Privacy Policy

1. Account Authentication & Multi-Device Sync

When you authenticate using Google Sign-In or an Email Verification Code (OTP), we store only your email address and an encrypted session token. This is used strictly to identify your account, verify your license tier (14 DAY FREE PASS, 6 MONTH PASS, or ANNUAL PASS), and sync your custom block rules and focus schedules across your devices. We never access passwords, contacts, or external Google profile data.

2. Web Browsing & Local Tab Permissions

Blockade never tracks, logs, records, or sells your browsing history.

• Tab Access ("tabs"): Used exclusively within your local browser runtime to detect when an active tab matches a rule on your blocklist and redirect it to the intervention screen.
• Declarative Net Request Engine: Chrome's local filtering engine handles network matching directly on your machine. Page content, form inputs, passwords, keystrokes, and text inside websites are never read or transmitted.

3. Multi-Device Private DNS Network Sync

For Pro users utilizing cross-device protection, domain rules are synchronized to your dedicated, encrypted Private DNS endpoint. This enables filtering across Android, iOS, Windows, macOS, and ChromeOS with zero logs retained. Blockade never inspects or proxies your personal network payload traffic.

4. Zero Data Selling & Analytics Transparency

We do not use advertising trackers, behavioral scripts, or session recording scrapers. Your blocklists, focus schedule intervals, and bypass timestamps exist exclusively to run your productivity environment.

5. Data Retention, Self-Service Reset & Infrastructure Lifecycle

You have complete sovereignty over your information. We maintain clear data lifecycle standards:

• Active Usage: Your custom domain blocklists, focus schedules, and multi-device DNS configurations are securely synced to maintain uninterrupted focus enforcement across your authorized devices.
• Self-Service Rule Reset: You can wipe all active domain rules, categories, focus schedules, and remote DNS denylists directly from the Support tab inside the dashboard at any time without terminating your paid subscription or losing remaining pass duration.
• License Expiration (Soft Deactivation): When a paid license expires without renewal, active domain rules on your external Private DNS endpoint are cleared immediately to prevent accidental network blockages, while retaining your configuration schema locally and in your account profile.
• Infrastructure Purge (Hard Deletion): Following an expiration grace period of 7 days, linked server-side blocklists, focus schedules, and remote Private DNS profile containers are permanently erased from cloud infrastructure to reclaim system resources. Your core account profile and license history remain on file to allow seamless re-activation and receipt access.
• Permanent Account Deletion (Right to Erasure): Upon receiving an explicit deletion request via email to [email protected], we perform a complete hard purge—permanently deleting your authentication identity, license ledger, workspace rules, focus schedules, and remote DNS containers.