RelockIn Web Extension Privacy Policy

Effective date: November 4, 2026

This policy covers the RelockIn web extension, made by Storiator Labs Inc, based in Alberta, Canada (“we” or “us”). We are responsible for the personal information described here. The RelockIn iOS and Android apps do more and collect more, so they and relockin.com are covered by our main privacy policy (https://relockin.com/privacy-policy) instead.

THE SHORT VERSION

The extension doesn’t:

• Collect your browsing history, the pages you visit, or your searches.
• Collect your passwords or what you type into websites.
• Upload your rules, schedules, usage, or settings.
• Include usage analytics, crash reporting, ad measurement, or payments.
• Show you ads, sell your personal information, or send your data to AI models.

The extension only sends or requests data from us in these cases:

• If you choose to create an account, we store your account details.
• If you vote on a YouTube channel while signed in, we store your vote with your account.
• About once a day, it downloads our shared list of AI channels.
• WHAT STAYS IN YOUR BROWSER

The following is stored in your browser’s local extension storage and isn’t sent to us:

• Your rules, limits, schedules, sessions, and challenges.
• Your usage history, including time spent per rule and per day.
• Your settings and site customizations.
• Channels you hide with “Block channel”.
• Your AI channel votes, while you’re signed out.

This data doesn’t sync through your browser account. Uninstalling the extension removes it. We can’t recover it for you, because we don’t have a copy.

1. WEBSITE ACCESS

The extension runs on the sites you visit, because your rules can cover any website. It checks the current page’s URL in your browser to match it to your rules and count your time, and it doesn’t send that URL to us.

On sites it customizes, including YouTube, Instagram, Reddit, LinkedIn, and X, it reads and changes the page in your browser to apply your settings, for example to hide Shorts. Nothing from these pages is sent to us, except the channel details in a vote you choose to submit (Section 4). Specifically:

• YouTube: a small script runs inside the page to read which channel each video is from, so the extension can label or hide it.
• Reddit: it can change Reddit’s own feed layout cookie on your device, to apply the feed style you chose.

The extension doesn’t use the browser’s history, tabs, or cookies permissions. It asks for these permissions:

• Storage: to save your data in your browser.
• Alarms: to run session timers and background tasks on time.
• Identity: to sign in with Google or Apple, if you choose to.
• Favicon (Chromium browsers): to show site icons from your browser’s cache.
• OPTIONAL ACCOUNT

You can use the extension without an account. If you create one, we store your email address, a user ID, and sign-in details, using Supabase. You can sign in with email and password, or with Google or Apple where your browser supports it. If you use Google or Apple, they handle their own sign-in steps and share basic profile details with us.

An account doesn’t copy your rules, schedules, settings, or usage to our servers. The same account works in the RelockIn apps, where it connects your subscription and AI votes across devices.

On Firefox, nothing is sent for your account or votes until you give permission in Firefox’s own prompt when you sign in.

1. AI CHANNEL VOTES

The extension can label, cover, or hide YouTube videos from channels that people have flagged as AI-generated. This relies on votes from RelockIn users.

What we store

If you vote while signed in, we store your vote (AI or not AI), the channel’s ID, and the channel’s handle and name as you saw them, with your user ID and the time. Outside Firefox, we also store the extension version. This means that your account is linked to the channels you’ve voted on. You can change or withdraw a vote, and we use a daily limit on vote changes to prevent abuse.

If you vote while signed out, your votes stay in your browser and work only for you. They upload when you sign in.

What we do with votes

• We combine votes into a published list that RelockIn downloads for everyone. Channels are placed in tiers based on how many votes they have and what share say AI. It can also include our own review of a channel.
• The published list contains channel IDs, tiers, and vote totals. For channels we’ve reviewed as AI, it can include the channel’s handle and name. It’s publicly downloadable.
• We can exclude a voter’s votes from the list, for example to deal with spam or abuse.

What we don’t do with votes

• We don’t publish who voted, or how any person voted.
• We don’t sell votes, or send them to advertisers or AI models.
• We don’t use your votes to advertise to you.
• We don’t upload the channels you hide with “Block channel”, or anything about what you watch.

