Privacy, at a glance

What we store

A filter has to see what it filters. Here is exactly what LockedWeb keeps, what passes through without being kept, and what we never collect.

This page summarizes our Privacy Policy, effective September 30, 2026. If the two ever disagree, the Privacy Policy controls.

Read the full Privacy Policy → Terms of Service →

Never collected

Browsing history

Screenshots

Keystrokes

Messages

Location

Passwords

Card numbers

Per-person block counts

How a lookup works

YOU

Your device asks for a domain name. Just the name, like example.com. Never the full address, never the page.

LOCKEDWEB

Our resolver checks the name against your rules and answers or blocks it. Per-query logging is off, so the lookup is not written down.

INTERNET

Allowed lookups go on to Quad9 or Cloudflare with no account identity attached.

The ledger

Kept with your account

WHAT WHY WE HAVE IT HOW LONG

Email address, and a display name if you add one

To sign you in and reach you. Sign-in is a link we email you, or Google or Apple. We do not store passwords.

While your account exists

Phone number, collected at checkout

To reach you about your account and devices. Marketing texts only if you opt in; reply STOP any time.

While your account exists

A subscription reference and billing status

To run your subscription. Your card number is entered on Stripe and never touches our servers.

Billing records for as long as tax and accounting rules require

Your protection choices: the categories you enable, your settings, and your custom block and allow list

To apply your rules on every protected device. These are the only specific websites we store, and you gave them to us.

While your account exists

Removal and unblock requests, the site named if there is one, and any reason you type

To run the 72-hour removal process and keep an accurate record of changes to protection.

While your account exists

Each device: platform and OS version, the label you gave it, protection status, and a periodic “last seen” check-in

To show you which devices are protected and to notice when one goes quiet.

While your account exists

Random account and device IDs, plus a short opaque client ID

To connect your devices to your rules on our resolver without using your name.

While your account exists

Integrity events: tampering attempts, instability, crashes

To notice tampering and fix problems.

While your account exists

Your accountability contact's name and email, if you add one

To send them the alerts you asked for. They opt in with one invitation and can stop at any time.

Until you remove them or they opt out

Messages to support and what you type into the help assistant

To answer you and fix problems.

As long as needed to handle the matter

Passes through. Not kept per person.

WHAT WHAT HAPPENS TO IT HOW LONG

DNS lookups from your devices (domain names only)

Checked against your rules in real time. Per-query logging is off: no per-user record of what your device looked up, and no per-person count of what was blocked. Any statistics we keep are aggregate and de-identified.

Not retained

Short-lived operational logs (connections, errors; can include a device IP address)

Security and troubleshooting. Not a record of the sites you visit.

Ages out on a rolling basis

Your website visit is separate

lockedweb.com uses standard analytics and advertising measurement (Google Analytics, Google Ads, Meta, Reddit) and affiliate cookies (PromoteKit, Trybe). That is website data: pages viewed, sign-up and purchase events, cookie IDs, your IP address. Our emails use standard open and click tracking. None of this runs inside the filter, and we never combine it with your filtering data. We honor the Global Privacy Control signal.

We do not sell personal information, and filtering data is never shared with advertising or analytics platforms.

Cookie details: Privacy Policy, Section 5. →

What an accountability contact receives

THEY GET

✓An alert when you request removal or ask to loosen protection, including the specific site if the request names one. ✓An alert when you cancel such a request. ✓An alert when the filter on a device is tampered with or removed.

THEY NEVER GET

✕Browsing history ✕Searches ✕Screenshots ✕Any record of where you have been ✕The ability to unlock anything

Contacts opt in with a single invitation, every email they receive has a stop link, and removing a contact takes effect immediately.

What deleting your account does

To delete your account, first remove every device from it. Each device is removed by completing its 72-hour uninstall, then choosing “Remove from account.” That way, no device is left with LockedWeb installed and no account to remove it from. Deletion then permanently erases your profile, settings and requests from our live systems.

Encrypted database backups expire on our provider's schedule, up to 30 days. Stripe and our email provider keep their own records on their legally required schedules.

Ask for your data

Email privacy@lockedweb.com from your account email with the subject “Data request.” You can ask for a copy of everything above, a correction, or deletion. We verify by confirming control of your account email, never by phone or chat. We reply within the time the law allows, generally 30 to 45 days.

Email privacy@lockedweb.com Read the full Privacy Policy →