Privacy Policy

DriftGuard - ADHD Browsing Support

Effective date: April 3, 2026 · Version 1.0

The short version: DriftGuard stores all your browsing data locally on your device. We never see it, never collect it, and never send it to our servers - because we don't have servers. The only network request the extension ever makes is when you choose to activate a license key, which is validated via LemonSqueezy. That's it.
Contents
  1. Who We Are
  2. Data We Collect
  3. Data We Do NOT Collect
  4. How We Use Your Data
  5. Data Storage & Retention
  6. Data Sharing & Third Parties
  7. Chrome Permissions Explained
  8. Free Trial & Subscription
  9. Your Rights & Data Control
  10. Google API Services & Limited Use Disclosure
  11. Cookies & Tracking Technologies
  12. Security
  13. Children's Privacy
  14. International Users
  15. Changes to This Policy
  16. Contact

1. Who We Are

DriftGuard is a Chrome browser extension designed to help people with ADHD manage their browsing habits. It is developed and maintained by NeatStack Studios ("we", "us", "our").

DriftGuard is distributed via the Chrome Web Store. Subscriptions are processed by LemonSqueezy, our payment provider.

Single Purpose

DriftGuard has a single, clearly defined purpose: to help users with ADHD manage their web browsing habits. All features (time tracking, nudge reminders, hyperfocus sessions, tab management, and clipboard history) serve this purpose. The extension does not serve ads, inject affiliate links, modify search results, or perform any function unrelated to ADHD browsing support.

2. Data We Collect

DriftGuard is designed with a local-first, privacy-by-default architecture. We collect no personal information. The extension handles the following data, all stored locally on your device:

Data type Description Applies to Storage location
Browsing time per domain Daily aggregate seconds spent on each website domain (e.g. "youtube.com: 1,200s"). Individual page URLs, titles, and content are never recorded. All users Local only (chrome.storage.local)
Site categories Your classification of domains as "Focus" or "Distraction". All users Local only
Extension settings Your preferences: nudge delay, nudge message text, session duration, daily goal, idle threshold. All users Local only
Hyperfocus session records Start time, configured duration, actual duration, and completion status of focus sessions. All users Local only
Clipboard history Text you copy (Ctrl+C) on web pages, stored with a timestamp and the source domain. No images, files, or passwords are captured. Limited to 200 entries with configurable auto-cleanup. Subscribers Local only
Tab Bubble data Metadata about tab groups you create: tab URL, domain, group colour, icon, timer, guard status, and notes. No page content is stored. Subscribers Local only
Trial start timestamp The date and time you installed the extension, used to calculate the initial preview period. All users Local only
License key The key you manually enter to activate the full version. Subscribers only Local + sent to LemonSqueezy for validation (see Section 6)

3. Data We Do NOT Collect

To be absolutely clear, DriftGuard does not collect, transmit, or have access to:

Preview and unsubscribed users generate zero network requests. The extension makes no outbound connections whatsoever unless you manually enter a license key.

4. How We Use Your Data

5. Data Storage & Retention

All data is stored locally on your device using Chrome's chrome.storage.local API. No data is stored on external servers.

Retention periods

User tier Daily browsing data retained Settings & categories
Preview period (before subscribing) Duration of preview Kept until uninstall
Subscriber ($2.99 AUD/mo or $29.99 AUD lifetime) 1 year (auto-cleaned daily) Kept until uninstall

Data deletion

6. Data Sharing & Third Parties

We do not sell, rent, trade, or share your data with any third party. Period.

There is one narrow exception:

LemonSqueezy (subscribers only): When you enter a license key to activate the full version, the key (and only the key) is sent to LemonSqueezy's license validation endpoint (https://api.lemonsqueezy.com/v1/licenses/validate) via HTTPS. The request includes:

No browsing data, settings, usage statistics, or personal information is included. LemonSqueezy's privacy policy is available at lemonsqueezy.com/privacy.

We use no analytics services (Google Analytics, Mixpanel, Amplitude, etc.), no crash reporting tools, no A/B testing frameworks, and no advertising SDKs.

7. Chrome Permissions Explained

Chrome extensions must declare permissions upfront. Here is exactly why DriftGuard needs each one:

Permission Why it's needed What it can access
storage Save your tracking data, site categories, settings, trial status, and license key locally. Extension's own local storage only. Cannot access other extensions' or websites' storage.
tabs Detect the domain of the website you are currently viewing so time can be tracked per site. Reads the URL of the active tab. The extension extracts only the domain name (e.g. reddit.com) and discards the rest. Page content is never read.
idle Pause time tracking when you step away from the computer, so idle time isn't counted. Detects whether the system is active, idle, or locked. No other information is accessed.
tabGroups Power the Tab Bubbles feature — create, collapse, expand, and colour Chrome tab groups. Manages Chrome's native tab groups. Does not access tab content, only group metadata (title, colour, collapsed state).
alarms Schedule periodic data flushes (every 60 seconds), daily data cleanup, and hyperfocus session timers. Sets and responds to timer-based alarms within the extension. No external access.
host_permissions
(<all_urls>)
Required for the content script to inject nudge overlays and focus-block screens on any website, and to capture clipboard text when you copy (Ctrl+C). Without this, the extension cannot display reminders or record clipboard history. Injects a small UI overlay onto pages. The content script listens for copy events to capture highlighted text (clipboard history feature). It does not read page content, modify pages, or extract any data beyond what you explicitly copy.
Why <all_urls>? Chrome requires this broad permission because DriftGuard needs to show nudge overlays on any website you might visit (including ones you haven't categorised yet) and capture clipboard text when you copy. There is no way to limit this to specific domains while still providing the core functionality. We understand this permission looks broad, which is why we want to be transparent: the content script only renders DriftGuard UI, listens for copy events you initiate, and communicates with the extension's own background process. It never reads page content unprompted.

8. Free Trial & Subscription

Free trial

After the preview

Refunds

Refund requests are handled through LemonSqueezy in accordance with their refund policy. Contact us if you need assistance.

9. Your Rights & Data Control

You have full control over all data at all times:

Because we never have access to your data in the first place, there is nothing for us to delete on our end. Your data is entirely under your control.

GDPR, CCPA, and other privacy regulations

DriftGuard is designed to be compliant by architecture:

Google API Services User Data Policy

DriftGuard's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

10. Cookies & Tracking Technologies

DriftGuard does not use cookies, web beacons, pixels, fingerprinting, or any other tracking technology. We do not track you across websites. We do not build profiles. We do not serve or facilitate advertising.

11. Security

12. Children's Privacy

DriftGuard does not knowingly collect personal information from anyone, including children under 13 (or the applicable age in your jurisdiction). Because no personal data is collected at all, the extension can be used by people of all ages. However, the subscription/payment process through LemonSqueezy may require the user to be at least 18 years old or have parental consent.

13. International Users

DriftGuard operates entirely on your local device. No data crosses borders because no data leaves your device. The only exception is the license key validation request (subscribers only), which is sent to LemonSqueezy's servers. LemonSqueezy is a US-based company; please refer to their privacy policy for information about their data handling practices.

14. Changes to This Policy

We may update this privacy policy from time to time. When we do:

Continued use of the extension after changes constitutes acceptance of the revised policy.

15. Contact

If you have questions, concerns, or requests regarding this privacy policy or your data, you can reach us at:

We aim to respond to all privacy-related enquiries within 5 business days.