Effective 10 September 2026
Undirect collects nothing. There is no account, no analytics and no server. One button sends something, and only when it is pressed.
To catch a click being taken, the guard has to run on the pages that are open. It reads the shape of the page: the element under the pointer, where a link points, and which site a new window would go to. None of it is stored, and none of it is sent.
The rules that are set, the hosts that have been blocked, and how many attempts were stopped. These live in Safari's own extension storage. A copy is written to a container that only Undirect and its extension can read, so the app can show the same list.
The Report button opens a prefilled issue on Undirect's public repository at GitHub. It carries the address of the site and what the guard saw there. It opens in the browser and sends nothing until it is submitted by hand, and anything in it can be edited or the tab closed first. Once submitted it is public, and GitHub's privacy policy governs it.
Undirect contains no analytics, no advertising code, no crash reporting and no third-party libraries. Blocking uses Safari's own content blocking rules, so the extension never sees the traffic it stops.
Undirect collects nothing from anyone, of any age.
Any change to this page is published here with a new effective date.
Questions go to kenneth@matsuokengo.com.