Privacy Policy

Gatekeeper (the "Attention Gatekeeper" browser extension) · Last updated: September 19, 2026 · Contact: support@gatekeeper.social

The short version: Gatekeeper is local-first. Your list of gated sites, your policy settings, and your daily activity stats are stored on your device. We only send information to our server when you actually ask the AI judge for a pass.

What we store on your device

• Your settings — the sites you gate, strictness, session limits, and failure behavior. Stored in your browser's extension storage (chrome.storage.local).
• Today's activity — the count of requests, approvals, denials, and minutes granted, plus the reason text you type for each request. Used to show your daily scoreboard and to give the judge behavioral context.
• An installation id — a random identifier generated on your device so our server can track fair usage (judgments per day) without a personal account.

What we send to our server

When you click "Ask" in the intervention, we send a single judgment request containing:

• The site you're trying to open (domain only),
• The reason you typed (up to 500 characters),
• Your requested duration,
• Behavioral stats: requests today, approvals/denials today, requests in the last two hours, minutes granted today, time since your last request/approval, and consecutive denials,
• Your policy settings (strictness, allowed recreation, max session, personality),
• Your installation id.

We do not send your browser history, your other tabs, cookies, or anything about sites you have not gated. If the judge is unreachable and you chose "fail open", the decision happens entirely on your device and nothing is sent.

The AI judge

The judge is powered by an external large language model (OpenAI gpt-4o-mini). Your reason text and behavioral stats are sent to that provider solely to produce the verdict; we do not train on your data. We never send your email address or name to the judge.

Rates and limits

Each installation gets a daily limit of AI judgments (30) and a short burst limit (3 per minute). This is enforced on our server and is about fairness, not tracking.

Storage on our server

We store your installation id, its daily counters, and the settings it registered with, so that limits and continuity work across visits. We do not store a long-term transcript of your reasons beyond what is needed for the day's behavioral context.

Contact form & email

If you send a message through the contact form at gatekeeper.social, we receive your name, email and message, and we use your email address to reply. Messages are delivered to us by an email provider (Resend); we don't build a contact list from the form. You can also reach us directly at support@gatekeeper.social. We do not sell or share your email.

Dashboard feedback

The extension's dashboard has a feedback box. When you send it, the message goes to the same inbox, along with your anonymous installation id, the extension version, and a few setting values (strictness, number of gated sites, preferred session length, fail-open preference). Your email address is only included if you type one, and it's only used to reply. Feedback is not used for the judge's decisions.

Data you can see and delete

Everything is in the dashboard: the "Today" tab shows your stats, and uninstalling the extension (or clearing its storage) removes the local data. To request deletion of server-side data, email support@gatekeeper.social with the installation id (visible under Settings → Advanced).

What we don't do

• No accounts, no login, no cross-device sync (yet).
• No advertising, no ad trackers, no analytics cookies.
• No selling of data. No sharing with third parties except the AI model provider described above.
• We only ever ask for the permissions the feature needs; see the Chrome Web Store listing for the full justification.

Changes

If we change how data is handled, we'll update this page and the date above. Big changes will be announced on the website first.

← Back to gatekeeper.social