also reaches Blobby's own server for Pro: to start a checkout, to check or redeem a code (about once an hour in the background for a browser that has one, and when you open its Pro settings), to link another device, or to open your subscription page. Apart from Pro, it sends three things, each only if you ask: a correction to a question, a bug report (both below), and, if you turn on anonymous usage stats in its settings (off by default), a note that its Pro plans came into view. That note carries a random ID made for it alone, deleted when you turn the stats off. Nothing beyond that.

Accounts

Optional. The core product works without one. Sign-in (Apple / Google) only powers Pro cross-device sync. Delete your account any time from the app, or at getblobby.com/account/delete; it erases the account, its sessions and everything synced, on the spot.

Your own packs

In the Android app, you can paste your notes and get a pack of questions made from them. The text goes through our server to Anthropic, whose Claude model writes the questions. We don't keep it: the signed pack comes back to your phone and stays there.

To hold the limit of three packs per install, the app sends a random ID made on your phone. Our server keeps only a one-way hash of it, with how many packs you've made and when. It isn't tied to your account.

Corrections you send

After a question, you can tell us it's wrong and give a link. We get your words, the link, the question's number and pack, its language, and the hour you sent it. Nothing else: no account, no device or install ID, no app or site name. Your IP is checked for a few minutes to stop abuse, then dropped.

We check each one against its source, with help from Anthropic's Claude, which checks sources for us. We delete it once it's been looked at, and within 90 days at most. It isn't tied to you, so we can't find it from your account: to have one deleted sooner, email us its text.

Reports you send

From Settings, you can report a bug. In the Android app, under a question from a pack you made yourself, you can also report that question. We get your words, your email if you give one, the app's version, your system's version (like Android 15), your language and the hour you sent it. For a question you report, the question goes with it. Nothing else: no account, no device or install ID, no app or site name. Your IP is checked for a few minutes to stop abuse, then dropped.

We use a report to fix what went wrong and, if you gave your email, to write back. We keep it until it's been read, and 90 days at most; your email goes with it. To have one deleted sooner, email contact@cpnd.xyz.

Money

Subscriptions, or Pro for life in one payment. No ads. Ever. No data sales. Ever.

In the browser extension, payments are handled by Stripe, which acts as the merchant of record: Stripe receives your email and payment details under its own privacy policy, and it is the seller on your receipt. Blobby's server stores your Stripe customer id, your subscription status, and the hashed device tokens that unlock Pro. If you buy Pro for life, it also keeps a record of that purchase: Stripe's reference for the payment, the date, the price paid, whether it was the founding price, and the date of a refund if there is one. We never see your card.

In the Android app, you subscribe or buy Pro for life through Google Play Billing, and RevenueCat manages the purchase for us. Google takes the payment under its own privacy policy; RevenueCat gets the receipt from Google Play to check it. Blobby's server stores your RevenueCat customer id, your Pro status and when it ends (Pro for life doesn't), the hashed device tokens if you link another device, and, if a purchase is refunded, which one and when. We never see your card either.

To see how the plans are doing, our server also counts, per day, the checkouts started, trials, subscriptions, cancellations (with the reason, if you give one) and refunds. Those are bare numbers: no ID, nothing that leads back to you.

Hosting + region

Backend on Cloudflare, EU region. Marketing site on Cloudflare Pages. Web analytics are cookieless (Cloudflare Web Analytics), so no GDPR banner is needed.

Waitlist

If you leave your email in a waitlist or contact form on this site, we store the address and nothing else. Your IP is checked for a few minutes to stop form abuse, then dropped. We use the address only to write to you once, when there's news. We never share it or sell it.

Questions

Email contact@cpnd.xyz. We answer.