For adult video-on-demand and clip sites that use ad or analytics pixels

A pixel that reports which clip a member watched is the lawsuit.

Blindfold keeps what the Video Privacy Protection Act asks of a video service that shares viewing data: consent on a screen of its own, separate from the terms, for no more than two years, with a clear way to withdraw; pixels firing only for members whose consent is live; every tool and what it receives; and closed accounts’ records destroyed within a year.

Open the demo See pricing

Opens in this browser with an invented clip site already in it. No account, no email address, nothing installed.

Blindfold with its example records in it

Open the free demo →

The problem

Written consent, separate from everything else.

18 U.S.C. 2710 lets a video service disclose what a member watched only with informed, written consent, in a form distinct and separate from other terms, for no more than two years in advance, with a conspicuous way to withdraw. Each member shared without it can cost $2,500 or more. Ad and analytics pixels on clip sites are what these suits are about.

Separate form

written consent, distinct and separate from any other terms.

18 U.S.C. § 2710 →

2 years

the longest an advance consent may run.

$2,500

or more, for each member whose viewing was shared without consent.

Will not record a consent the law would not.

An advance consent past two years is refused on entry. A pixel sending viewing data while the gate is off, a tool not yet checked, sharing that carried on after a consent ran out or was withdrawn, and a closed account’s record kept past its year are each a stop on the file.

How it works

Setup, consents, closed accounts

Check the setup

Consent on its own screen, a withdrawal link, pixels gated to live consents, and every tool with what it receives.

Keep each consent

Given, one disclosure or in advance, its last day, any withdrawal, and whether that member’s data is shared.

Destroy old records

Each closed account and the day its viewing record must be gone. Print the file.

What it will never do

It keeps the record. It turns no pixel off.

Blindfold records how your site handles viewing data. You change the pixels.

No viewing data kept.Blindfold records consents, not what anyone watched.

No pixel control.It tells you which ones to gate; it does not touch them.

It is not a lawyer.Not legal advice.

It never touches a payment.The subscription is for software.

Pricing

Priced per site

Less than one member’s statutory damages.

Most sites

One site

$39/month

One video or clip site.

Consents with their last day
Every pixel and what it gets
Record destruction dates

One site, yearly

$390/year

The same, two months free.

Everything in One site
Printable file
Export for your counsel

Subscription. Your bank statement says Blindfold Software. Refunded in full on request within 30 days. Your licence key is emailed to you within two working days of payment.

Checkout is our own bitcoin server, not a card processor — nobody we had to apply to and nobody who can close the account. The button takes you straight to it. Give your email address there — that is where your key is sent.

Questions

The ones we actually get asked

Is a checkbox in our terms enough?

No. The consent has to be on a form distinct and separate from other terms.

How long does consent last?

An advance consent may run no more than two years. Blindfold refuses one that runs longer.

What about closed accounts?

Their viewing records are destroyed within a year of no longer being needed. Blindfold keeps the date.

Is this legal advice?

No. It is the record you wish you had kept.

What do I actually get when I pay?

The demo on this page is the whole program, running on invented records. Paying gets you a licence key — one line of text, emailed to the address you give at checkout within two working days. Paste it into the program and from then on it keeps your own records. Until then, nothing you type into it is kept.

The key is checked inside the page, on your own machine. It never calls us, so there is still no account and nothing about your business goes anywhere. If you ever stop paying, your records stay exactly where they are, read-only, and Export still hands you every one of them.

Open the demo before the next pixel goes live

The invented clip site’s pixel sends everyone’s viewing data, an analytics tool is unchecked, sharing carried on after a consent lapsed and after a withdrawal, the form runs three years, and a record is past its year. Blindfold stops every one.

Open the demo See pricing