Privacy Policy
Last updated: November 9, 2026
Haven is a parental-control browser extension. It analyses web pages on the device to enforce the limits a parent sets. It never sells or shares browsing data and contains no ads or analytics. If a parent connects the optional family dashboard, only time spent per site, blocked attempts, the site currently open, a timeline of which site was used when (for focus reports) and basic device details (browser and OS) are sent to that parent’s own dashboard.
Who this applies to
This policy covers the Haven browser extension (“the extension”) and the optional Haven family dashboard (“the dashboard”). The dashboard is a server run by the parent or guardian who set Haven up. That parent is responsible for the data on their dashboard and for the devices and children they manage.
What stays on the device
The extension stores the following in the browser’s local extension storage. It is not sent anywhere unless the dashboard is connected (see the next section).
- Rules set by the parent: blocked sites, time-limit groups, allowed hours and protection settings.
- A hashed parent password or PIN. The password itself is never stored.
- Usage records: time spent per website (hostname only, e.g.
youtube.com) and per time-limit group, per day, plus a timeline of which site was used when (start and end times). Kept for 60 days. - Blocked attempts: the time, the website hostname, the reason (for example “daily limit”) and how a disguised site was detected. The latest 300 are kept.
To enforce limits, the extension looks at the pages a child opens: the page address, title, site metadata, the addresses of resources the page loads, and (when mature-content filtering is on) a short sample of the visible text. This analysis happens in memory on the device. Page content is never saved or transmitted.
What is sent to the family dashboard
Only if a parent connects the extension to their dashboard (by entering its address and family code, or through a browser policy they install), the extension sends the following to that dashboard about once a minute:
| Data | Example | Why |
|---|---|---|
| Time per site | youtube.com: 42 min today | Show the parent usage and apply limits across all of a child’s devices |
| Site timeline | docs.google.com 16:02–16:25, instagram.com 16:25–16:31 | Focus reports: when the child switched between homework and distracting sites |
| Blocked attempts | 10:35, discord.com, blocked site | Show the parent what was blocked |
| Current site | khanacademy.org (active now) | Show “online now” on the dashboard |
| Device details | Chrome on macOS, Haven 1.0.0 | Tell devices apart so the parent can assign them to a child |
The dashboard sends back only the parent’s rules, any extra time granted, and the hashed parent PIN.
Never collected or sent: full page addresses, page content, search terms, messages, form data, passwords, keystrokes, screenshots, location, contacts, or the name or email of the child’s browser account.
Parent accounts and payments
To create a dashboard account we store the parent’s email address and a salted hash of their password. We use the email only to sign in, reset the password and send account messages.
Paid plans are sold and processed by Polar (polar.sh), our merchant of record. Card details go directly to Polar and its payment processor and never reach us. We share the parent’s email and an account reference with Polar, and keep only the subscription’s status, plan and renewal date. Children’s browsing data is never sent to Polar.
Sharing
Browsing data is never sold, never used for advertising, and never shared with third parties other than the providers that run the service. The dashboard runs on hosting infrastructure (for example Railway), which stores the data only to operate the dashboard. Password-reset emails are delivered by an email provider, which receives only the parent’s email address. Each family’s data is kept separate and is visible only to that family’s account.
Retention and deletion
- On the device: usage is kept for 60 days. A parent can clear it at any time (Settings → Reset usage data). Removing the extension deletes all of its data.
- On the dashboard: usage, timelines and blocked attempts are deleted automatically after 13 months (so yearly reports work). A parent can delete their account at any time under Plan & billing, which permanently deletes their children’s profiles, devices and history.
Security
Parent passwords and PINs are stored only as salted hashes (scrypt and PBKDF2). Device credentials are stored as hashes on the dashboard. Data between the extension and the dashboard travels over HTTPS when the dashboard uses an https:// address, as Railway deployments do by default.
Children
Haven is a tool for parents and guardians to supervise their own children’s browsing. The extension collects usage information only on behalf of that parent, who controls it. We encourage parents to tell their children that Haven is installed and what it does.
Permissions
The extension uses its browser permissions only for its single purpose of parental controls:
- Access to all sites to check pages against the parent’s rules.
- Tabs to know the active page and show the block page.
- Network rules to block sites before they load.
- Idle to pause counting when the computer is unattended.
- Storage and alarms to keep rules and limits up to date.
The use of information received through these permissions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Changes
If this policy changes, the updated version will be posted on this page with a new date.
Contact
Questions or deletion requests: bathang@gmail.com