Privacy Policy
PurityLab does not collect or store browsing data, build user profiles, or sell anything to anyone. Three small outbound requests can happen, all under your control: license validation, opt-in usage stats, and password-reset emails. Each is detailed below.
License validation
License validation pings Lemon Squeezy only to verify Pro keys. That request contains your license key and nothing else. Free users never trigger this request.
Anonymous usage stats (opt-in)
Off by default. If you turn on Anonymous Usage in the extension's About page, Purity stores aggregated counts of feature events — things like “Covenant Mode started,” “Pause used,” “Focus session ended.” Storage is local (chrome.storage.local) in 13-week sliding-window buckets. No URLs, no toggle settings, no personal data, no identifiers. You can turn it off any time and the buckets stop. Stats are only transmitted off-device when you explicitly consent in-product.
Password Lock reset
If you set up Password Lock with a recovery email and later request a reset, Purity sends a 6-digit code to that email. The reset flow:
- Posts the recovery email to
puritylab.io/api/send-reset-otp(no other data attached). - Delivers the code via Resend, our transactional-email provider.
- Verifies the typed code against a signed token held only in your browser's memory.
Nothing is stored server-side. The recovery email is only transmitted when you click “Send Code” in the reset dialog. If you never use Password Lock, this flow never runs.
What we never do
We don't read or log the URLs you visit. We don't see what's on your screen. We don't sell, share, or rent any data. We don't require an account to use the free tier. We don't run third-party trackers or ad SDKs anywhere on the extension or this site.
Contact
Contact: dakota@puritylab.io