Other sites

We plan to extend voting to other sites soon, including Facebook and Instagram. It will work the same way, storing the account or page you voted on with your user ID. We’ll update this policy if it differs from what’s described here.

1. SHARED AI CHANNEL LIST

About once a day, on every browser and whether or not you’re signed in, the extension downloads the published list from our server. Like any web request, this exposes your IP address and browser details to Supabase, our server provider. The request doesn’t include any information about you or your activity. Checking a page against the list happens in your browser.

1. OUR WEBSITE

The extension links to relockin.com for things like support, deleting your account, and downloading the apps. Anything you submit there is covered by our main privacy policy (https://relockin.com/privacy-policy).

1. WHY WE USE YOUR INFORMATION

We use the information above to provide your account and the shared AI channel list, to prevent spam and abuse, and to meet our legal obligations.

If you’re in the EU, EEA, or UK, our legal bases are: contract, for your account; legitimate interests, for AI votes and preventing abuse; and legal obligation, where the law requires us to keep or disclose information. You can object to processing based on legitimate interests by contacting us.

1. WHO WE SHARE INFORMATION WITH

We don’t sell your personal information. We share it only with the companies below, and if required by law or as part of a merger or sale of our business.

• Supabase: database, sign-in, and hosting for our server functions.
• Google and Apple: optional sign-in, if you choose to use it.
• HOW LONG WE KEEP INFORMATION
• Data in your browser: until you delete it or uninstall the extension.
• Account and AI votes: until you delete your account. Votes you withdraw are deleted.
• Published AI channel list: the list contains only totals, so past totals aren’t tied to you. Deleting your account removes your votes from future lists.
• DELETING YOUR ACCOUNT AND DATA

To delete your account, submit a request at https://relockin.com/delete-account. Our team handles these requests by hand, may need to confirm that the request is yours, and aims to finish within 30 days.

• We delete: your account and sign-in details, your AI votes, and support requests linked to your account or email address. If you also used the account in the RelockIn apps, the main privacy policy (https://relockin.com/privacy-policy) lists what else this removes.
• We keep: a one-way hash of your user ID and the date, as a record that the deletion happened.
• Sign in with Apple: we’ll tell you how to remove it in your Apple settings.

To remove the data stored in your browser, uninstall the extension.

1. SECURITY

Data sent to our servers is encrypted in transit. Access to our database is restricted, and the individual votes table isn’t publicly readable. Data in your browser is protected by your device’s and browser’s standard security. No system is completely secure, so if a breach affects you, we’ll notify you and the relevant authorities where the law requires it.

1. WHERE DATA IS STORED

We’re based in Canada, and our service providers process data in the United States and other countries, whose laws may differ from yours and which may give authorities there access to it. Where the law requires it, including for data from the EU, EEA, and UK, we rely on appropriate safeguards for these transfers, such as standard contractual clauses. You can contact us for more information.

1. YOUR RIGHTS

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or limit how it’s used, and to withdraw consent at any time. Contact us using Section 16 to use these rights. We won’t treat you differently for doing so. We may need to confirm your identity first, and we can only act on data we’re able to connect to you.

• Canada: our handling of personal information is subject to PIPEDA and Alberta’s Personal Information Protection Act. You can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
• EU, EEA, and UK: you can complain to your local data protection authority.
• CHILDREN

You must be at least 13 to use RelockIn, and RelockIn isn’t directed at children under 13. In some countries, a higher age applies before a person can give their own consent, and a parent or guardian must consent for them. If you believe a child under 13 has given us personal information, contact us and we’ll delete it.

1. OTHER WEBSITES AND CHANGES TO THIS POLICY

Websites you visit have their own privacy practices, including their own trackers. We’re not responsible for what those sites do.

We’ll update this policy as the extension changes and revise the date at the top. We may add basic usage analytics to the extension in the future, and if we do, we’ll update this policy first. If a change materially affects how we use your information, we’ll let you know by a reasonable means, and ask for your consent where required.

1. CONTACT US

Questions or requests about your privacy are welcome.

Storiator Labs Inc
privacy@relockin.com
Alberta, Canada