Privacy
Effective 10 September 2026
No account, no analytics, no server. The list of destinations lives in your browser, and the app reads it through a container on the same machine. Nothing leaves the device unless you press Report, which opens a prefilled issue you send yourself.
What the extension sees
To catch a click being taken, the guard runs on the sites you switch it on for. It reads the shape of the page: the element under the pointer, where a link points, and which site a new window would go to. None of it is stored or sent.
What stays on your device
The rules you set, the hosts that were blocked and how many attempts were stopped. They live in Safari's extension storage, and a copy sits in a container that only Undirect and its extension can read, so the app can show the same list. A site switched on from a private window is kept only until the last private tab closes, and never copied for the app.
Reporting a site
The “Report a site” button opens a prefilled issue on Undirect's public repository at GitHub. It carries the address of the site and what the guard saw there. Nothing is sent until you submit it yourself, and you can edit it or close the tab first. Once submitted it is public, and GitHub's privacy policy applies.
No third parties
Undirect has no analytics, no advertising code, no crash reporting and no third-party libraries. Blocking uses Safari's own content blocking rules, so the extension never sees the traffic it stops.
Children and changes
Undirect collects nothing from anyone, of any age. Any change to this page is published here with a new date.
Contact
Questions go to kenneth@matsuokengo.com.