Privacy

Last updated 8 September 2026

Tend measures how long you spend on sites you have chosen to limit, so it can close them when your time is up. This page says exactly what that involves.

Signed out, nothing leaves your browser

Tend works without an account. In that mode every measurement stays in your browser’s local storage. No server is contacted, and there is nothing for anyone to see.

Signed in, this is what is sent

• Domains and time. For each stretch of attention: the domain (for example youtube.com), when it started, and how long it lasted. Never the full URL, never the page title, never the contents of any page.
• Your settings. The sites you track, their limits, and your combined daily limit — so every device you use agrees.
• Your account. The email address and account identifier Google gives us when you sign in.
• A device identifier. A random id generated by each browser profile, so the dashboard can show which device recorded what. It is not tied to your hardware.

Where it goes

To a server run by the author of Tend, and nowhere else. It is not sold, not shared with anyone, not used for advertising, and not used to build a profile of you. There are no third-party analytics, trackers, or advertising SDKs in the extension or on this site.

Sign-in is handled by Google. Google therefore knows you signed in to Tend, on their own terms; Tend receives only your email address and account identifier from them.

How long it is kept

Usage history is kept while your account exists so the dashboard can show it. Your browser keeps a local copy of roughly the last 45 days and discards older days automatically.

Getting rid of it

• Sign out from the extension or the dashboard, and it stops sending anything. What is already stored remains until you ask for it to be deleted.
• Sign out a device from the dashboard’s Account page and that device stops syncing.
• Delete everything by emailing the address below. Your account and all history are removed.
• Uninstall and the browser deletes Tend’s local storage with it.

Permissions, and why each exists

• Access to the sites you visit. Tend has to run on any site you might choose to limit, and that list is yours — it cannot be known in advance. It reads only the domain of the page, and shows the block screen when a limit is reached.
• Tabs. To know which tab is in front, so time is counted against the site you are actually looking at, and to replace a blocked tab when you leave it.
• Idle. To stop counting when you walk away.
• Alarms. To wake up periodically and check whether a limit has been reached.
• Storage. To keep your settings and today’s tally.
• Identity. Only used when you choose to sign in.
• Side panel. The extension’s interface lives there.

Changes

If this policy changes in a way that affects what is collected, the date at the top changes with it.

Contact

Questions, or a deletion request: olpyhn@gmail.com.