Block Lock

Privacy Policy

Last updated: October 3, 2026

Block Lock is a Chrome extension and web dashboard that helps you stay focused by blocking distracting websites and limiting how long you spend on them. This policy explains what information Block Lock collects, why, who it is shared with, and how you can delete it.

Information we collect

Account information

You sign in with Google. We receive your name, email address and profile picture from your Google account, along with the OAuth tokens Google issues for the sign-in. We use these only to identify you and keep you signed in.

Browsing activity (web history)

While you are signed in, the extension records the domain of each page you load in Chrome (for example, youtube.com) and the time spent on that domain before you navigate away. This is recorded for every site you visit, not only sites you have blocked, so that the dashboard can show where your time goes. These records are stored briefly in the extension and uploaded to our servers about every five minutes.

We collect the domain name only. We do not collect full URLs, page paths, search queries, page titles, page content, form input, keystrokes, or anything typed into websites.

Rules and settings you create

The sites you choose to block, daily time limits, schedules, and settings such as Hard Lock mode. If you use the AI schedule builder, we receive the text you type into it.

Stored only on your device

The extension keeps a copy of your rules, today's per-site minutes used, pending usage records, and a short-lived sign-in token in Chrome's local extension storage. Removing the extension deletes this data.

How we use information

  • To enforce your blocking rules, daily limits and schedules across your browsers.
  • To show you usage analytics in your dashboard.
  • To generate a weekly AI productivity briefing that summarizes your time per domain and suggests adjustments.
  • To recognize whether a site you visit looks like a known category of distraction.
  • To turn a plain-language request into a blocking schedule when you use the AI builder.
  • To protect the service, for example by rate-limiting requests.

We do not use your data for advertising, to build profiles for anyone else, or to determine creditworthiness or for lending purposes.

How we share information

We do not sell your data, and we do not share it with third parties except the service providers below, which process it on our behalf to run Block Lock:

  • Google: provides sign-in. Google receives the standard information involved in an OAuth sign-in.
  • Vercel: hosts the web dashboard and API, and runs our scheduled jobs.
  • Neon: hosts our Postgres database, which stores your account, rules and usage records.
  • Upstash: caches your blocking rules and sign-out records for a few minutes so the extension can sync quickly.
  • OpenAI: receives domain names and weekly per-domain totals (minutes, visit counts, block counts) to produce your briefing and classify sites, plus any text you type into the AI schedule builder. We do not send your name or email address to OpenAI.

We may also disclose information if required by law, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

Chrome Web Store User Data Policy

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Block Lock uses browsing activity only to provide and improve its single purpose of helping you manage time spent on websites. We do not allow humans to read this data except with your consent, for security purposes, to comply with the law, or when it has been aggregated and anonymized.

Retention and deletion

We keep your account data, rules and usage history for as long as your account exists.

You can permanently delete your account at any time from Dashboard → Settings → Delete Account. This immediately removes your profile, rules, schedules, usage history and AI briefings from our database. Cached rules expire from Upstash within minutes. Uninstalling the extension removes all data stored on your device.

To ask about your data or to request a copy of it, email raymansarowa1@gmail.com.

Security

Data is sent over HTTPS. The extension authenticates with short-lived signed tokens that are revoked when you sign out, and each account can only access its own data. No method of transmission or storage is completely secure, but we work to protect your information.

Children

Block Lock is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use data we have already collected, we will ask for your consent before applying it.

Contact

Questions about this policy can be sent to raymansarowa1@gmail.com.