Privacy Policy

Not Yet: Checkout Blocker · Last updated: October 28, 2026

The short version: Not Yet has no server, collects nothing, and sends nothing anywhere. Everything it does happens entirely on your own device. This policy explains exactly what that means and why.

No servers, no collection

Not Yet does not have a backend. There is no company server, no database, no analytics service, and no third-party SDK anywhere in this app. The extension makes no network requests of its own at all: not to us, not to any analytics or advertising company, not to anyone. We have no way to see how you use the app, what sites you visit, what you almost bought, or anything else, because nothing is ever sent to us. There is nothing to breach, nothing to subpoena, and nothing to sell, because nothing leaves your device in the first place.

The one exception is described fully under "Cross-device sync (Safari)" below: on Safari, some settings sync between your own devices through Apple's iCloud, not through anything we operate.

What's stored, and where

Everything Not Yet remembers is stored locally on your own device, using the browser's standard on-device extension storage, and is never sent to us or to any server we operate. This includes:

• Your settings — which categories or sites you've chosen to pause or block, time limits you've set on sites, your chosen theme, your unlock method and its settings, and similar preferences. On Safari, these sync across your own devices through Apple's iCloud — see "Cross-device sync (Safari)," below.
• A few local counters — how many times a checkout page has been paused, how many times you've gone to your Quiet Place instead, a running total of money you've told the app you skipped spending (only ever added when you actively choose to enter an amount and decide not to buy — see "The savings total," below), and, only if you turn on "Track completed purchases too," a separate "spent anyway" total.
• Your activity history — a private, on-device log behind the recap page: when a pause happened and on which site, whether you went to your Quiet Place, amounts you entered, and the mood check-ins, activities, and notes you add in your Quiet Place. It keeps only the most recent 500 entries, and you can remove any money entry yourself in Settings.
• Time used on sites with a time limit — how much of each limit you've used on this device, so the corner timer can carry on across pages and tabs. Only time the site is on your screen is counted.
• Photos you add (Premium) — your Quiet Place pinboard photos and custom background photo are resized on your device and stored there. They are never uploaded anywhere.
• A PIN, if you turn on Guard Mode — stored only as a one-way cryptographic hash (SHA-256), never in plain text. Not Yet can check whether a PIN you enter matches, but the actual PIN is never stored or recoverable, including by us. On Safari, this hash is included in the same cross-device sync as your settings, so the same PIN works on each of your own devices.

The counters, activity history, time used, and photos stay on the one device that recorded them and do not sync. On iPhone, iPad, and Mac, a few of these numbers (and your background photo) are also shared with the Not Yet app on the same device, so its widgets and main screen can show them; that happens through a private on-device container Apple provides for an app and its own extension (an "App Group"), not over the internet.

If you delete the extension or use Settings' "Master reset," this data is erased from that device. Settings already synced through iCloud stay in your own iCloud account until you remove them there (in your device's Settings, under your name, then iCloud, then Manage Storage). We have no copy of any of it, because we never had one to begin with.

Cross-device sync (Safari)

On Safari (iPhone, iPad, and Mac), Not Yet syncs your settings and blocklists across your own devices through Apple's iCloud, using Apple's own CloudKit framework — the same underlying mechanism Apple's own apps like Notes and Reminders use to sync your own data across your own devices. This is the one exception to "no network requests of its own" described above, so it deserves its own precise explanation rather than a footnote:

• It moves only between devices signed into your own Apple ID, through your own private iCloud account. We never see this data, have no server of our own involved anywhere in the process, and have no way to access your iCloud account or what it stores.
• What syncs is the same list above marked as syncing: your settings and blocklists (including time limits), and your Guard Mode PIN's hash (never the PIN itself). Your counters, activity history, time used on timed sites, and photos do not sync — each device keeps its own.
• Chrome has no access to iCloud at all, so none of this applies there. Chrome's storage stays exactly as local as everything else in this policy describes.
• iCloud syncing for any app, including this one, can be turned off at any time in your device's own Settings app, under your name, then iCloud — this is a background convenience Not Yet uses, not a separate account or sign-in you have to set up inside the app itself.

The savings total

Not Yet's "actually saved" total is not a guess or an estimate pulled from your spending. It only ever changes when you add to it yourself, by typing an amount on the "Are you sure you want to buy this?" screen and choosing "Take me to my Quiet Place" instead of completing the purchase. You can review or remove any entry in Settings, under "Your stats."

If you turn on the experimental "Track completed purchases too" setting, landing on an order-confirmation page can add the order's total to a separate "spent anyway" number, using the same on-device pattern matching described below. It's shown next to your savings, never subtracted from them, and nothing about the purchase is sent anywhere to make that calculation.

Both numbers live in the same local, on-device storage as everything else here, and are never sent anywhere.

About the browser permission

When you turn Not Yet's extension on, your browser shows a standard warning that the extension can "read and alter the pages you visit" and similar language, including a mention of passwords and payment information. This is the browser's own standard wording for any extension with this level of access — every extension capable of acting on a page you visit shows this same warning, regardless of what that extension actually does with it. It is not language we chose, and it does not describe what Not Yet actually does.

In practice, Not Yet's content script only ever:

• Checks the current page's web address (URL) and nearby button text against a built-in list of patterns, to recognize a checkout, payment, or (if you turn on the experimental setting above) order-confirmation page.
• Checks whether a card-payment form is showing on the page, by the standard labels those fields carry, never by what's typed into them.
• Optionally reads a nearby dollar amount on the page, only when you are on the confirmation screen described above, so it can suggest a number instead of asking you to type one from memory.
• On a site you've given a time limit, notes whether the page is on your screen, so only real viewing time counts toward the limit.

