🧱 Website Blacklist

Privacy Policy

Effective September 2, 2026

Website Blacklist for Chrome ("Website Blacklist," "the extension," "we," "us") is a browser extension that blocks distracting or unwanted websites, with schedules, a focus mode, stats, and optional password protection. This page explains exactly what data the extension touches, where it goes, and what we never do with it.

Single purpose

Website Blacklist exists to block or restrict access to websites the user chooses, on a schedule or during a focus session, and to show the user their own blocking activity. Nothing else.

Data stored on your device

Your blacklist entries, schedule, focus mode state, per-site block counts, and a hashed password (if you set one, hashed with PBKDF2 — we never store the password itself) live in chrome.storage.local / chrome.storage.sync on your device or Chrome profile. This data is never transmitted to us or to any third party. Uninstalling the extension, or clearing its storage from chrome://extensions, deletes it.

Data sent to our payments backend (Pro upgrade)

Website Blacklist offers an optional paid upgrade ("Pro") for a few extra features. Supporting that requires a small backend of ours to know whether a given install has paid. Here is exactly what that involves:

• On install, the extension is issued an anonymous per-install license key. No account, name, or email is required to create it.
• The extension periodically asks our backend "is this license key paid?" so it knows whether to unlock Pro features. This check carries only the license key — no browsing history, no site list, no personal data.
• If you choose to upgrade, checkout is handled entirely by Stripe in a new tab; we never see or store your payment card details.
• If you use "restore purchase" to recover a lost license on a new install, you may submit your checkout email and a proof of purchase (last 4 card digits or an invoice number) so our backend can verify the purchase with Stripe. This is the only flow in which we see an email address, and it's used solely to reissue your license key.

This background check happens regardless of whether the Pro upgrade screen is currently shown in the extension's UI. We do not use this data for advertising, profiling, or analytics, and we do not sell or share it with third parties beyond Stripe (our payment processor) and the infrastructure that hosts this backend (Vercel).

What we don't do

• No third-party analytics or tracking SDKs.
• No reading, collecting, or transmitting your browsing history or page content — blocking is done entirely by matching URLs against your own list, on-device.
• No selling or renting personal data to anyone, ever.
• No ads.

Permissions we request

Permission	Why we need it
storage	Save your blacklist, schedule, and settings locally.
declarativeNetRequest	Block and redirect matching page loads using Chrome's own native rule engine — the extension never reads page content.
alarms	Re-check the schedule and focus-mode timers on a regular interval.
tabs	Let the toolbar popup add the site you're currently on to your blacklist with one click.
Host permissions (all sites)	The blacklist can name any site, so the redirect-to-blocked-page rule has to be able to apply on any site.

Data retention and your choices

Local data is retained until you delete it (via the extension's Import/Export or Blacklist tabs) or uninstall the extension. Backend-side, we retain a license key and its paid/unpaid status for as long as needed to support your Pro entitlement. To request deletion of any data we hold about you, contact us using the address below.

Children's privacy

Website Blacklist is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

If this policy changes, we'll update the effective date above. Material changes will be reflected here before they take effect.

Contact

Questions about this policy or your data? Email eddundeadd@gmail.com.