Privacy Policy

01Who we are

Al-Hudud is built and operated by DownLabs. In this policy, "we", "us" and "our" mean DownLabs, and "you" means anyone who installs or uses Al-Hudud. We are the data controller for the limited information described below.

Questions, requests, or complaints about privacy go to hello@downlabs.co. We answer every message.

02What this policy covers

• The Al-Hudud Chrome extension (v3.0.0), including its popup, block screens, quiz and challenge features.
• The Al-Hudud Android app distributed on Google Play.
• The website at alhudud.downlabs.co and the support endpoints it uses.

It does not cover other websites you visit, or third-party services you reach through a link we provide. Those have their own policies.

03Permissions and why we need them

Chrome asks you to approve permissions at install time. Here is every permission Al-Hudud requests, what it is used for, and what it is not used for.

04Data stored on your device

Al-Hudud keeps a small amount of state in Chrome's extension storage so the app remembers your preferences and progress between sessions:

• Settings — protection on/off, strict mode, blur, quiz-to-disable, theme, and preferred language (English, Arabic, Urdu).
• Setup state — whether you accepted the terms and finished onboarding.
• Counts and progress — number of items blocked today, your streak and streak history, quiz scores, challenge progress and badges. These are plain numbers and dates; they contain no addresses, page content, or titles.

This data lives in your browser profile. We cannot read it, and it is deleted when you remove the extension.

05Chrome sync

Preferences are saved with Chrome's storage.sync area. If you are signed in to Chrome with sync enabled, Chrome copies that small settings blob between your own signed-in devices through your Google Account. That transfer is handled entirely by Google under Google's privacy policy; the data does not pass through our servers. Signing out of Chrome or disabling sync keeps it on one device.

06Data you choose to send us

Nothing is sent automatically. Three optional actions, all started by you, involve a network request:

Reporting a website or an issue

If you fill in the report form in the extension, we receive exactly the three fields you typed: the website address you are reporting, your email address, and your message. We use them only to review the site and reply to you. Reports are submitted over HTTPS to our support endpoint and handled by our support team.

Checking service status

The extension can check whether our service endpoint is reachable. That request contains a fixed test payload, not your data — no page you visited is included.

Supporting the project

Al-Hudud is free forever, with no paid tier and no license key. If you choose to donate, the payment is completed on our payment partner's own page. We never see or store your card, bank, or wallet details. Only the payment provider handles those.

07Third-party services

Al-Hudud touches a small number of outside services, and only in these situations:

We do not embed advertising networks, analytics SDKs, session recorders, or social media trackers in Al-Hudud.

08What we never do

• We never collect, store, or transmit your browsing history — no URLs, page titles, or page content.
• We never sell or rent personal information, and we never share it for advertising or cross-context behavioural advertising.
• We never build advertising or credit-scoring profiles, and we do not attempt to identify you.
• We never require an account, sign-in, or license key. Al-Hudud is free forever.
• We never take screenshots of your screen or upload images from the pages you visit.
• We never load remote code into the extension. All logic ships in the package Google reviews.

The only situation in which we would disclose the limited data described in section 6 is where the law requires it — for example a valid legal order — or where it is strictly necessary to investigate abuse of our own service.

09Chrome Web Store Limited Use

Concretely, that means:

• Data handled by the extension is used only to provide and improve the content-filtering features you see in the product.
• It is not transferred to third parties, except as required by law or to a service provider strictly necessary to deliver a feature you started (for example, a payment provider when you donate).
• It is not used or transferred for advertising, personalised or otherwise, and not for creditworthiness or lending purposes.
• No humans read your data, except with your explicit consent (such as the report you send us), for security purposes, to comply with the law, or where the data is aggregated and anonymised.

10Google Play data safety

The Al-Hudud Android app follows the same principles as the extension: filtering runs on the device, no account is required, and we do not collect your browsing history. The sections of this policy on what we never do, security, children's privacy, retention, deletion and your rights apply to the app in full.

The categories of data the app collects or shares, and the device permissions it declares, are listed in the Data safety section of the app's Google Play listing. That listing and this policy are kept consistent with each other. If you want a copy of what we hold for you, or want it deleted, write to hello@downlabs.co and we will action it — see section 13.

11Children's privacy

Al-Hudud is designed to keep browsing safe and is often installed by parents on a family device, but the product itself is intended for users aged 13 and over. We do not knowingly collect personal information from children. Because the extension requires no account and collects no personal data by default, a child using a protected device does not send us anything. If you believe a child has sent us personal information through the report form, email hello@downlabs.co and we will delete it.

12How we protect data

• Every request between Al-Hudud and our servers uses HTTPS encryption in transit.
• The extension's own pages run under a strict Content Security Policy, and the package contains no remotely-loaded code.
• Access to support messages is limited to the DownLabs team members who answer them.
• The strongest protection is structural: the data we do not collect cannot be breached, lost, or subpoenaed.

No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security — but we keep the amount of data at risk as close to zero as the product allows.

13Retention and deletion

Data on your device

Settings and progress remain until you clear them or uninstall. Removing the extension from chrome://extensions deletes its local storage. If Chrome sync copied your settings, signing out of Chrome or clearing synced data through your Google Account removes those copies.

Support messages

Reports and emails are kept only as long as needed to resolve the issue and keep our block lists accurate — normally no longer than 24 months — then deleted. You can ask us to delete yours sooner at any time.

Server logs

Ordinary technical logs are rotated and deleted on a short cycle, normally within 90 days.

14Your rights

Depending on where you live — including under the GDPR in the EU and UK, and the CCPA/CPRA in California — you have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict processing, and to withdraw consent. Since the only personal information we hold is what you send us in a report or email, exercising these rights is straightforward: write to hello@downlabs.co from the address you contacted us with.

We respond within 30 days and never charge for a request. We do not sell personal information, so there is no "Do Not Sell My Personal Information" process to opt into. EU and UK users also have the right to complain to their local data protection authority.

15Changes to this policy

If we change how Al-Hudud handles data, we will update this page and move the "Last updated" date at the top. Material changes — anything that widens what we collect or who receives it — will also be announced in the extension before they take effect. Continuing to use Al-Hudud after a change means you accept the updated policy.

16Contact us