Privacy Policy

Last updated: October 13, 2026

This policy explains what personal data Blink collects when you use the website at https://blinkplugins.com and the Blink desktop app, why we collect it, and what rights you have. Blink is operated by Blink Plugins (Poland). The operator is the controller of your data. You can reach us at support@blinkplugins.com.

The short version

• We keep very little: a display name, your email address and a scrambled form of your password.
• No advertising, no analytics, no tracking pixels, no session recordings, no third-party fonts or scripts.
• We do not sell or rent your data.
• You can download or delete your data yourself at any time from your account page.
• Some add-ons send audio or text to third-party AI services, but only when you use that feature (see section 4).

1. What we collect and why

• Account data: display name, email address, the date the account was created, and the version and date of the terms you accepted. Your password is stored only as a salted PBKDF2 hash, so nobody (including us) can read it. If you sign in with Discord or Google we receive only your name, email address and your user ID at that provider. We use this to create your account and log you in.
• Sessions: when you log in, we store a random token (only its hash is kept) that keeps your browser logged in for up to 30 days. If you connect the Blink app to your account, a similar token (kept for up to 180 days or until you log out) is used by the app.
• Security data: your IP address and a hashed form of the email address appear in short-lived counters (up to one hour) that limit repeated login and reset attempts. We use them only to protect accounts from abuse.
• Password reset emails: when you ask for a reset, we send one email with a one-time link (valid for one hour) to the address on the account. The email is sent through Google's Gmail service. We do not send newsletters or marketing emails, so there is nothing to unsubscribe from.
• Plugin suggestions: if you use "Suggest Your Plugin!", we store the text you type (name, description, optional link and contact). Do not include anything you do not want us to read.
• Hosting data: our host, Cloudflare, processes every request (for example your IP address and browser type) to deliver the site and protect it from attacks. See Cloudflare's privacy policy for details.
• Payments: if you buy a paid plan, the payment is handled by Stripe on its own payment page. We never see or store your card number. Stripe tells us your customer ID, which plan you have, its status (for example active or cancelled) and the date it renews, and we keep only that. Stripe also receives the email address of your account to send you receipts.
• Security log: we keep a short log of events that matter for security: creating an account, changing or resetting a password, connecting the app, logging out everywhere, deleting an account, payment status changes and actions of the site administrator. An entry contains the time, the type of event, your account ID and a shortened, irreversible fingerprint of your IP address (not the address itself). Entries are signed so that they cannot be altered unnoticed.
• Security check: when the sign-up or login page shows a security check, it is provided by Cloudflare Turnstile, which decides whether a visitor is a person. It runs only on that page.

2. What the Blink desktop app does

• It contacts our catalog server to download the list of add-ons and their updates. It does not send analytics or usage tracking.
• Settings and downloaded add-ons are stored on your own computer (in the Blink data folder and in the Premiere Pro extensions folder). We cannot see them.
• If you connect your account, the connection token is stored on your computer, encrypted with Windows. You can disconnect at any time from the account menu.
• Updates are verified with a digital signature before they are installed.
• Blink does not read, upload or modify your video projects.

3. Cookies and similar storage

We use one cookie that is strictly necessary to keep you logged in, one short-lived one (while you sign in with Discord or Google), plus one small item of browser storage that remembers you closed the cookie notice. Details are on the Cookies page. We do not use advertising or tracking cookies.

4. AI features in add-ons

Some add-ons use third-party AI services, for example for speech recognition or for analysing text. When you use such a feature, the audio, transcript or text it needs is sent to that service so it can do its job. This happens only when you start the feature, and it is done by the add-on, not by the Blink website. We do not use your content to train AI models. AI results can be wrong, so please review them before you publish.

5. Who receives your data

• Cloudflare: hosting, database storage and file delivery for the website, the app catalog and downloads.
• Google: sends the password reset emails, and handles "Sign in with Google" if you choose it.
• Discord: handles "Sign in with Discord" if you choose it.
• Stripe: processes payments for paid plans, if you buy one.
• AI service providers: only when you use an add-on feature that needs them (section 4).

These companies act as service providers for the purposes described here. We may disclose data if the law requires it.

6. How long we keep data

• Account data: until you delete your account.
• Website sessions: up to 30 days. App connections: up to 180 days, or until you log out.
• Password reset links: one hour. Abuse-protection counters: up to one hour (daily limits: up to two days).
• Security log: up to 400 days.
• Payments: Stripe keeps payment records as long as tax and accounting law requires. We keep your customer ID, plan and its status until you delete your account.
• Plugin suggestions: until we have reviewed them, then they are deleted or archived.
• Backup copies of our database, if we keep them, are replaced regularly and removed within 90 days.

7. Legal bases (GDPR)

We process data to provide the service you asked for (contract), to keep the service secure and prevent abuse (legitimate interests), and, where we ask you, based on your consent (for example when you accept the terms and confirm your age while creating an account, or when you sign in through Discord or Google). We process some data to comply with legal obligations.

8. Your rights

Depending on where you live, you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or give it to you in a portable format, and you can withdraw consent at any time. You can complain to your local data protection authority.

• Download your data and delete your account yourself on your account page.
• Or write to support@blinkplugins.com. We reply within one month.

9. Children

Blink is not intended for people under 16, and you must confirm that you are at least 16 when you create an account. We do not knowingly collect data from children. If we learn that we did, we will delete it.

10. International transfers

Our service providers operate worldwide, so your data may be processed outside your country. Where required, this is done under safeguards such as standard contractual clauses.

11. Security

Connections use HTTPS. Passwords are hashed with a salt, session cookies are HttpOnly and Secure, login attempts are rate-limited, and app updates are digitally signed. If a data breach affects you, we will tell you and the authorities as the law requires.

12. Changes

If we change this policy, we will update the date above and, for important changes, tell you on the website or in the app.

13. Contact

Blink is operated by Blink Plugins (Poland). Email: support@blinkplugins.com. See also the Contact page.