Last updated 13 October 2026.
Privacy policy
What we collect, why, how long we keep it, and how to get rid of it.
History, for every signed-in account, free or paid: every run of a tool on the site is kept with your account, namely the tool, the date, the language, the text you gave it, the result it gave (the rewrite or summary it wrote; the detector's figure, range, confidence rating and headline; a grammar check's issues), any title you give it and the words it counted. It is kept for a year and then deleted. You can delete one entry or all of them on the history page at any time. Runs through the API, and anything from a visitor who is not signed in, are not kept.
Who we are
We are a software company based in the United Arab Emirates, and the law of the UAE applies. We decide how the data on this page is used. Write to support@blurwrite.com about anything here.
The text you check or rewrite
Text you paste into a tool is processed to give you the result. It is not stored, except in the history of a signed-in account, described below. We do not train models on it, and we do not sell or share it.
A file you upload is turned into plain text on our server, in memory, and discarded with the request; the file itself is not kept.
- AI detector: the text goes to our scoring service, which runs with an AI service provider, for the length of the request.
- Humanizer and paraphraser: the text goes to language models through an AI service provider, on the condition that the providers neither store it nor train on it, and to our scoring service to read the result. When the English rewriting stage is switched on, English humanizer text also goes to a rewriting model we run with an AI service provider.
- Summarizer: the text goes to a language model through an AI service provider, on the same condition.
- Grammar checker: the text goes to our own grammar service, run with an AI service provider; on paid plans also to a language model through an AI service provider for the style suggestions.
- Word counter and character counter: typed or pasted text stays in your browser.
- Uploading a file, in any tool: A file you upload is sent to our server once, only to read its text, and is not kept.
If you have an account
We keep your email address, your plan, your invoices, your monthly usage counters and any top-up balance.
On Pro, a writing sample you save for the Custom tab is kept with your account until you delete it.
An API key is stored only as a salted hash, so we cannot read the key itself.
Detector reports are saved in your own browser, not on our servers. A report older than 24 hours is never shown again and is deleted the next time you open any page of the site.
For every signed-in account, free or paid, your history keeps every run of a tool on the site, with its text and its result, for a year. You can delete one entry or all of them from the history page, and it is deleted with your account if you ask us to delete the account. Runs through the API are not kept, and neither is anything from a visitor who is not signed in.
Free limits and abuse protection
To enforce the free daily limits we keep a keyed hash of your address and your browser's cookie id, per tool and UTC day. Today's and yesterday's counts are kept; older days are deleted at the next count. It is pseudonymised, not anonymous.
The per-minute limits work the same way and keep the current minute's and the previous minute's entries; older ones are deleted at the next request.
Data collected automatically
When you use Blurwrite, your requests reach our hosting provider, including your IP address.
For free-use limits, we keep counters using a keyed hash of your IP address and your browser's cookie id. The daily counters are kept per tool and UTC day, with today's and yesterday's counts retained. Per-minute limits work the same way. These counters enforce free limits; they are separate from analytics.
We use analytics only while it is switched on. The analytics service sees the page address, your browser and device, and an approximate location derived from your IP address. We use analytics only to count visits and improve the site, never for advertising.
While analytics is on, the cookies _ga and _ga_<ID> are set for every visitor, with no consent step. While analytics is off, the site sets only the cookies needed for it to work and shows no consent banner.
Payments
Payments are by card and handled by our payment processor: your card details go to the payment processor and never reach our servers. We keep the date and amount of each invoice.
The country you connect from, which our host reads from your IP address, goes to the payment processor with a card checkout and may be kept with your plan.
We send messages about your account and plan: a welcome when the account is created, a receipt when a plan starts or is paid, a notice when a card payment fails, and a confirmation when you cancel. We also send a confirmation link when you create an account and a reset link when you ask for a new password. We send no newsletters and no marketing.
Account and password emails are sent through our database provider, the other messages through our email delivery provider.
Why we may use it
We use your text and account data to provide the tools and the plan you asked for, the hashed counters to keep the free tools available to everyone, and invoices because the law requires us to keep them.
How long we keep it
- Text you check or rewrite: not kept beyond the request, unless it is in your history.
- The result of a rewrite with “Take more time”: kept only until your page collects it, at most 15 minutes from the start; the text you sent is not kept.
- History, for every signed-in account: a year from each run, then deleted, or sooner when you delete it or the account.
- Daily limit counters: today's and yesterday's, then deleted at the next count.
- Per-minute limit entries: the current and the previous minute's, then deleted at the next request.
- Detector reports: in your browser, deleted once they are 24 hours old.
- Account data: until you delete the account.
- Invoices: kept for bookkeeping after an account is deleted, without a link to you, for as long as the law requires.
Security
We serve the site only over HTTPS and set HSTS, which tells browsers to use HTTPS connections. Passwords are handled by our database provider's sign-in service.
We store API keys only as salted hashes, rather than keeping the keys themselves. Your card details go to our payment processor and never reach our servers.
When you upload a file, we turn it into plain text in memory and discard the file with the request. Detector reports are kept only in your browser. Reports are no longer shown once they are 24 hours old and are deleted the next time you open a page of the site.
Your rights
You can ask for a copy of your data, a correction, or the deletion of your account and its data by writing to support@blurwrite.com from the email address on the account. We answer within 24 hours and complete the request within the time the law allows.
Deleting an account ends any plan first, removes your data and signs you out everywhere.
If you are in the European Union or the United Kingdom, you can also complain to your data protection authority.
Children
You must be at least 13 to use the service. If you are below the age of majority where you live, you may use it only with the consent of a parent or guardian.
If you believe a child under 13 has an account, write to support@blurwrite.com.
Automated assessments
The detector produces an automated reading about a text, not a decision about a person. A detector reading must not be the only basis for a decision about a person.
The reading estimates how the text reads to our model. It is shown as a range with a confidence rating. Measured error rates are published on the accuracy page.
A reading is not proof of how a text was written and must not be the only basis for a decision about a person. We make no promise about how another detector or institution will assess the text.
Who processes data for us
Each of these handles data only to provide its part of the service.
| Category | What for | What it sees |
|---|---|---|
| AI service (our own models) | Runs our detector, our grammar service and, when it is switched on, the rewriting model of the English humanizer. | The text of a request, for its length. |
| AI service (third-party language models) | Language models for the humanizer, paraphraser, summarizer and style suggestions. | The text of a request, with storage and training denied. |
| Database | Accounts, sign-in and our database. | Email, plan, usage, invoices, a saved sample, and for signed-in accounts the history of your runs with their text. |
| Payment processing | Card payments, and the page where you update your card and see receipts. | Payment details, email and the country you connect from. |
| Email delivery | Emails about your account and plan. | Your email address and the message. |
| Hosting | Hosts the site. | Requests, including your IP address. |
| Support chat | The chat on this site, to answer your questions. | Your chat messages, the email you give, the page you write from and a one-way code made from your IP address. |
| Analytics | Counts visits and how the site is used, on every page. | The page address, your browser and device, and an approximate location from your IP address. |
Where data is processed
Our providers may process data outside your country, including in the United States.
Changes to this policy
When this policy changes, the date at the top changes with it.