WebHandbrake has no account, no server, no telemetry and no external analytics, and makes no network requests of its own. Everything it stores stays in your browser profile on this device (extension storage, never sync storage). Nothing is sold, shared or transmitted, to anyone.

What it reads, on this device only

• The address of every page you open, to check it against your rules.
• The Date header of the top-level pages the browser loads anyway, to notice a manipulated system clock. It makes no extra requests, and this can be turned off in Settings › Time.
• On the sites of your rules: whether the page is visible and focused, when you last used the keyboard, mouse or touch screen (never what you typed), and whether audio or video is playing, to count active time and show the timer, filters and grace period.
• The text of the field you are typing in, inside the page only, for the grace period's "Copy my draft" button. It is never stored or passed to the rest of WebHandbrake.
• Whether the device is idle or locked, to stop counting time.

What it stores

• Your rules, lists and settings, and automatic backups of them. Rule passwords are kept only as salted hashes.
• Daily statistics per rule and per site name (never full addresses), kept 730 days by default.
• Breaks and their reasons, focus sessions, pending changes, protection events, the pages you save for later, and the reasons you type when WebHandbrake asks what you want to do.
• Until the browser closes: a log of the last 200 restricted pages, which you can turn off in Settings › Diagnostics.

Private windows: WebHandbrake runs there only if you allow it, and keeps there only the totals your limits need, not per-site statistics.

Your choices: export your data, delete statistics (Insights › Data or Settings › Privacy), turn off the decision log and the clock check. Uninstalling WebHandbrake removes everything it stored.

The full policy lists every item stored and every permission: https://github.com/fabiomolignoni/WebHandbrake/blob/main/PRIVACY.md