Privacy Policy

Bluebonnet Software LLC · Effective Date: June 4, 2026 · Last Updated: June 4, 2026

1. Introduction

Clicked ("we," "us," "our") is developed and operated by Bluebonnet Software LLC, a Texas limited liability company. This Privacy Policy explains what information we collect, why we collect it, how we use it, and how we protect it when you use the Clicked extension and website at tryclicked.app.

The short version: We are an independent solo developer project. We collect only the minimum information necessary to make Clicked work well. We have not sold your data and have no intention of doing so.

Questions? Contact us at: privacy@tryclicked.app

2. Who We Are

Clicked is an independent software project developed and maintained by a single developer operating as Bluebonnet Software LLC. As a solo project, our support response times and service guarantees are more limited than those of larger software companies. We are committed to providing the best possible experience within those constraints.

3. Information We Collect

We collect only what is strictly necessary to operate the Service.

3a. Information You Provide Directly

DataWhy We Collect It
Email addressTo create and manage your account and send essential service communications
Password (hashed)To authenticate your account — we never store your raw password
Payment informationHandled entirely by Stripe — we never see or store your card details
Referral codeTo credit your account and the referring account with bonus Credits

3b. Information Collected Automatically

DataWhy We Collect It
Explanation usage countTo enforce trial limits, subscription caps, and bundle balances
Account creation dateTo manage subscription billing cycles
Subscription statusTo determine which features you have access to
Persona and language preferenceTo calibrate explanations to your background; used in anonymized analytics
CountryCollected at account creation for anonymized regional analytics. We do not track your precise location.

3c. What We Do NOT Collect

3d. Blocked Domains

Clicked includes a blocked domains feature that prevents the extension from activating on websites you specify. The following domains are pre-blocked by default to protect sensitive browsing: mail.google.com, chase.com, bankofamerica.com, wellsfargo.com, fidelity.com, schwab.com, robinhood.com, mychart.org. You can remove any of these defaults or add your own domains at any time from the Settings page. On blocked domains, Clicked does not activate and no text is ever selected, processed, or sent anywhere.

4. How Your Selected Text Is Handled

When you highlight text and request an explanation, only the exact text you selected is sent to an AI provider to generate a response. Clicked does not read, scan, or process any other content on the page — only the specific words you highlighted.

For subscription users ($5/month): Your selected text is sent to Google Gemini API to generate an explanation. We do not store your selected text at any point. Google's data handling is governed by Google's own privacy policy.

For annual license users ($20 one-time): Your selected text is sent to your chosen AI provider (Google Gemini, OpenAI, or Anthropic) using your own API key. We do not store your selected text at any point. Each provider's own privacy policy governs their handling of it.

In both cases, text you highlight is processed in real time and is not retained by Bluebonnet Software LLC.

5. How We Use Your Information

We use the information we collect only for:

6. Data Sharing

We do not sell, rent, or trade your personal data. To operate Clicked, we work with a number of third-party service providers. The list below includes some of the key services we currently use, but is not exhaustive — our infrastructure may include additional services not listed here. We periodically update this list to reflect our current service providers. Each provider is bound by their own privacy policy and data processing terms.

7. Data Retention and Deletion

We use Supabase to retain account data. If you request account deletion, we will make reasonable efforts to action your request as promptly as possible. Please be aware of the following limitations — this list includes some key providers but may not be exhaustive:

To request account deletion, email privacy@tryclicked.app from your registered email address.

Important — account deletion and re-registration: If you delete your account and later register again with the same email address, the free trial will not be available for that email. You can continue using Clicked on the free tier (3 free Explanations per day) or subscribe to a paid plan.

Email hash retention: Upon account deletion, all personal data is removed from our systems. We retain a one-way cryptographic hash (SHA-256) of your email address indefinitely after deletion. This hash is mathematically irreversible and cannot be used to identify you or recover your email address. It is retained solely to prevent fraudulent re-registration for a new free trial. This practice constitutes a legitimate interest under applicable privacy law and does not constitute processing of personal data. If you have questions about this, please contact privacy@tryclicked.app.

8. Your Rights

Depending on your location, you may have rights regarding your personal data. Here is what we actually hold and what we can do:

Data we hold in Supabase (and can provide or delete): your email address, account creation date, subscription status, usage counts, persona preference, language preference, country, and referral information.

Data we do not hold and cannot provide or delete: your selected text (never stored), payment card details (held by Stripe), API request logs (held by AI providers), Stripe transaction history, Resend email delivery logs, and Beehiiv waitlist data (contact those providers directly).

To exercise your rights — access, correction, deletion, or portability of the data we hold — email privacy@tryclicked.app from your registered email address. We will make reasonable efforts to respond as promptly as possible, though as a solo developer we cannot guarantee specific timeframes in all circumstances.

EU/EEA users: You have additional rights under GDPR. You may also lodge a complaint with your local data protection authority.

California residents: You have rights under the CCPA, including the right to know what personal information we collect and the right to request deletion of what we hold.

9. Data Security

The security of your data depends heavily on the third-party infrastructure providers we use. Our role is limited to configuration and correct use of these services — we do not operate our own servers or data centers. The following reflects our current understanding of how these providers handle security at the time of writing. Third-party providers may change their security practices, infrastructure, or policies at any time without notice to us. We are not responsible for changes to their practices, and the descriptions below may not reflect their current state at the time you read this.

The following includes some of the key providers — this is not an exhaustive list:

Our own security measures include: encrypted data transmission (HTTPS) on all connections; hashed password storage via Supabase Auth; and access controls limiting who can access our database. As an independent project, we acknowledge our security implementation is more limited than that of larger software companies and we are committed to continuous improvement.

10. Children's Privacy

Clicked is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@tryclicked.app and we will delete it.

11. International Data Transfers

Your data is stored and processed in the United States. If you are located outside the US, your data will be transferred to and processed in the US. By using Clicked, you consent to this transfer.

12. Cookies

The Clicked extension does not use cookies. Our website (tryclicked.app) may use minimal, essential cookies only for keeping you logged in and processing payments securely via Stripe. We do not use advertising cookies, tracking cookies, or analytics cookies.

13. Email Communications

Essential (cannot be opted out of): Account confirmation, payment receipts, security alerts, legal notices.

Optional (can be opted out of): Product updates and new feature announcements. You may opt out at any time by clicking the unsubscribe link in any email or by contacting privacy@tryclicked.app.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. A "Material Change" means any change that: materially reduces your privacy rights; expands the categories of data we collect; adds new purposes for which we use your data; adds new third-party data sharing arrangements; or changes the data retention period in a way that is less favorable to you.

For Material Changes, we will make reasonable efforts to notify you via email to your registered address before the change takes effect, and where required by applicable law, we will seek your affirmative consent. We will try to provide as much advance notice as reasonably possible given our circumstances as a solo developer, but we cannot guarantee any specific notice period. For non-material changes (such as clarifications, corrections, or formatting updates), we will update the "Last Updated" date. Continued use of the Service after any change constitutes acceptance.

If you do not agree to an updated policy, you must discontinue use of the Service and may request deletion of your account.

15. Contact Us

Bluebonnet Software LLC
Email: privacy@tryclicked.app
Website: tryclicked.app

We will make reasonable efforts to respond to all privacy inquiries as promptly as possible. As a solo developer with other personal and professional obligations, we aim to respond within approximately 30 days but cannot guarantee this in all circumstances. We will always make a genuine effort to respond.