Citadel Privacy Policy

Last updated: July 8, 2026

Citadel is a Chrome extension that helps you block distracting websites until a timer you set expires. Your privacy matters. This policy explains what data Citadel uses and where it stays.

Summary: Citadel does not collect, transmit, or sell your personal data. Everything stays on your device (and optionally in your signed-in Chrome sync profile for block lists only).

Data we store

Citadel stores the following locally in Chrome:

Block list — domains, expiry times, optional notes, and duration metadata. Stored in chrome.storage.sync, which may sync across devices if you use Chrome Sync.
Settings — theme, quote preferences, and an optional PIN hash (SHA-256). Stored in chrome.storage.local on your device only.
Session unlock — if PIN protection is enabled, a session flag in sessionStorage unlocks the popup until you close the browser session.

Data we do not collect

No analytics or tracking
No accounts or sign-in
No remote servers operated by Citadel
No sale or sharing of user data with third parties
No browsing history upload — URLs are used only on-device to enforce blocks you create

Permissions

Citadel requests Chrome permissions solely to provide blocking:

declarativeNetRequest — redirect blocked sites to Citadel’s interstitial page
storage — save your blocks and settings
tabs / webNavigation — redirect open tabs when a block is active
alarms — expire blocks on schedule
<all_urls> — match domains you choose to block across the web

Export and import

You may export your block history as a JSON file and import it later. Export files are created on your device; Citadel does not upload them anywhere.

Children

Citadel is not directed at children under 13 and does not knowingly collect their data.

Changes

We may update this policy when Citadel changes. The “Last updated” date above will reflect revisions.

Contact

Questions about privacy? Visit support, use the Support tab on the Chrome Web Store listing, or email skyblazar.cc@gmail.com.