Not Yet never reads, stores, or transmits anything you type into a page, including passwords, card numbers, addresses, or any other form field. It has no way to see your keystrokes at all; it only ever looks at text and structure that's already rendered on the page for anyone to see, the same way a browser's built-in "Find on Page" feature does.

Buying Premium for Chrome

If you buy Premium for Chrome, you pay on the checkout page of Payhip, the store that sells it, which handles your payment details under its own privacy policy. We receive what any seller receives from Payhip, like your email address and the order, and use it only to send your key and answer your questions. Your key is checked on your own computer. Activating it sends nothing anywhere, and the key is stored with your other settings on that device.

If you use a lifetime purchase from the Not Yet app instead, the code you paste into Chrome is Apple's own signed record of that purchase. It includes the purchase date, a transaction number, and the store's country, not your name, email, or Apple ID. It's checked on your own computer the same way and stored with your settings. The Not Yet app only copies it for you, or opens an email draft in your own mail app if you ask; nothing is sent unless you send that email yourself.

No accounts, no tracking, no third parties

Not Yet has no sign-in, no user accounts, and does not set or read tracking cookies. It does not use any advertising, analytics, or crash-reporting service. Apple's own App Store purchase and diagnostic systems (if you buy the app, or if you've opted into sharing device analytics with Apple) are governed by Apple's own privacy policy, not this one; Not Yet itself has no visibility into that data either way.

If you use "Report a site that isn't working right" in Settings, your own email app opens with a message already filled in: the site's address, the kind of problem, any note you typed, your theme, and your Not Yet build number. Nothing is sent unless you send that email yourself, and you can read or edit every word of it first.

Feedback and ratings (Chrome)

On Chrome, Settings has a "Leave feedback" link, and Settings and your recap may now and then show a card asking how Not Yet is going. Picking stars sends nothing. The card offers the same two choices whatever you pick: the Chrome Web Store's review page, or a feedback email in your own mail app. When it was last shown and whether you've answered are remembered on your device so it doesn't keep asking. Nothing is sent unless you send that email or post that review yourself.

Email to us

If you email us, including through Report a site, Leave feedback, or a Payhip receipt, we receive your email address and whatever the message contains, and use it only to reply, help you, and improve Not Yet. We don't add you to a mailing list and don't share your email with anyone except as the law requires. We keep messages only as long as they're useful for that, and Payhip order records as long as tax and accounting rules require. Our email is provided by Proton, under its own privacy policy.

This website

This policy covers the Not Yet app and extensions, which send nothing anywhere. The website at notyetcb.com, including the Shotstand pages, is separate, and it keeps simple, anonymous visit counts for its own pages. For each kind of event it stores only a running total and the time it last happened, grouped by:

• the page viewed, and whether it was scrolled to the end
• the domain of an outside link that was clicked, and, for App Store discount-code links, the app and code (for example notyet/STUDENT)
• clicks on the share button and uses of the interactive demos

It uses no cookies, no advertising or third-party analytics, and no fingerprinting, stores no IP address or anything else that identifies you or links one visit to another, ignores obvious automated crawlers, and has no connection to anything in the app. The interactive demos run entirely in your browser; what you do in them isn't sent anywhere beyond a single "demo used" count. The pinboard demo on the home page remembers where you moved the notes and which border you picked in your own browser's storage, so they're still there if you come back. That's only kept on your device, and clearing your browser's site data removes it. Like any website, it's served through a hosting provider, Cloudflare, which processes connection data such as IP addresses to deliver the pages and protect the site from abuse, under its own privacy policy. Our links to the Chrome Web Store include a tag naming which page you came from, so the store's own statistics can show it; Google handles that under its own privacy policy.

Chrome Web Store user data policy

The use of information received by Not Yet for Chrome adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Not Yet's single purpose is pausing checkout, payment, and chosen pages before you continue. The page information it reads is used only on your device for that purpose, is never transferred to anyone, and is never used for advertising, credit decisions, or any other purpose.

Your rights

Because Not Yet sends us nothing, there is no app data on our side to access, correct, or delete; it's all on your device, and removing the extension or using Master reset erases it there. The website's counts are anonymous and can't be tied to you. For what we do hold, which is only email you've sent us and, if you bought Premium for Chrome, your Payhip order details, you can ask us to access, correct, delete, or stop using it, or to give you a copy, by emailing avclock@protonmail.com. We won't treat you differently for asking. Some records may be kept where the law requires it.

Legal bases (EU and UK). Where the GDPR or UK GDPR applies, we process Payhip order details to provide what you bought (performance of a contract) and to meet tax and accounting rules (legal obligation), email to answer you, and anonymous website counts to understand which pages are useful (legitimate interests). You can object at any time, and you can complain to your local data protection authority.

U.S. state privacy laws. We do not sell personal information, share it for cross-context behavioral advertising, or use it for profiling or targeted advertising, and we do not knowingly collect sensitive personal information. We honor Global Privacy Control signals, though there's nothing they need to switch off here.

Where information is processed. We operate from the United States. Payhip, Proton, and Cloudflare may process data in other countries under their own safeguards.

Children's privacy

Not Yet and this website are not directed at children under 13, and we do not knowingly collect personal information from anyone, including children. The extension collects nothing from anyone, of any age. If you believe a child has emailed us personal information, contact us and we'll delete it.

Changes to this policy

If this policy ever changes, the "Last updated" date above will change, and any material change, such as the app ever sending information anywhere, will be described here and in the app itself before it takes effect. Given that Not Yet has no server and no way to reach you directly, checking this page is the only way to stay current with any updates.