Privacy Policy

Last updated: June 17, 2026

UnitFlow is a Chrome extension that tracks how much of your browsing time is spent on websites you designate as "work" versus everywhere else. This policy explains exactly what data the extension touches, and — just as importantly — what it doesn't.

Summary

• Everything stays on your device. Nothing is ever sent over the network.
• There is no backend server, no account system, and no analytics SDK of any kind.
• The extension never reads page content or what you type — only event counts.

What data the extension accesses

To do its job, UnitFlow reads:

• The hostname of your active browser tab (e.g. github.com), to determine whether the current site matches one of the work domains you configured. It does not read full URLs, query parameters, or page content.
• Counts of click, keydown, and scroll events on the page you're viewing — for example "14 clicks, 80 keystrokes, 6 scrolls." It never records what was clicked, typed, or scrolled to. No key values, no form data, no text content.
• Browser idle state, via Chrome's built-in idle API, to know when you've stepped away so that time isn't counted as Focus or Distraction while you're not present.

Where this data is stored

All of it — your configured work-site list, current session statistics, and your last completed session — is stored locally on your device using Chrome's built-in chrome.storage API. None of it is transmitted anywhere. There is no server this extension talks to. Uninstalling the extension removes this data.

What this data is used for

Solely to compute and display, inside the extension's own popup, how much of your browsing time falls into "Focus" (your configured work sites) versus "Distraction" (everything else), broken down by site. That's the entire purpose of the extension — nothing else.

What this extension does not do

• It does not sell, rent, or transfer your data to any third party.
• It does not use your data for advertising, profiling, or any purpose unrelated to the time-tracking feature described above.
• It does not use your data to make credit, lending, or employment decisions.
• It does not require you to create an account or sign in.
• It does not run any analytics, telemetry, or crash-reporting SDK.

Permissions, explained

• storage — to save your settings and session data locally.
• idle — to detect when you're away so idle time isn't tracked.
• tabs — to read the active tab's hostname (not full URL or content).
• alarms — to periodically flush tracked time even if the background script has been suspended by Chrome.
• host_permissions: <all_urls> — so the lightweight activity-counting script can run on whatever domain you personally choose to designate as a work site, since that list is entirely user-configured at runtime.

Changes to this policy

If this policy changes, the "Last updated" date above will change accordingly. Material changes will also be reflected in the extension's Chrome Web Store listing.

Contact

Questions about this policy or the extension's data practices can be directed to the developer contact listed on the Chrome Web Store listing page.