Privacy Policy

An honest note on what this protects

We want to be straight with you: Your Safe Harbor will not fully protect your child online, and no browser extension can. It filters Google Chrome in one profile on one device. It does not cover other browsers, other profiles, guest mode, phones, apps, or your wider home network, and a determined child with the device unlocked can work around a local extension. Its built-in lists catch well-known sites, but no list can keep up with every unsafe page on the internet.

It is a meaningful first layer, and that is far better than having nothing. It raises the floor, makes the common cases safer, and gives you simple tools and a starting point for the conversation that matters most. For stronger protection, the extension's Get Safe guide walks you through the layers that go further: family-safe DNS, a supervised Google account (Family Link), and managed Chrome. We would rather tell you this plainly than let you believe your child is fully safe when they are not, but you should feel proud for taking the first step!

What is stored, and where

All settings are stored locally in Chrome's extension storage on your device, including:

• Your protection choices (mode, category toggles, schedules, search settings, download settings).
• Your allowlist, blocklist, and any temporary approvals you create.
• A local, capped activity log of block events (domain, reason, and time) used only to show recent paused sites in the dashboard. This is not a browsing history and never leaves the device. You can clear it at any time.
• Your parent PIN, stored only as a salted cryptographic hash (PBKDF2-HMAC-SHA256). The PIN digits themselves are never stored.

This data is never sent off the device by the extension.

Network requests

The extension itself makes no requests to any server operated by the developer. The only network activity is:

• Navigations you or your child make, which the extension filters locally using Chrome's declarativeNetRequest rules. The extension does not read page content.
• An optional, user-initiated DNS test on the dashboard, which makes a best-effort request to public DNS-filtering providers solely to indicate whether filtering appears active. You choose whether to run it.
• The optional "Buy Kris a coffee" link, which simply opens PayPal in a new tab if you click it.

Permissions

The extension requests broad host access ("read and change all your data on all websites") because filtering blocked navigations to a friendly block page, and adding SafeSearch headers, require host access under Chrome's rules. The extension uses this only to apply network-level filtering rules; it does not read, collect, or transmit the contents of the pages you visit.

The other permissions are used only on your device: storage (save your settings), alarms (expire timed approvals and run schedules), downloads (cancel blocked file types by their filename), and webNavigation (re-check open tabs after a settings change and record the local block log). None of these send data anywhere.

Chrome Web Store Limited Use disclosure

Your Safe Harbor's handling of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Specifically: the extension does not transmit any user data off the device; it does not sell or transfer user data to third parties; it does not use or transfer user data for any purpose unrelated to its single purpose (parent-managed safe browsing); it does not use or transfer user data for advertising, ad targeting, or creditworthiness; and no human reads your data, because the developer never receives it.

Children's privacy

Your Safe Harbor should be configured by a parent or guardian and is designed to help protect children online. It does not knowingly collect any personal information from anyone. All operation is local to the device. Making good choices about your child's data is important.

Changes

If this policy changes, the updated version will be posted at this URL.

Contact

Questions about this policy can be sent to kris@e1ctech.com.