Privacy Policy

The controller of your personal data is BlackHole, operating this service at blhole.com.

For anything in this policy, including a request to exercise the rights in clause 7, email support@blhole.com. We answer data requests from this address.

When you create an account. Your email address, and your name if you sign in with a provider that supplies one. Sign-in is handled by Clerk, which also processes session and device information to keep you logged in and to detect abuse.

When you download. The link you submit, the platform it belongs to, the format and quality you chose, whether it succeeded, and any error. This is stored against your account and shown to you in your dashboard history.

When you pay. Your email and name are shared with Mollie so it can create a customer record, and we store the resulting customer and subscription references plus your plan and renewal date. We never receive or store your full card number.

When you use the desktop app. A licence key and a device identifier. The device identifier is a non-reversible hash derived from your computer’s hostname, operating-system username, OS and CPU architecture; the underlying values never leave your machine. It exists to enforce one active device per licence.

Automatically. Approximate country, derived from your IP address by our host, used to route downloads to a nearby server and to set regional pricing. Where we count usage for people without an account, we store a hashed IP address and a counter rather than the address itself.

Analytics and error reports. Page views, product events, performance metrics and error reports, described in clause 4.

To perform our contract with you — running your account, carrying out downloads you ask for, taking payment, providing support. Without this data the service cannot work.

Our legitimate interests — keeping the service secure, enforcing usage limits, preventing abuse and fraud, fixing errors, and understanding in aggregate how the product is used. We balance these against your interests, and you can object at any time.

Your consent — for optional marketing email, which you can withdraw with the unsubscribe link in any such message.

Legal obligation — retaining what tax and accounting rules require for transactions.

We measure how the site is used with Umami, which runs on our own server at analytics.blhole.com. It is first-party and cookieless: it sets no cookie and builds no cross-site profile of you. Vercel collects performance metrics, and a self-hosted error monitor receives a report when something breaks, which can include the page URL and, if you are signed in, your account identifier.

We do not record your screen. Session replay, heatmaps and click-tracking were removed in September 2026. We do not use Google Analytics, advertising pixels, or any third-party tracker.

We set two cookies of our own: your pricing region and country, kept for 90 days so pricing stays consistent between visits. Clerk sets cookies necessary to keep you signed in. The site also stores some things locally in your browser, including your recent download history and which prompts you have dismissed; those stay on your device and are never sent to us.

Because the only measurement we run is first-party, cookieless and used solely to produce aggregate audience statistics for this site, we do not show a cookie consent banner. If we ever add a third-party analytics service, an advertising tracker, or session recording, we would ask for your consent first.

We do not sell personal data and we do not share it for advertising. We use the following processors:

Some of these operate outside the European Economic Area. Where that happens, transfers rely on the safeguards those providers offer, typically the European Commission’s standard contractual clauses. We may also disclose data where the law requires it.

Download history has no automatic expiry today. The link you submit is stored against your account and, unless you ask us to remove it, stays there. We are saying so rather than quoting a retention period we do not actually enforce. If you want yours cleared, email us and we will do it.

If you are in the EEA or UK you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive a portable copy, and withdraw consent where we rely on it.

There is no self-service button for this yet. Deleting your sign-in account does not currently delete your record here. To exercise any of these rights, email support@blhole.com from the address on your account and we will action it by hand, within one month. We would rather tell you that than imply an automated process that does not exist.

You can unsubscribe from marketing email at any time using the link in any such message; that takes effect immediately and needs no request.

If you think we have handled your data badly, please tell us first. You also have the right to complain to a data protection authority: under Article 77 you may complain to the supervisory authority in the country where you live, where you work, or where the issue arose.

Traffic is encrypted in transit. API keys are stored only as hashes, so we cannot read them back. Payment card data never reaches our systems. Access to production data is limited to the operator.

Desktop licence keys are stored in readable form because the desktop app has to be able to validate them. Treat a licence key like a password and do not share it.

BlackHole is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

We may update this policy. The date at the top shows the last substantive revision. For changes that materially affect how we use your data we will give notice by email before they take effect. See also our Terms of Service.