Privacy policy

Your data stays on your device

No account is required. The extension does not send data to the developer or third parties. It has no external analytics, advertising, tracking, remote fonts, remote scripts or external icon services. Language files are bundled and loaded locally.

Information processed

• Website domains, names, blocking rules, enabled states and your language preference.
• Foreground browsing time for websites in your rules and daily block counts, grouped by local calendar date. Aggregates are kept for the most recent 30 days.
• If you set a password, a random salt and a PBKDF2-SHA256 derived value are stored. Your plain-text password is not stored.
• The current timer, blocked-domain details and failed password attempts are kept temporarily for the browser session. Full URLs and page contents are not stored.
• Counts of Pro entry views, Pro page opens and daily-limit selections are kept only on this device. They contain no websites, emails or identifiers, are not uploaded, and cannot be aggregated by the developer. Uninstalling deletes them.

To match rules, the extension reads tab URLs and navigation events while running, extracting only domains. It does not read page text, form entries, cookies or the browser history list. A content script sends visibility signals for timing without reading page contents.

Storage, export and deletion

Persistent data uses chrome.storage.local; temporary data uses chrome.storage.session. The extension does not use chrome.storage.sync or sync your data through Chrome. Manual JSON exports contain rules, names and domains, but no password data or usage history.

You can delete rules or remove password protection in settings. Usage aggregates expire after 30 days; deleting a rule does not erase its recent usage. Uninstalling removes extension storage. Delete any exported files yourself. Local storage is not device-wide encryption: someone with access to your browser profile may read it.

Why permissions are needed

• storage / unlimitedStorage: store settings and aggregates locally, without a product-plan cap on website count. Browser capacity limits still apply.
• webNavigation and access to HTTP/HTTPS websites: recognize domains, apply rules to navigations and open tabs, and send visibility signals for time tracking. No page text or form contents are read.
• declarativeNetRequest: redirect restricted website navigations to the local block page using browser rules.
• alarms: recheck schedules, allowances and day changes. idle: detect the locked screen so time is not counted while the device is locked.

Limited use

Use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including Limited Use requirements. Information is used only for visible website blocking, time tracking and rule protection features, never for advertising, data sales, credit assessment or unrelated purposes.

Product limits and changes

This is a habit-management tool. The password does not prevent disabling or uninstalling the extension, using another browser or changing local files. Timing depends on browser scheduling and may be delayed, especially during sleep or heavy load. Incognito use requires separate permission in Chrome.

This version has no payments, subscriptions or licensing server. Changes to data handling will be reflected in an updated policy, with consent obtained when needed. For questions, use the developer support contact on the Chrome Web Store listing.

This policy describes the extension. When you open its public website, the hosting service may process ordinary connection data such as your IP address and request logs to serve the page. The extension does not send its rules, passwords or usage records to that website.

Free & Pro

Free: unlimited websites, always-on and scheduled blocking, password protection and local data. Pro daily limits are planned as a one-time purchase. Price to be announced; purchase is not open yet.

No checkout or activation is connected. No payment is collected.