Web Lock privacy policy

How Web Lock collects, stores and uses your data.

WHAT DATA WE COLLECT

The sites you lock and your passwords stay in your browser. They are never sent to us, unless you turn on Sync in Web Lock Pro (below).

We collect your email address when you install and set up the extension. We collect it so you can reset your password if you need to, and so we can send you occasional news about Web Lock (see "Emails from us" below). If you answer the survey when you uninstall, we keep what you write. Our server also records IP addresses with requests, to limit abuse such as repeated code requests.

EMAILS FROM US

We send the emails Web Lock needs to work: codes to reset your password or sign in, and replies when you write to us.

We may also send you an occasional email about Web Lock itself, such as a new version, a new feature or an offer on Web Lock Pro. We send these rarely, and only about Web Lock, never about anyone else's products. Every one of them has an unsubscribe link: use it and we stop sending them to that address. You can also email hello@khokon.dev to be taken off the list. Unsubscribing doesn't affect the codes and replies above, which you still get when you ask for them.

TECHNICAL DATA

When you set up Web Lock, when it updates and when you sign in, it tells us which version of Web Lock you have. When you use or preview a theme from our theme store, it adds one to that theme's count, with nothing about you. In Firefox, you can turn this off: it's the "technical and interaction data" choice when you install Web Lock, and under Web Lock's permissions in Firefox's add-ons page afterwards. The install id under "Campaign links" follows the same choice.

CAMPAIGN LINKS

When you follow one of our campaign links (weblock.site/c/…), we set a cookie on weblock.site that holds a random id for that visit, nothing about you. It lasts up to 30 days. When you install Web Lock, it makes a random install id and opens weblock.site, which reads the cookie so we can tell which link brought the install. We count visits once a day per visitor using a one-way hash, never your address. The install id is also sent when you set up Web Lock and when you uninstall it, so we can tell how many people each link brought, whether they kept Web Lock, and whether they bought Pro.

FEEDBACK

When you send feedback, we keep what you write and the Web Lock version and browser you sent it from (such as "Web Lock 2.0.2 · Firefox on macOS"), so we can look into problems. If you leave an email, we keep it to reply to you. If you sign in to send it (the same account Pro uses, free or not), we also keep our replies so you can read them in Web Lock, and email you a copy of each one.

WEB LOCK PRO

Pro is optional. Web Lock works without an account, and none of this applies unless you sign in to one.

If you sign in to a Pro account, we also keep:
- your account's email address, which can differ from your recovery email;
- one session for each browser you sign in on, with a label such as "Firefox on macOS" so you can tell them apart;
- your plan: which one you bought, whether it's active, and when it renews or ends.

If you turn on Sync, we also keep a copy of your Web Lock settings so your browsers can share them: the sites you lock and block, your schedules, your recovery email, your other settings, and your Web Lock password and any per-site passwords or PINs as one-way hashes, never as the passwords themselves (we can never read the passwords). Sync is off until you turn it on, and a browser with its own separate password doesn't send that password. In Firefox, turning Sync on first asks for your permission to send this data.

If you make a theme with AI in the Theme Studio using Web Lock's AI credits, what you ask for is sent through our server to the AI service that writes the theme, and we keep a record of the credits each theme took. If you use your own key for an AI service instead, what you ask for goes straight from your browser to that service, and your key stays in your browser.

Payments are handled by Stripe (https://stripe.com/privacy). You enter your card or other payment details on Stripe's page, never on ours, and we never see or store them. Stripe shares with us your plan, the amount paid and a customer reference that links your payments to your account. Stripe's privacy policy covers what it collects to process the payment.

HOW WE USE YOUR DATA

We use your email address to verify your identity when you, or someone else, tries to reset your Web Lock password, to send you codes to sign in to your account, to reply when you write to us, and to send you occasional news about Web Lock until you unsubscribe. We use your plan to decide which Pro features your extension can use, and your synced settings only to send them to your other browsers. We don't use your data to show you ads or to promote anyone else's products, and we don't sell it.

WHERE YOUR DATA IS STORED

Collected data is stored securely on Blog Desire's server. We share it with no one except Stripe, and only what's needed to take a Pro payment, and the email service that delivers our emails, which gets your email address and the message. Stripe keeps its own records of payments, as the law requires of payment processors.

DELETING YOUR DATA

To delete your synced settings, turn off Sync in Web Lock and choose to delete the synced copy. Your browsers keep their own settings.

To have your data or your Pro account deleted, email hello@khokon.dev from the address you used. We'll delete it, except payment records we have to keep by law. Cancel an active subscription first, or ask us to cancel it in the same email.

CHANGES TO THIS POLICY

If we change our privacy policy, we will post the changes at https://weblock.site/privacy so you always know what information we collect and how we use it. Changes take effect when they are posted there.

Last updated October 6, 2026