Privacy Policy
Squishy is available as a Chrome extension and an iPhone app. Both are built to collect as little as possible, because we don't need your data to make the product work. This policy explains exactly what we do and do not handle on each platform.
The short version
- Everything you configure stays on your own device.
- We do not run servers that collect your browsing, app usage, focus history, schedules, or the sites and apps you block.
- The only data that ever leaves your device is (1) what's needed to process a purchase, and (2) if you turn on cross-device sync, your mascot's name, happiness, and appearance — nothing else.
- No advertising, ad trackers, or fingerprinting. (On iPhone, RevenueCat handles subscriptions and subscription analytics — never advertising.)
What's stored on your device
On Chrome
The extension uses Chrome's storage.local to keep your settings and progress on your device: your mascot's name and skin, the block groups and schedules you create (including the domains you block), your focus settings, your daily and lifetime stats, your mascot's happiness, and whether you have Premium. Uninstalling the extension deletes this.
On iPhone
The app stores the same kind of data in a private App Group container on your device: your mascot's name, skin, and happiness, your block groups and schedules, focus and recovery settings, stats, and streak. Deleting the app deletes this.
Screen Time data: Squishy uses Apple's Screen Time frameworks (Family Controls, Device Activity, and Managed Settings) to do the blocking. The specific apps you select and your usage of them are handled by iOS on your device and are represented to us only as opaque tokens — we cannot see which apps they are, and your usage is never sent to us or anyone else. Squishy only records aggregate block events (e.g. "a blocked app was opened") to update your mascot's happiness.
How blocking works
On Chrome
Squishy uses Chrome's declarativeNetRequest API to redirect blocked domains to its takeover page. Chrome itself does the matching. Squishy does not log which sites you visit. The only counters we keep are aggregate per-domain hit counts for your stats page, stored locally.
On iPhone
Apple's Screen Time enforces the shield on the apps and categories you choose. Those selections live on your device as opaque tokens; we never receive the identity of the apps you block.
Cross-device sync (optional)
If you connect your iPhone and Chrome using a pairing code, we store only your mascot's name, happiness, skin, and avatar on our server (hosted on Cloudflare), keyed by an anonymous pairing code — so the same Squishy appears on both. There is no account, no email, and no password. We do not sync or store your block lists, schedules, stats, browsing, or app-usage data. You can disconnect at any time, which stops the sync.
Purchases
On Chrome (Lemon Squeezy)
Premium for Chrome is processed by Lemon Squeezy, which collects the information needed to process payment, handle tax, issue receipts, provide your license key, and support refunds. Their privacy practices are at lemonsqueezy.com/privacy. The extension stores only the license or activation details needed to confirm Premium — it never sends your block lists, schedules, focus history, mascot state, or browsing with a validation request.
On iPhone (Apple)
Premium for iPhone is an auto-renewing subscription, processed entirely by Apple — we never receive your payment details. To manage subscriptions and confirm your access, we use RevenueCat, which receives your App Store purchase events and an anonymous, app-assigned identifier (not your name or email) and provides us subscription analytics such as trials and renewals. RevenueCat does not use this data for advertising or tracking; their privacy practices are at revenuecat.com/privacy. Manage or cancel your subscription in your Apple ID settings.
Notifications (iPhone)
With your permission, Squishy sends local notifications — for example, when a recovery session completes or before a free trial ends. These are generated on your device. You can turn them off in iOS Settings.
Cookies and tracking
Neither the extension nor the app uses advertising IDs, ad trackers, fingerprinting, or session replay. The iPhone app uses RevenueCat for subscription management and subscription analytics (purchase events and an anonymous app-assigned ID) — not for advertising. This website (squishyapp.com) loads Google Fonts for typography; Google may receive your IP address when the font files load, per their standard CDN behavior. We run no analytics or tracking on this site.
Sharing your data
We do not sell your data or share it with advertisers or trackers. The only third parties that handle data on our behalf are Lemon Squeezy (Chrome purchases), Apple (iPhone subscriptions), RevenueCat (iPhone subscription management and analytics), and Cloudflare (optional mascot sync, as described above) — each only for the purpose stated.
Your control
- Delete all local data by uninstalling the extension or deleting the app.
- Disconnect cross-device sync at any time to stop storing your mascot online.
- Manage or cancel an iPhone subscription in your Apple ID settings.
- Deactivate Chrome Premium from the Account section, which removes locally stored activation details.
Children
Squishy is not directed at children under 13. If you are under 13, please do not use it.
Changes to this policy
If we update this policy, we will revise the date at the top. Material changes will be noted on the Squishy website. Continued use after a change means you accept the updated policy.
Contact
Questions about privacy can go to hello@blankslateapps.com.