Legal

Privacy Policy

Last updated: August 22, 2026

Bleeper is currently in closed beta. The short version: you can use Bleeper without an account, and if you do, the only identifier is a randomly generated number your browser creates when you install the extension — not your name, not your email, not your IP address, which we never log. Signing in is optional and gives you more free watch time. If you sign in, we hold the email address you used, and your devices become linked to that account. This policy reflects the current beta state of the product.

1. Who we are

Bleeper is a product of Slipstream. We operate the Bleeper Chrome extension and this website. References to "we", "us", or "our" in this policy refer to Slipstream.

Questions about this policy: info@auriela.co

2. What we collect and why

2.1 Install identifier

When you install Bleeper, the extension generates a random identifier (a UUID). It is stored locally in your browser and sent to our server only when needed to track watch time or submit a feedback report.

If you have not signed in, that identifier is not connected to your name, email, or any account, and cannot be reversed to identify you. It is the only identifier we hold for you.

If you have signed in, the identifier is linked to your Slipstream account, and through that account to the email address you signed in with — see §2.6. The identifier itself still says nothing about you, but it is no longer anonymous, which is why deleting an account or a device requires being signed in rather than just knowing the identifier (see §6).

We use this identifier for two purposes only:

  • Free tier enforcement — tracking how many minutes of filtered video you have watched in the current calendar month (60 minutes without an account, 180 minutes signed in).
  • Feedback reports — recording which video and approximate timestamp you flagged when you voluntarily submit a "Report issue" from the extension.

If you upgrade to Bleeper Personal, watch time is no longer tracked (unlimited use). The identifier may still be used to associate feedback reports with a consistent source for quality analysis.

2.2 Watch time records

For free-tier users, we record: your install identifier, the YouTube video ID (e.g., dQw4w9WgXcQ), the number of minutes watched, and the calendar month (e.g., 2026-04). We do not record titles, thumbnails, channel names, or viewing history in any other form.

Retention: 13 months from the month of recording, then automatically deleted.

2.3 Feedback reports

When you voluntarily submit a "Report issue" from the extension, we record: your install identifier, the YouTube video ID, the approximate playback position in seconds, and whether the report is a missed bleep or an incorrect bleep. We use this data only to improve Bleeper's accuracy.

Retention: 24 months from submission, then automatically deleted.

2.4 Audio clips (transcription service)

For videos not already in our cache, Bleeper's server extracts short audio clips (typically 10–60 seconds) from YouTube and sends them to AssemblyAI, our transcription provider, to identify profanity with greater precision. These clips do not contain your install identifier or any personal data. AssemblyAI processes the audio and returns timing data; the audio is not retained by us beyond the API call. See AssemblyAI's privacy policy at assemblyai.com/legal/privacy.

2.5 Video transcript cache

We cache bleep timing data (start/end milliseconds) for videos we have processed, keyed by YouTube video ID. This cache contains no personal data. The word list used to evaluate transcripts is applied server-side and never stored — only the resulting timing ranges are saved.

2.6 Account and email address (only if you sign in)

Signing in is optional. It exists so your free watch time is counted per person rather than per device, and so it follows you between devices — signing in raises your monthly free allowance.

If you sign in, we hold your email address, and a record linking each device you signed in on to your account. We do not store a password, because there is no password: signing in works by emailing you a link. Your email address is held by Supabase Auth, our authentication provider (see §5), and is not stored in Bleeper's own database. While a sign-in link is outstanding we briefly store a one-way hash of the address, which is deleted when the link is used or expires.

If you subscribe, Stripe also provides us the email address used for billing, which we store against your payment record (see §5).

Retention: until you delete your account. Deleting it removes the account, every device link, and the watch time and feedback of every device on it — see §6.

3. What we do not collect

  • Your name
  • Any password — signing in uses an emailed link, so there is none to store
  • Your email address, unless you choose to sign in or subscribe (see §2.6)
  • Your IP address (we do not log request IPs)
  • Browser fingerprint or device identifiers
  • Your Google account or YouTube account information
  • Your full viewing history or watch patterns
  • Payment information (handled entirely by Stripe — see §5)

4. Legal basis for processing (GDPR)

If you are in the European Economic Area, our legal basis for processing your install identifier and associated records is legitimate interests (Article 6(1)(f) GDPR) — specifically, to enforce the free tier usage limit and to improve the accuracy of our content filtering service. These interests do not override your rights as a data subject.

5. Third-party processors

  • Supabase — our managed database provider, where watch time, feedback records and accounts are stored. Supabase operates under a Data Processing Agreement (DPA) with Standard Contractual Clauses for transfers outside the EEA. supabase.com/legal/dpa
  • Supabase Auth — our sign-in provider, and where the email address of a signed-in account is held. Bleeper's own database stores only the account's identifier, never the address. Same DPA as above. supabase.com/legal/dpa
  • Resend — delivers the sign-in link email. Receives the recipient address and the contents of that email, and nothing else. resend.com/legal/dpa
  • AssemblyAI — our transcription provider. Audio clips only; no personal data included. assemblyai.com/legal/dpa
  • Stripe — payment processing for Bleeper Personal. Stripe handles all payment data under their own privacy policy and PCI DSS compliance. We do not store card numbers or payment details. stripe.com/privacy

6. Your rights

You have the right to request deletion of all data associated with your install identifier at any time. To exercise this right:

  • Use the Delete my data page on this website and enter your install ID (shown in the extension under Settings).
  • Or email info@auriela.co with your install ID and we will process the deletion within 30 days.

If you have signed in to a Slipstream account, deletion covers the account itself, every device linked to it, and the usage and feedback records of all those devices — not only the device you request it from. Deleting an account requires being signed in to it: your install ID is shown in the extension and can be seen in a screenshot, so on its own it is not enough to delete an account.

Two things are kept, and we would rather say so plainly than bury it. The bleep-timing cache stays: it is a list of millisecond time windows against public YouTube videos, holds no words and no identifier, and once your contribution records are deleted nothing connects it to you — deleting it would also remove work done for everyone else watching that video. Billing records stay for as long as tax and invoicing law requires, with the link to your account removed.

If you have an active subscription, cancel it before deleting your account. We will ask you to do this rather than doing it for you, so that a deletion request never quietly ends a subscription you are still paying for.

If you are in the EEA, you also have the right to access, rectify, or restrict processing of your data, and to lodge a complaint with your supervisory authority.

7. Data retention summary

  • Watch time records: deleted automatically after 13 months
  • Feedback reports: deleted automatically after 24 months
  • Transcript cache: no personal data; retained indefinitely for service operation
  • Account and device links: deleted immediately on account deletion
  • Billing records: retained as required by tax and invoicing law, with the account link removed on deletion

8. Children

Bleeper is designed to help families, but the service itself is not directed at children under 13. We do not knowingly collect data from children. The install identifier is generated by the browser independently of age or identity, and signing in to an account is optional.

9. Changes to this policy

If we make material changes to how we collect or use data, we will update the date at the top of this page. Continued use of Bleeper after a policy update constitutes acceptance of the revised terms.

10. Contact

For privacy questions or erasure requests: info@auriela.co

Bleeper by Slipstream — slipstream.now/bleeper