Umbra privacy policy

Umbra is a site blocker for Chrome and Firefox. Blocking runs on your computer. Cloud sync is optional and only happens after you create an account.

What stays on this computer
If you use the add-on signed out, your list, hours, notes, visit time, language, and lock password live in the browser’s extension storage. The lock password is hashed on this device and is never sent to the website or the database.

What we store if you sign in
An account on https://umbra-blocking.vercel.app stores email, username, display name, blocked and released hosts, pause and feed hosts, hours, budgets, calendar windows, notes, and visit counts and time on those hosts. Passwords are handled by Supabase Auth.

Who processes it
The website runs on Vercel. Auth and Postgres run on Supabase. The add-on talks only to this site for optional sign-in sync. We do not sell your list, and we do not use ads or third-party trackers.

Permissions
The browser asks for access to websites so Umbra can block the hosts you choose, show Pause, hide feeds, cap tabs, and apply YouTube quality or Data saver. Cookies are used only for Umbra’s own YouTube quality cookie (umbra_yt_q), not to read your login or ads cookies. Scripting is used to inject Umbra’s own helpers on pages you visit, not third-party ads. Umbra does not read Gmail, disk, GPS, or SMS.

Delete your data
Uninstall the add-on to wipe the local copy. To delete a signed-in account, open an issue on https://github.com/titoelfoly/site-blocker

Last updated 10 September 2026.