Sirius - Privacy Policy

Sirius is designed with a strict "Privacy-First" philosophy. We believe your productivity data belongs to you and should stay on your device. This extension is built to function without collecting, storing, or transmitting your personal data or browsing history to our own servers. 

• No Personal Data Collection: The extension does not collect any personally identifiable information (PII), such as names, email addresses, or general browsing history.

• Local-Only Storage: All user-generated content—including To-do lists, Notepad entries, Habit tracker logs, Pomodoro settings, and your site blocklist—is stored strictly within your browser's chrome.storage.local or chrome.storage.sync area.

• Data Portability: Because we do not store your data on our servers, your data is completely private and only accessible to you through your local Chrome profile.

To provide optional premium features, Sirius interacts with the following third-party services securely:

• Premium Verification (Stripe & Cloudflare Workers): If you choose to upgrade, premium status is verified securely via Stripe through our self-hosted Cloudflare Worker proxy (siriusos-proxy.sirius-inimitable.workers.dev). No sensitive payment data is handled or seen by the extension.

• Notion Integration (Optional): Premium users can optionally connect their Notion workspace. This uses Chrome's secure identity API to initiate an OAuth flow directly with Notion's servers (api.notion.com). The resulting access token is saved strictly on your local device.

In accordance with the Chrome Web Store "Single Purpose" and "User Data" policies, we use the following permissions only for their intended focus features:

• storage: Used to save your tasks, notes, habits, and settings locally so they persist between sessions without requiring an account.

• declarativeNetRequest: Used to support the optional Ad Blocker feature. It applies a static, privacy-preserving ruleset to filter advertising domains natively without reading your browsing traffic.

• identity: Used exclusively to support the secure, optional Notion OAuth login flow for premium users.

• Host Permissions (<all_urls> via Content Scripts): Required strictly for the Site Blocker feature to detect if a URL matches your custom local blocklist and display the focus overlay.

• Host Permissions ([api.notion.com/](https://api.notion.com/)* & siriusos-proxy.*): Required to securely handle premium verification and allow your local extension to sync tasks with your Notion databases.