PRIVACY POLICY

YouTube AdBlock

Effective Date: January 1, 2026

Company: KILISTRA EOOD (KILISTRA LTD.)

Registration Number: 203812539

Registered Address: Plovdiv, ul. Luben Karavelov 2, et. 3, of. 5, Bulgaria

Privacy Contact: support@youtubeadblock.xyz

Website: https://youtubeadblock.xyz/

1. Scope and Controller

This Privacy Policy explains how KILISTRA EOOD (KILISTRA LTD.) (“KILISTRA”, “we”, “us”, or “our”) collects, uses, stores, discloses and otherwise processes information in connection with YouTube AdBlock, its standalone installer, related browser extension functionality, and https://youtubeadblock.xyz/.

KILISTRA is the controller of personal data that it collects through the optional data-sharing features described in this Policy. Independent recipients of data may act as separate controllers for their own processing.

2. Eligibility

The optional browsing-activity and AI-interaction data-sharing programs are available only to individuals who are at least 18 years old. A user must confirm that they are 18 years of age or older before either optional program can be enabled.

3. Optional Data Sharing

YouTube AdBlock can be used without participating in either optional data-sharing program. Browsing-activity sharing and AI-interaction-data sharing are controlled separately. We do not begin either optional collection until the user has made the corresponding affirmative choice.

• Share browsing activity — optional.
• Share AI interaction data — optional.
• A user may enable one, both, or neither option.
• A user may later disable either option independently.
• Existing users are presented with the current consent choices before optional collection resumes under this Policy.

Optional Data Collection Consent Notice: Before any optional browsing-activity or AI-interaction-data collection begins, users are presented with a separate consent notice explaining the categories of data collected, purposes of processing, commercial disclosure, retention, and withdrawal options. The current version of the notice is available at: https://youtubeadblock.xyz/en/data_collection_consent.html

4. Browsing Activity Data

If the user enables browsing-activity sharing, the extension may use browser functionality, including chrome.webRequest where technically available, to collect event-level information about web pages accessed by the user.

• target or visited URL;
• date and time of the visit;
• browser user-agent;
• browser language;
• referrer URL, where available;
• a randomly generated pseudonymous UserId used to recognize the same installation or user within our systems; and
• source IP address associated with the request.

The UserId is intended not to contain a name or email address. It may remain stable for as long as technically possible and is normally removed when the extension is removed. Because browsing records can be linked using the UserId and may include IP addresses and detailed URLs, KILISTRA treats the source data as personal or pseudonymous data rather than as anonymous data.

5. AI Interaction Data

If the user separately enables AI-interaction-data sharing, the extension may collect information from supported AI services through a combination of browser network-request functionality and reading information made available in the page DOM.

Supported services currently include ChatGPT, Google Gemini and Grok.

• AI service name;
• AI model or model version, when visible or otherwise available to the extension;
• text of the user's message or prompt;
• text of the AI system's response;
• message timestamp;
• country derived from the user's IP address;
• the same pseudonymous UserId used for other optional data-sharing features;
• message identifier;
• conversation identifier;
• device type, such as desktop;
• a boolean subscription indicator showing whether a subscription appears to be present, without collecting the specific subscription plan; and
• browser language.

Because the same UserId may be used for browsing and AI-interaction data, records from the two optional programs may be technically linkable when the user has enabled both.

6. Data Filtering and Minimisation

KILISTRA applies filtering and minimisation controls before optional data is disclosed to independent data customers. These controls are intended to prevent or reduce disclosure of credentials, secrets and categories of information that should not be included in commercial data products.

• Passwords, authentication credentials, session identifiers, access tokens, API keys, reset tokens and similar secrets are removed or suppressed where detected.
• Payment-card, bank-account and similar financial credentials are removed or suppressed where detected.
• URL query strings and fragments are removed by default before downstream delivery, unless a specifically approved field is allowlisted and does not contain personal, sensitive, credential or prohibited information.
• Sensitive or prohibited websites and pages, including login, account, payment, medical, banking, private-network, localhost and similar high-risk resources, are blocked or suppressed where identified.
• Full source IP addresses are not included in downstream delivery by default. Where location is needed, KILISTRA uses a reduced or derived location field such as country, or another approved minimised representation.
• AI free-text content is scanned and, where detected, sensitive or prohibited material such as credentials, payment data, direct identifiers, private secrets and protected sensitive information is removed, redacted or suppressed before downstream delivery.
• System or developer prompts, confidential provider information and other content not intended for commercial disclosure are removed or suppressed where identified.

No automated filtering system is perfect. KILISTRA maintains additional suppression, complaint and deletion procedures and updates its controls when material risks are identified.

7. Purposes of Processing

KILISTRA processes optional data for the following purposes:

• collecting and organizing browsing and AI-interaction datasets where the user has opted in;
• data quality, validation, fraud and bot detection;
• security, abuse prevention and system integrity;
• geographic attribution and statistical analysis;
• market, technology, audience and internet-usage research;
• product development, analytics and measurement;
• preparing filtered event-level datasets and derived datasets for independent data customers; and
• supporting permitted artificial-intelligence and machine-learning development, training, validation, testing, evaluation and related research by independent recipients.

