The Doorman

Privacy Policy

Last updated: 27 July 2026

Doorman collects nothing, sends nothing, and has no servers. Everything stays on your computer.

What Doorman stores

Doorman saves your settings using Chrome's local extension storage (chrome.storage.local), on your device only:

• The list of websites you chose to protect, and their per-site options.
• Your schedules (days and times).
• Your preferences (challenge type, difficulty, puzzle types, grace period).
• Your password(s), stored only as a salted PBKDF2-SHA-256 hash — the actual password is never written to disk and cannot be recovered from what is stored.
• Temporary “passes” (which sites you've unlocked this session) in session storage, which is cleared when the browser closes.

What Doorman does not do

• It does not collect, transmit, sell, or share any data.
• It has no analytics, tracking, telemetry, or advertising.
• It makes no network requests. There is no backend server.
• It does not read the content of the pages you visit.

Permissions, and why they're needed

• Host access (<all_urls>) and webNavigation — to notice when you navigate to one of your chosen sites, so the Doorman can step in. Doorman only ever compares the site's hostname against the list you created; it does not read page content, and nothing leaves your device.
• tabs — to send the current tab to the challenge screen, and to notice when the last tab on a protected site closes (so a “while a tab is open” pass can expire).
• storage — to save your settings locally.
• alarms — to re-check your schedules about once a minute, so protection starts and stops at the times you set.

Your data, your control

Uninstalling the extension removes all stored settings. You can also wipe everything at any time via Settings → Data → Reset all settings.

Contact

Questions about this policy: b.gueusquin@gmail.com