Updated 2 November 2026. This notice covers RiffBlock for iPhone, iPad and Mac. No RIFFSOURCE account is required. Protection operates mainly on your device; internet connections are used for updates and, after you enable it, optional iCloud synchronisation.
Controller
Stavros NarlidisRIFFSOURCE
Mönchengladbacher Str. 4
38440 Wolfsburg
Germany
Privacy enquiries: support@riffsource.com
Safari and on-device processing
The three native Safari content blockers supply rules for advertising, privacy and appearance. Safari applies those rules; these blockers do not read visited pages. The additional RiffBlock Advanced extension can locally inspect addresses, domains, page elements and necessary player state on websites where you grant access, and can change page content. This enables dynamic filtering, website repairs and custom selection rules. You can change permissions in Safari or disable the extension.
RiffBlock does not create a chronological browsing history or send page content, search queries, passwords or a list of visited pages to RIFFSOURCE. It has no built-in advertising, tracking or behavioural analytics service and does not request GPS location. Domains for exceptions, repairs, selection rules or issue reports that you explicitly create may, however, be stored as functional data.
Local storage includes protection options, language choices, filter lists and versions, website exceptions and repairs, temporary pauses, learned rules, setup evidence and technical update/error state. Automatic language selection uses device languages locally without a location lookup. This processing provides the protection functions you use (Art. 6(1)(b) GDPR).
Filter and signed correction updates
Filter lists are downloaded over HTTPS from easylist.to and easylist-downloads.adblockplus.org. Signed correction data comes from riffsource.com. Each server receives necessary connection information, particularly your IP address, request time, requested update address and technical HTTP information. The app does not add visited pages, exception domains or issue reports to these requests. Language selection is not sent as a separate usage profile.
Update connections do not use cookie or credential storage. Automatic updates can be controlled in the app; existing rules remain usable offline. Current filters support the app’s functionality (Art. 6(1)(b) GDPR). Technical logging and attack prevention support the legitimate interest in reliable, secure delivery (Art. 6(1)(f) GDPR).
RIFFSOURCE uses STRATO to deliver riffsource.com. The website privacy notice covers logging and retention for these requests. External filter providers operate their own download servers with their own logging rules; eyeo provides information in its privacy policy. Statements there about the Adblock Plus application do not describe RiffBlock.
Optional iCloud synchronisation
“Sync settings with iCloud” starts switched off on a new installation. Once enabled, selected settings are synchronised through Apple’s private CloudKit database: protection profile/filter switches, language choices, permanent website exceptions and repairs, including their domains. Random change identifiers, timestamps and deletion markers support merging. A locally stored derived account identifier helps detect account changes; RiffBlock does not request your Apple password.
Safari permissions, global and temporary pauses, Mac menu bar/Dock preferences, learned selection rules, issue reports and diagnostic/filter files are not synchronised by this feature. Settings use an encrypted CloudKit field, rather than a public shared database or RIFFSOURCE cloud. The feature uses Apple services and their technical account, connection and notification data. Silent system notifications support synchronisation, not advertising.
Optional synchronisation relies on your consent (Art. 6(1)(a) GDPR). You can switch it off in the app at any time while local protection remains available. This stops further app synchronisation but does not automatically erase the existing cloud copy. Uninstalling is also not a promise of cloud deletion. Use Apple’s iCloud data-management controls for stored cloud data; if the relevant deletion option is unavailable, contact us to clarify the available route. We do not need your Apple password.
Apple’s privacy information also applies to its services. Apple processes data internationally. Its information explains recipients, locations and transfer safeguards, including standard contractual clauses. The app does not promise exclusively European storage or a particular end-to-end encryption status for all Apple data.
Reports, diagnostics and your exports
An issue report is created only at your request. It contains the reported domain and technical filter information, without page content, screenshots or sign-in data. Automatic report delivery is disabled in the product; reports remain local. A diagnostic export contains technical settings and filter versions, without browsing history, page URLs or your exception domains. Settings and learned-rule backups may contain their associated domains and rules. Review files before sharing them.
A recipient receives a file only when you choose to share it or contact support. For email to RIFFSOURCE, we process the sender address, message and voluntary attachments to handle the enquiry (Art. 6(1)(b) GDPR for contractual enquiries, otherwise Art. 6(1)(f) based on our interest in responding). Files placed in a storage or cloud service of your choice are also subject to that provider’s rules.
Retention and deletion
Local settings and rules remain until changed, undone or removed from app/extension storage. Saved reports can be cleared in settings; the app also cleans them up after 30 days during the next relevant processing operation. Filter and correction data is replaced during updates or managed according to its validity. Exported files remain in your chosen location until you remove them.
The cloud copy remains until the relevant cloud data is removed; no fixed automatic expiry is configured. Deleted exceptions may remain as deletion markers to prevent an older device from restoring them. Disable synchronisation on your devices before permanently removing cloud data. Apple device backups, local macOS containers and Safari extension storage can have separate deletion rules; uninstalling does not necessarily remove every copy.
Support correspondence is retained while needed to handle the request and follow-up; legal duties or establishing, exercising or defending claims may require longer retention. RIFFSOURCE does not sell this data or use it for advertising. A feature cannot be provided without its necessary data; iCloud and sharing reports are optional. There are no automated decisions with legal or similarly significant effects.
Your rights
Subject to the applicable legal requirements, you can request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. Consent can be withdrawn for the future without affecting earlier lawful processing. You may complain to a supervisory authority, including Der Landesbeauftragte für den Datenschutz Niedersachsen (Lower Saxony, Germany).
Contact support@riffsource.com without sending passwords or access tokens. RIFFSOURCE cannot remotely read or erase data stored only on your device. Website visits and email enquiries are also covered by the website privacy notice.