Privacy Policy

Effective Date: 6 November 2026

1. Introduction

SiteBlocker (“we”, “our”, “us”) is operated by LionByte Software SRL. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our browser extension for Chrome and Firefox (“Extension”) and our website at https://siteblocker.app (“Website”).

2. What the Extension Does NOT Collect

SiteBlocker is designed with privacy as a core principle. The Extension:

• Does not track your browsing history or activity
• Does not collect the URLs you visit
• Does not build a profile of your behavior
• Does not sell or share any data with third parties
• Does not contain ads or ad-tracking code

The Extension only accesses website URLs at the moment of a page load to check if that site is on your block list. This check happens entirely on your device. No browsing data is sent to our servers, with one exception you control: the weekly focus report described below.

3. What the Extension Stores

The Extension keeps your settings (block lists, schedules, whitelist, keyword rules) in your browser’s built-in storage, so blocking works offline and instantly. Your browser may sync that storage across your own devices through your browser account.

Your block lists, schedules and whitelist are also saved to our database, so they survive a reinstall and can sync across devices. This is true for anonymous accounts too (see section 5). Keyword rules, your blocking history and your Focus Mode history stay in your browser and are not sent to us.

Our database runs on our own server at Hetzner in Nuremberg, Germany (EU).

Weekly focus report

If you have a verified account and the weekly report is on (it is by default; turn it off in Settings or with the link in any report), once a week the Extension sends our server a short summary of the previous week, computed on your device: the number of blocked visits, your focus time and streak, your three most-blocked sites, your most distracted hour, and time spent on sites you set a daily limit for. We use it only to write that week’s email and do not store it — our database keeps only which week was last sent and when. The email is delivered by our email provider, Resend, which processes its contents to deliver it. Anonymous users and accounts that turned the report off send nothing.

Getting-started emails

If you have a verified account, we send a few getting-started emails: a welcome, a Focus Mode tip and a schedules tip in your first week, and a reminder two days before a Pro trial ends. We skip a tip for a feature you already use. For schedules we look at the lists and whitelist setting already stored in your account. For Focus Mode, the Extension tells our server once that you have started a session: only that yes, and when we first got it, never the sessions themselves. It does this for the anonymous account too, so the answer carries over if you sign up later, and never on a device managed by a school. Every one of these emails has a link to stop them.

Usage statistics

The Extension sends anonymous usage events to PostHog (hosted in the EU), for example that a list was created or a Focus Mode session finished, so we can see which features are used. These events are tied to a random identifier, never name a site you visit or block, and are never sent from a device managed by a school. If you accepted analytics on our website before installing, on Chrome and Edge the install event also carries the campaign tags of the first tagged link you arrived through (see siteblocker_first_touch in section 8), so we can tell which campaigns lead to installs.

4. Account Information

You can use SiteBlocker without creating an account. If you choose to sign up, we store the following in our database:

• Email address: used for sign-in, password recovery, and the emails described above
• Name (if provided), and your profile picture if you sign in with Google
• Password, stored only as a one-way hash
• Block lists, schedules and whitelist settings
• Language, so emails reach you in the language you use the Extension in
• Sign-in sessions: when you sign in, we keep the session together with the IP address and browser it came from, to keep your account secure
• Referrals: your referral code, and who referred whom, if you use “Give a friend a month of Pro”

Payments

SiteBlocker Pro is paid through Stripe. Stripe collects and processes your card details and billing address; we never see or store your card number. We store your Stripe customer ID and whether you have Pro, so the Extension can unlock Pro features. Prices include VAT where it applies.

Calendar (Pro)

If you connect a calendar to start Focus Mode automatically, we store the calendar link you give us, or for Google Calendar the access tokens Google gives us (encrypted), together with your trigger settings. Our server reads the calendar only to find when focus sessions should start; it does not store your events.

5. Anonymous Accounts

SiteBlocker supports anonymous usage. When you use the Extension without signing up, our server creates an anonymous account for it, with no email, name or other personal information. It holds your block lists so they can be restored. If you later sign up with an email, your anonymous data is linked to your new account.

6. Devices Managed by a School

If your school installed SiteBlocker for you, the school’s IT administrator sets its rules. The Extension sends our server the school’s licence key and a random identifier for the device, which we store only as a one-way hash, to check the licence and count the school’s seats. Students do not need an account, and no usage statistics are sent from these devices.

