Privacy Policy

What Site Locker Stores

Site Locker ("the extension") is built to work entirely on your own device. Here is exactly what it stores, and where:

• Your Master PIN and Site PIN - never stored as plain text. Each is run through PBKDF2-SHA256 (100,000 iterations) and only the resulting hash is saved. We have no way to reverse a hash back into your PIN.
• Your list of locked websites - the domains or specific pages you've chosen to protect.
• Your theme preference (dark/light) and whether protection is currently on or paused.
• A randomly generated device identifier - a meaningless random string used only to name your device inside your LemonSqueezy account if you activate a Pro license (so you can tell your devices apart when managing your subscription).

All of the above is stored using Chrome's built-in storage APIs (chrome.storage.local and, for Pro license state, chrome.storage.sync). If chrome.storage.sync is enabled in your browser, your Pro license status may sync across your own signed-in Chrome devices via your Google account - that sync is handled entirely by Chrome itself, not by us.

What We Don't Collect

• No browsing history or page content from sites you visit.
• No analytics, no usage tracking, no crash reporting SDKs.
• No advertising network, no ad identifiers.
• No account or sign-up is required to use the free plan.

Third-Party Sharing - Pro Licensing Only

The only outbound network request Site Locker ever makes is to LemonSqueezy, our payment and licensing processor, and only if you activate a Pro license. That request sends:

• The license key you're activating or re-verifying.
• The random device identifier described above (so LemonSqueezy can enforce your plan's device limit).

This request never includes your PIN, your locked-site list, or anything about your browsing. LemonSqueezy's handling of your purchase and payment details is governed by their own privacy policy, available at their website. Opening "Manage Sub" or "Upgrade" from the extension opens a LemonSqueezy-hosted page in a new tab - once there, you're interacting directly with LemonSqueezy, not with us.

Why Site Locker Asks for These Permissions

• storage - to save your PIN hashes, locked-site list, and settings locally.
• tabs - to redirect a locked tab to the PIN screen, and to open the checkout/manage-subscription page when you tap Upgrade.
• webNavigation - to detect when you're about to load a locked site, before the page itself starts rendering.
• alarms - to periodically re-check your Pro license status in the background.
• Access to all websites (host permissions) - this is the core of the extension: you decide which website to lock, and it can be any website, so the extension needs the ability to act on any site you choose.

Data Retention & Deletion

Everything Site Locker stores lives in your browser's local extension storage. Uninstalling the extension removes it. If you'd like to remove your Pro license from a specific device without uninstalling, note that license records are minimal (a key and a device ID) and can be cleared by revoking access from your LemonSqueezy customer portal.

Children's Privacy

Site Locker is not directed at children under 13, and we do not knowingly collect data from children. Since PINs and locked-site lists are stored only on-device and never transmitted to us, we have no visibility into who uses the extension.

Changes to This Policy

If this policy changes, the "Last updated" date at the top of this page will change accordingly. Material changes will also be reflected in the extension's Chrome Web Store listing.

Contact

Questions about this policy? Reach us at support@xtriaatechnology.com.