OnTask · privacy policy

What OnTask knows about you

Last updated 8 July 2026

Nothing. OnTask runs entirely inside your browser and makes no network requests, so there is no server to hold anything and no copy for anyone to ask us for.

The promise

  • No personal information is collected.
  • No data is transmitted to a server.
  • No analytics or tracking services are used.
  • Nothing is sold or shared with a third party.
  • No account or login is required.

What is stored, and where

Everything OnTask saves goes into Chrome's extension storage on this device. That is the complete list:

  • Your programs (class name, length, and the sites allowed during it).
  • A salted PBKDF2 hash of your parent PIN (the PIN itself is never stored).
  • Session reports for the last 60 sessions, including hostnames of blocked sites.

Why it asks for each permission

Host permission (all sites)
A session allows a set of sites you choose and blocks everything else, so the rules can't be limited to hosts known in advance.
declarativeNetRequest
Redirects pages outside the allowlist to its own blocked screen. Rules are created when a session starts and removed when it ends.
tabs
Reads the active tab's address to tell whether the current page is part of the class. Only the hostname of a blocked site is written to the local report.
idle
Tells time away from the screen apart from time on task, so the report is accurate.
alarms
Ends the session on time and re-checks attention every 30 seconds, which a service worker can't do with a timer.
storage
Stores your programs, the hashed PIN and session reports locally.

Children

OnTask is a tool for a parent to use. It records nothing about a child — no name, no profile, no browsing history — and transmits nothing about anyone. The only thing that exists is the list you set, on this device.

Third parties and remote code

There are none. All code, styles and fonts are bundled inside the extension. No SDK, no tracker, no advertising network, and nothing is fetched at runtime.

Keeping and deleting

You can clear the data from inside the extension at any time, and removing the extension deletes everything it stored. Because none of it ever reached us, we cannot access or recover it for you either.

Changes

If this policy changes, this page and the date at the top change with it.

Questions

Ask on X at @oxrajesh.