8. Commercial Disclosure and Independent Recipients

Where the user has enabled the relevant optional data-sharing program, KILISTRA may disclose filtered event-level data to independent data analytics, artificial-intelligence, machine-learning, research and data-commercialization customers and their permitted downstream recipients.

KILISTRA's current data-supply arrangements may include disclosure to INFATICA KFT, an independent company established in Hungary. Subject to applicable law and contractual restrictions, independent recipients may analyze, combine, develop products from, license, sublicense, sell, resell, or otherwise commercialize received data, and may use eligible data for artificial-intelligence and machine-learning development and training.

Independent recipients are responsible for identifying their own lawful basis and complying with applicable privacy and data-protection law for their processing. KILISTRA requires appropriate contractual data-protection, security and use restrictions for downstream handling.

9. Legal Bases

For optional browsing-activity and AI-interaction collection, KILISTRA relies on the user's affirmative consent where consent is required or selected as the applicable lawful basis. The user may decline without losing the core functionality of YouTube AdBlock and may withdraw consent at any time.

KILISTRA may separately process limited information where necessary to provide requested functionality, protect the service, comply with law, establish or defend legal claims, or meet other lawful obligations, where permitted by applicable law.

Where laws governing access to information on a browser, device or terminal equipment require prior consent, KILISTRA obtains that consent before the relevant optional collection begins.

10. Worldwide Processing and Local Requirements

The software may be available and optional data may be collected worldwide. Privacy, device-access, consumer-data, data-broker, children's-data and similar requirements differ by jurisdiction. KILISTRA applies local restrictions, additional notices, consent requirements, opt-out mechanisms, suppression rules or collection limitations where required by applicable law.

If KILISTRA cannot establish the permissions or safeguards required for a particular jurisdiction, source or category of data, KILISTRA may restrict, suspend or disable the relevant optional collection or downstream disclosure.

11. Storage, Hosting and Security

KILISTRA's relevant server and database infrastructure is hosted with Amazon Web Services (AWS), Oregon, United States. Data is transmitted using encrypted transport, including TLS/HTTPS, and databases are protected with encryption at rest and access controls.

KILISTRA uses technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure and destruction. Measures include access controls, encryption, logging, retention controls, filtering and security monitoring.

12. Retention

KILISTRA retains its source copy of raw or pseudonymous optional browsing and AI-interaction data for up to 30 days, unless a shorter period is required by law or a limited longer period is necessary for a documented legal hold, security investigation or legal obligation.

KILISTRA generally delivers eligible daily data to independent recipients on a daily basis. Data already disclosed to independent recipients may be retained by them in accordance with their own lawful purposes, contractual obligations and applicable law.

Suppression records may be retained for the limited purpose of preventing future collection or disclosure after a withdrawal, opt-out or deletion request.

13. International Transfers

Because KILISTRA operates from Bulgaria, hosts relevant infrastructure in the United States, and may disclose data to recipients in other countries including Hungary, personal data may be transferred internationally.

Where applicable law requires a transfer mechanism or additional safeguards, KILISTRA uses the mechanism and supplementary measures reasonably required for the relevant transfer.

14. Your Choices and Rights

Depending on applicable law, a user may have rights to:

• decline browsing-activity sharing;
• decline AI-interaction-data sharing;
• withdraw either consent independently at any time;
• request access to personal data;
• request correction;
• request deletion;
• request restriction or object to certain processing;
• request portability where applicable; and
• exercise applicable rights concerning sale, sharing, targeted advertising, profiling or similar uses under relevant consumer privacy laws.

Requests may be sent to support@youtubeadblock.xyz. KILISTRA may take reasonable steps to verify a request. Where a valid deletion, withdrawal, objection or suppression request affects data already disclosed to an independent recipient, KILISTRA will communicate an appropriate deletion or suppression request to that recipient where required by law or contract and will stop future delivery associated with the relevant UserId.

15. Withdrawal of Consent

A user can disable browsing-activity sharing or AI-interaction-data sharing through the privacy settings in the extension. Withdrawal stops future optional collection for the disabled category after the preference is processed. Withdrawal does not make processing that was lawful before withdrawal unlawful.

For more information about the optional data-sharing choices and how consent is obtained, see the Optional Data Collection Consent Notice at: https://youtubeadblock.xyz/en/data_collection_consent.html

16. U.S. State Privacy Choices

Where an applicable U.S. state privacy law grants additional rights concerning the sale, sharing, targeted advertising or profiling of personal information, KILISTRA provides those rights as required. Where legally required and technically applicable, KILISTRA honors recognized opt-out preference signals.

17. Changes to this Policy

KILISTRA may update this Policy to reflect changes in law, technology, sources, recipients or processing. If a material change affects the categories of optional data collected, the purposes of collection, or the categories of recipients, KILISTRA will provide additional notice and obtain renewed consent where required.

18. Contact

KILISTRA EOOD (KILISTRA LTD.)

Registration Number: 203812539

Plovdiv, ul. Luben Karavelov 2, et. 3, of. 5, Bulgaria

Email: support@youtubeadblock.xyz

https://youtubeadblock.xyz/