Privacy Policy
Last updated: October 8, 2026
Blow A Website ("we") helps people take down copies of their own content or their own image that were posted without their consent. This page says exactly what we collect to do that, and nothing else.
What we collect
- Account: your email and your password. The password is stored only as a salted hash (PBKDF2), never as text.
- Links you submit: the URL, the site it's on, its status history, and the full name you type to sign each takedown notice, with the date you signed it.
- Your profiles (optional): the official accounts you choose to add, so a host can check the content is yours.
- Image searches (only if you use "Find copies"): the link to your own image that you search with, and how many matches came back.
- Security log: sign-ins, failed passwords and review actions, so we can stop password guessing and know who changed a status.
- Referrals: if you joined through someone's link, who referred you.
We don't use analytics, ads, tracking pixels or third-party cookies. Fonts are served from our own site, so loading a page doesn't send your IP address to anyone else.
Why we use it
Only to run the service: sign you in, keep your links and their status, build the takedown notice you sign, find the right host or platform to send it to, and keep the service secure. We don't sell your data and we don't share it for advertising.
Who else sees it
- Our review team sees your links and their status, to process takedowns.
- The host or platform that receives a notice sees what the notice contains: the link, your signed name and your email. The law lets them pass the notice to whoever uploaded the content. You see the exact notice before you sign it.
- Cloudflare hosts the site and the database.
- An email delivery provider (once automatic sending is turned on) delivers the notices.
- An image-search provider (only when you use "Find copies") receives the link to the image you search with.
To find where to send a notice we look up public DNS and registration records of the site that hosts the copy. Those lookups are about that site, not about you.
Cookies
We use one cookie, and only after you sign in:
| Name | Why | How long |
|---|---|---|
__Host-baw_sid | Keeps you signed in. Scripts can't read it, and it's only sent to this site. | 30 days, or until you sign out |
It's strictly necessary for the service, so there's no tracking to opt out of and no consent banner. Signing out deletes the session on our server.
How long we keep it
Until you delete your account. Sessions end after 30 days. Notices that were already sent to a host stay with that host; we can't recall them.
Your choices and rights
- Delete everything: Dashboard, then "Delete my account". It removes your account, profiles, links, their history, your searches and your sessions, right away.
- See or correct your data: most of it is on your dashboard; for anything else, contact us below.
- If you're in the EU, the UK or California, you also have the right to access, correct, delete or object to the processing of your personal data. We don't sell or "share" personal information.
Age
Blow A Website is only for people 18 or older.
Contact
Message us on Instagram: @blowawebsite.