7. Website Analytics

Our website uses the following services:

PostHog (EU-hosted at eu.i.posthog.com): We use PostHog for website analytics, feature flags, and A/B testing. PostHog collects usage data such as page views, session duration, and feature interactions. We do not use PostHog to collect personally identifiable information.

• If you accept analytics in the cookie banner, PostHog stores a visitor ID in a cookie, so it can recognise your later visits.
• If you decline, or have not answered yet, we still count page views and clicks, but without cookies or anything else stored on your device. Instead of a visitor ID, PostHog computes an anonymous hash from your IP address and browser on its servers, which changes every day, so we cannot link a visit to your other days. As with any website request, PostHog receives your IP address; we do not use it to identify you.

In both cases the counts include the campaign tags (utm_source and similar) of the link you arrived through, if it had any.

Links from our website to the Chrome Web Store and Firefox Add-ons carry tags naming the page and button they were on, so those stores can tell us which of our pages leads to installs. The tags themselves carry nothing about you.

Sentry (EU-hosted, Germany): We use Sentry for error monitoring on the website, the Extension and our server. Sentry receives error reports and technical information (browser version, OS) to help us fix bugs. We configure it not to collect personal information, cookies or request contents.

Crisp: We use Crisp for live chat support on our website. Crisp loads only when you open the chat, and it may then set session cookies and collect the information you provide in the conversation.

Cloudflare: Our website is hosted on Cloudflare, which processes standard server logs (IP addresses, request timestamps) as part of normal web hosting operations.

8. Cookies

SiteBlocker’s website uses minimal cookies:

Cookie	Purpose	Type	Set by
better-auth.session_token (__Secure- prefix)	Keeps you signed in	Strictly necessary	SiteBlocker
siteblocker_install_trial	Pro trial on this browser	Strictly necessary	SiteBlocker Extension
phphc*	Analytics visitor ID	Analytics	PostHog
siteblocker_first_touch	Campaign of first visit	Analytics	SiteBlocker
Crisp session cookies	Live chat functionality	Functional	Crisp

The sign-in cookie is shared between siteblocker.app and api.siteblocker.app so the website and our server see the same session. The Extension sets siteblocker_install_trial on siteblocker.app with only the date its free Pro trial ends, so reinstalling the Extension does not start a new trial: a new install reads it and tells our server that date. It holds nothing else. siteblocker_first_touch holds only the campaign tags (for example utm_source=newsletter) of the first tagged link you arrived through after accepting analytics, for 90 days; if you install the Extension in that time, on Chrome or Edge, it reads them once and adds them to its install event. PostHog cookies and siteblocker_first_touch are set only after you accept analytics in the cookie banner; if you decline, any left from an earlier visit are deleted.

9. Third-Party Services

Service	Purpose	Data location
Hetzner	Server and database hosting	Germany (EU)
Stripe	Payments	EU and US
Resend	Sending emails	Ireland (EU)
Google	Sign in with Google, Google Calendar	Global
PostHog	Analytics, feature flags, A/B testing	EU
Sentry	Error tracking	Germany (EU)
Crisp	Live chat support	EU
Cloudflare	Website hosting	Global CDN

Each service has its own privacy policy. We have Data Processing Agreements (DPAs) in place with each provider to ensure your data is handled in compliance with GDPR.

10. Data Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, secure session tokens, encryption of calendar access tokens, and access controls. Our server only ever returns your own block lists, schedules and settings to you.

11. Your Rights

Depending on your location (particularly under GDPR for EU residents), you have the right to:

• Access your personal data, and receive a copy of it
• Correct inaccurate data
• Delete your account and all associated data (available in the Extension’s Settings)
• Object to data processing
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@siteblocker.app.

12. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data (block lists, schedules, whitelist, calendar connections) is permanently deleted from our servers. Anonymous account data that has not been linked to an email address may be automatically purged after extended periods of inactivity. Stripe keeps payment records for as long as tax law requires.

13. Children’s Privacy

SiteBlocker is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For significant changes, we will notify users via email or a prominent notice on our website.

15. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: hello@siteblocker.app Company: LionByte Software SRL Location: Romania, EU