OnTask · privacy policy
What OnTask knows about you
Last updated 8 July 2026
Nothing. OnTask runs entirely inside your browser and makes no network requests, so there is no server to hold anything and no copy for anyone to ask us for.
The promise
- No personal information is collected.
- No data is transmitted to a server.
- No analytics or tracking services are used.
- Nothing is sold or shared with a third party.
- No account or login is required.
What is stored, and where
Everything OnTask saves goes into Chrome's extension storage on this device. That is the complete list:
- Your programs (class name, length, and the sites allowed during it).
- A salted PBKDF2 hash of your parent PIN (the PIN itself is never stored).
- Session reports for the last 60 sessions, including hostnames of blocked sites.
Why it asks for each permission
- Host permission (all sites)
- A session allows a set of sites you choose and blocks everything else, so the rules can't be limited to hosts known in advance.
- declarativeNetRequest
- Redirects pages outside the allowlist to its own blocked screen. Rules are created when a session starts and removed when it ends.
- tabs
- Reads the active tab's address to tell whether the current page is part of the class. Only the hostname of a blocked site is written to the local report.
- idle
- Tells time away from the screen apart from time on task, so the report is accurate.
- alarms
- Ends the session on time and re-checks attention every 30 seconds, which a service worker can't do with a timer.
- storage
- Stores your programs, the hashed PIN and session reports locally.
Children
OnTask is a tool for a parent to use. It records nothing about a child — no name, no profile, no browsing history — and transmits nothing about anyone. The only thing that exists is the list you set, on this device.
Third parties and remote code
There are none. All code, styles and fonts are bundled inside the extension. No SDK, no tracker, no advertising network, and nothing is fetched at runtime.
Keeping and deleting
You can clear the data from inside the extension at any time, and removing the extension deletes everything it stored. Because none of it ever reached us, we cannot access or recover it for you either.
Changes
If this policy changes, this page and the date at the top change with it.
Questions
Ask on X at @oxrajesh.