Umbra

Privacy

Umbra is a Chrome site blocker. Blocking runs on your computer. Cloud sync is optional and only happens after you create an account.

What stays on this computer

If you use the extension signed out, your list, hours, notes, visit time, and lock password live in chrome.storage.local. The lock password is never sent to the website or the database.

What we store if you sign in

An account on umbra-blocking.vercel.app stores email, username, display name, blocked and released hosts, pause and feed hosts, hours, budgets, calendar windows, notes, and visit counts and time on those hosts. Passwords are handled by Supabase Auth.

Who processes it

The website runs on Vercel. Auth and Postgres run on Supabase. The extension talks only to this site for sign-in sync. We do not sell your list, and we do not use ads or trackers.

Permissions

Chrome asks for access to every site so Umbra can block the hosts you choose, show Pause, and hide feeds there. It does not read your Gmail, disk, GPS, or SMS.

Delete your data

Uninstall the extension to wipe the local copy. To delete a signed-in account, open an issue on github.com/titoelfoly/site-blocker.

Last updated 19 August 2026.