Waiex Privacy Policy

In short

Waiex blocks and delays distracting websites. To do that it has to see which page you are opening — but that information stays on your computer. Your blocked-site list, your statistics and your settings are never uploaded.

What does leave your computer is listed below, in full. There is no analytics SDK, no advertising network and no third-party tracker in this extension.

What stays on your device

All of the following is held in chrome.storage on your own machine, and in your Chrome Sync profile if you have sync enabled:

• The list of websites and categories you chose to block
• Your statistics — blocked attempts, visits, and time spent per site
• Settings: wait interval, active hours, difficulty profile, theme, custom images
• The result of on-page category analysis (for example “this domain looks like a news site”), cached so the page is not re-analysed

None of this is sent to me or to anyone else. If you uninstall the extension, it is deleted with it. You can erase your statistics at any time from the dashboard with Delete all data.

What is sent to bangelov.dev

A random device identifier

On installation the extension generates a random identifier (crypto.randomUUID(), for example 550e8400-e29b-41d4-a716-446655440000). It is not derived from your hardware, your browser or you, and it cannot be traced back to you.

This identifier is sent to bangelov.dev roughly once a day to ask whether your copy is licensed or still within its free trial. I store it with the date it was first seen, so the trial cannot be reset by reinstalling. No browsing data accompanies this request.

Your licence key

If you own a Premium licence, its key is sent alongside the device identifier so the licence can be bound to one device and checked for revocation.

Your email address, only if you offer it

• If you buy Premium: payment is handled entirely by Stripe. I never see your card details. Stripe passes me the email address you used at checkout so I can send you your licence key.
• If you claim the free student licence: your university address (@tum.de or @ethz.ch) is sent so a verification code can be emailed to it. The address and code are deleted once verification succeeds, and expire automatically after 15 minutes.

Feedback you choose to submit

The optional feedback form sends only what you typed into it, plus your device identifier so the trial extension can be credited. It is never sent automatically.

What is sent to third parties

Being precise about this matters more than sounding good, so:

• Google (favicons). The dashboard shows each site’s icon using google.com/s2/favicons. This means the domain names on your blocked list are visible to Google when you open the dashboard. No identifier of yours is attached, but if that bothers you, it is the one call worth knowing about.
• Google and worldtimeapi.org (clock). The extension asks these for the current time. Your difficulty locks are enforced against network time rather than your computer’s clock, so that moving the system clock forward cannot unlock a setting early. These requests contain no data about you.
• Stripe. Handles payment if you buy Premium, under its own privacy policy.
• Cloudflare. Hosts bangelov.dev and its database, and like any web server records standard request logs.

Share buttons open X, LinkedIn or WhatsApp in a new tab with text you can read and edit first. Nothing is posted on your behalf.

Why the permissions are so broad

Waiex requests access to all websites (<all_urls>). That is a wide permission and you are right to ask why.

• You can block any site, so the extension cannot know in advance which addresses it needs to watch. It has to be able to check every navigation against your list.
• Category blocking (social, news, betting and so on) recognises thousands of well-known sites instantly. For a site it does not recognise, it reads that page’s title and meta description to guess the category. That analysis happens inside your browser, and only the resulting category is kept. The page text is never transmitted.
• Page content is only examined when you have category blocking switched on.

The remaining permissions are narrower: storage for your settings, tabs and webNavigation to notice when you open a page, scripting for the category check above, idle so that time away from the keyboard is not counted against you, alarms for time tracking and the daily licence check, and favicon for site icons.

Your rights

I am based in Germany, so the GDPR applies. You may ask what is stored about you, ask for it to be corrected, or ask for it to be deleted.

In practice the only records tied to you are your device identifier, your licence key, and the email address used for purchase or student verification. Write to me and I will remove them — note that deleting a licence record also ends the Premium access it grants.

Uninstalling removes everything held on your device immediately.

Changes

If this policy changes in a way that affects what is collected, the date at the top will change and the update will be noted on the extension’s store listing.

Contact

Questions about any of the above, or a deletion request: get in touch.