What we store — and what we never do

Child Web Guard is a parental control tool. Its job is to judge content, not to watch children. This page describes exactly what data exists when you use it. Last updated: 1 September 2026.

What we never collect

No browsing history leaves the device. The activity record (sites visited, time spent) exists only on your child's computer — it is never sent to us, never synced, and deletes itself after 7 days.
No page-content storage. Text sent for classification is processed and discarded, never saved to a profile.
No data selling, no advertising, no analytics brokers. There is nothing to sell.
No personal information collected from children.

Account data

Sign-in uses Google through our authentication provider (Supabase). We store your email address and an account identifier — that is the entire account record.

Devices & Windows accounts

The desktop app registers each activated PC (its computer name and when it was last active) and each Windows account on it that has run the app (the account name, a Windows security identifier, and when it was last active). This powers the dashboard's device list and the per-account protection switch. It contains no browsing data. Signing out or uninstalling revokes the device; deleting your account deletes all of it.

Settings sync

If you sign in, your parental settings (block lists, rules, thresholds) are stored as versioned JSON in the cloud so they sync to every signed-in browser. This contains your configuration, not your child's activity.

Activity & screen time — on the device only

So you can see how the computer is used, the extension keeps an activity record in the browser's local storage on that computer: pages visited (page address and time), daily totals (visits, blocks, AI checks), and active browsing minutes per day and per site. This record:

Never leaves the device. It is not uploaded, not synced, and does not appear in the web dashboard. We cannot see it.
Deletes itself. The page-by-page list is erased automatically after 7 days; daily totals roll for 14 days.
Is not secret. You review it on the PIN-locked device page; your child sees their own daily summary in the extension popup. Monitoring a child should be honest, not hidden.
Is your choice. Turn activity counting off, or delete everything recorded, at any time on the device page.

AI classification

When the AI checks an unknown page, the page's title and a truncated excerpt (max ~3,000 characters) are sent through our backend to the AI provider to be classified; the verdict (category tags, language) is cached for future visits. We keep monthly classification counts for quota — counts only, not URLs.

Known-sites cloud backup (Monthly plan)

On the Monthly plan we can back up your account's list of already-classified sites and pages (domain or page address plus its category tags — no page content) to our cloud so a new device is ready right after you sign in. This list is linked to your account, unlike the anonymous public directory other families benefit from. Classifications made through our backend are backed up as part of the plan; classifications made with your own AI key on your own machine are uploaded only if you switch on "Back up known-sites cache" in the dashboard — it is off by default. Deleting your account deletes this backup.

Payments

Subscriptions are processed entirely by Stripe. We never see or store your card details; we only receive your plan status from Stripe.

Your controls

You can stop using cloud features at any time by signing out — local blocking continues. To delete your account and its data, email support@child-web-guard.com and we will remove it.

Contact

Questions about this policy: support@child-web-guard.com.