SecblitzPrivacy policy
1. Summary
Secblitz does not collect personal data. It has no account, no ads, no analytics, no telemetry and no crash reporting. Check results, settings, history and the list of installed apps stay on your PC.
2. Data Secblitz collects
None. Secblitz does not ask for personal details and does not send check results, settings, history or app lists to anyone. All checks run on your PC.
The website keeps no data about visitors: no IP address, cookie or other detail.
The website is hosted on Cloudflare, and the installers are hosted on GitHub. Both may keep their own logs of visitors, including IP addresses, under their own privacy policies: Cloudflare and GitHub.
3. Network connections
3.1 Automatic updates
If automatic updates were left on during installation, Secblitz checks for a new version once an hour. It downloads a small signed file from secblitz.lol that names the latest version. If a newer version exists, it downloads the installer from secblitz.lol, verifies the signature and installs it while Secblitz is not in use.
These requests contain no account, name or information about your PC, other than whether you use the regular or the ARM version. As with any website, secblitz.lol receives your IP address and the time of the request. The website is hosted on Cloudflare, which may keep its own logs under its privacy policy. To turn updates off, run the installer again and clear the update option, or remove Secblitz.
3.2 Web protection
Web protection is off by default. When it is on:
- Secblitz downloads block lists daily or weekly from these places: adguardteam.github.io and filters.adtidy.org (AdGuard), easylist.to (EasyList, which also provides EasyPrivacy), malware-filter.gitlab.io (a list of malware download sites by the malware-filter project, hosted by GitLab), and raw.githubusercontent.com (lists by HaGeZi and Echap, hosted by GitHub). adguardteam.github.io is also hosted by GitHub. Each of these places receives your PC's IP address and the Secblitz version, which Secblitz adds to the request. Read their privacy policies: AdGuard, EasyList, GitHub and GitLab.
- Website name lookups from your PC go through Secblitz. Names on a block list receive a "not found" answer. All other lookups are forwarded to the name servers your network already uses, or to Quad9 if none are available. Whoever runs those name servers can see the names you look up, as they could before. Quad9 has its own privacy policy.
- Secblitz does not store the names you look up. For blocked names only, it keeps the last 15 minutes of blocks, so it can warn you in your browser and list them under Recent blocks, and up to 100 of the most blocked names of each day for 30 days, for its chart. These stay on your PC.
Private lookups through Secblitz is a separate switch and is off by default. When it is on, website name lookups leave your PC encrypted and go to Quad9, a Swiss non-profit that does not log IP addresses, so your internet provider or a public Wi-Fi network cannot read them. Names that only exist on your own network, such as your router, your printer or your company's computers, are never sent there. If a name that only works on your own network does not open while this switch is on, turn it off. If your network does not let encrypted lookups through, Secblitz uses your network's usual name servers instead and tries again after two minutes.
Turning web protection off restores your PC's previous network settings.
3.3 Actions you start
- Installing Bitwarden uses winget, which connects to Microsoft and downloads from the app's publisher. Secblitz only does this when you ask it to.
- Installing Windows updates or updating virus protection is done by Windows, which downloads from Microsoft. Secblitz sends no data of its own.
- Opening the Microsoft Store opens it in Windows, where Microsoft's terms apply.
- Microsoft handles all of these under its privacy statement.
- Report a problem, Suggest a feature and the privacy link in Settings open a page in your web browser. GitHub pages are operated by GitHub.
4. Data stored on your PC
- C:\ProgramData\Secblitz, readable only by administrators: the record of changes and how to undo them, the latest check, history, language and theme, web protection lists, and saved copies of removed apps. Web protection's recent blocks, chart and status can also be read by the other accounts on this PC, so the Secblitz icon in the notification area can show them.
- Your user profile: a small file listing the personal Windows settings Secblitz changed, so they can be undone.
This data is not sent anywhere.
5. Removing Secblitz
Uninstalling Secblitz deletes both locations above. Windows updates, apps installed through Secblitz and settings you chose to keep are not changed.
6. Changes to this policy
Changes are published on this page, and the date at the top is updated.