WebLimitPrivacy Policy
1. Scope and who is responsible
This policy covers WebLimit — Website Blocker & Focus Timer, its bundled local manager and legal pages, the public companion website hosted on Cloudflare, and support communications. Ahmed is the publisher and is responsible for personal information he receives through support or operates through the public website. Processing by a third-party website you visit remains subject to that website’s practices.
2. What the extension handles locally
- Settings: protection status, chosen websites and names, default duration, and light/dark/system appearance.
- Current website addresses: Chrome provides tab URLs so WebLimit can compare hostnames with your website list and identify matching tabs. Full addresses are processed transiently; completed visit records do not store paths, search queries, page titles, or full URLs.
- Visit records: a selected domain, chosen minutes, start/end timestamps, and completion status. Up to the most recent 300 completed records are retained locally, plus currently active timers.
- Page interaction: the content script covers the page with a duration prompt, can pause audio/video while the prompt is shown, and applies grayscale at expiry. It interacts with local page elements for these features; it does not extract page text, messages, passwords, form values, or payment details.
- Terms acceptance: the accepted terms version and acceptance timestamp are stored locally. No signature, identity document, or acceptance record is sent to the publisher.
3. Why these permissions are requested
Website access on HTTP and HTTPS pages enables automatic prompts on selected sites, including custom domains you add, and allows matching tab URLs to be identified for closure. Storage saves settings, timers, local history and acceptance. Alarms schedules expiry and tab closure even when the extension background worker is inactive. Tab creation/removal uses Chrome’s tab APIs; the extension does not request a separate tabs permission. Content scripts run only in the top-level document. Chrome-protected pages are unsupported.
4. How local data is used and shared
Local data is used only to provide the disclosed timed-browsing, website-blocking, appearance, history, and settings features. When you open the public manager, the extension shares settings, active timers, local visit records and a setup-complete status with that page through a message channel restricted to the companion website’s exact origin. The local terms acceptance timestamp and version are not forwarded to the public page. The page displays and edits that information in your browser; its code does not transmit it to a server. Any operator who controls that origin can change future website code, so install updates and use the bundled offline manager if you prefer not to open the hosted manager.
WebLimit does not sell local user data, share it for advertising, use it for credit or lending decisions, or allow the publisher to remotely read it. WebLimit’s use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. No external AI service or remote executable code is used.
5. Website storage and hosting
The hosted manager stores standalone preview settings and appearance in this browser’s local storage. Preview preferences are separate from extension preferences and do not automatically replace them when the extension connects. The extension uses Chrome local extension storage, not Chrome sync storage.
Opening the public manager, a legal page, or a download makes an ordinary website request to Cloudflare. Cloudflare may process your IP address, request URL, headers, device/network information, and technical/security logs to deliver and protect the site. The publisher may receive hosting dashboard information made available by Cloudflare. Domain lists, visit records, and acceptance records are not included in those requests by WebLimit. This website has no publisher-added analytics, advertising, tracking cookies, forms, or external font services. Fonts are bundled. See Cloudflare’s Privacy Policy for provider processing.
6. If you contact support
If you email the publisher, your address, message and attachments are received separately from the extension. They are used to respond, investigate defects, handle rights requests and meet applicable legal obligations. Gmail is the email service provider; see Google’s Privacy Policy. Send only the information needed for your request. Do not send passwords, financial details, private page content, or a full browsing history. Support messages are retained only as reasonably necessary for the request and applicable legal obligations, then deleted or appropriately de-identified.
7. Retention, deletion and control
Local settings persist until you change/reset them or remove the extension. Active timers persist until completed or canceled. Completed history is capped at 300 records and can be cleared from Activity. Settings → Reset local data clears extension settings, the website list, active timers, completed visits and local acceptance, requiring setup again. Uninstalling normally removes Chrome’s extension storage. Clear the companion website’s site data separately to remove its preview and appearance preferences. Deleting local data does not erase copies you exported, browser/operating-system backups, support email, or provider logs.
Settings can be exported as a JSON file. You control where exported files go; WebLimit does not upload them. Chrome, your operating system, other software and people with access to your device can affect the confidentiality of local data.
8. Legal grounds, transfers and your rights
Local browser processing supports the features you choose to use. Support and essential hosting processing is carried out to provide the service, respond to requested assistance, meet legal obligations, and maintain security, on the lawful basis applicable to each activity. Where consent is legally required for a separate activity, it must be obtained for that activity; agreeing to the Terms is not blanket consent to unrelated data processing.
Cloudflare and Gmail may process information outside Saudi Arabia under their applicable terms and privacy practices. Applicable transfer requirements, safeguards and mandatory rights remain in force. Depending on applicable law, you may have rights to information, access, correction, deletion, objection or withdrawal of consent where processing relies on it. Contact ahmedfalahalharthi@gmail.com to exercise rights concerning information held by the publisher or ask about processing. The publisher cannot remotely retrieve your local extension records. You may also raise a complaint with a competent authority, including Saudi Arabia’s data protection authority where applicable. These rights are not waived by the Terms.
9. Children, security and changes
The product is a general productivity tool and is not directed at young children. Users must have legal capacity or valid authorization where required. Do not submit children’s personal information to support unnecessarily. The publisher uses the measures described here to limit data handling; no software, device or hosting service can guarantee absolute security.
This policy will be updated if practices change. The current version and effective date remain available in the public and bundled legal pages. A future update does not authorize undisclosed collection, sale or unrelated use of previously handled data. Contact ahmedfalahalharthi@gmail.com with privacy questions.