Privacy
Last updated November 9, 2026

Keeptoit keeps your sessions, goals and history in your browser. To check a page, it has to send a few facts about that page to an AI model.

Keeptoit is a browser extension for Chrome, Firefox and Zen. This page covers the extension, this website with its waitlist, and signing in with Google. The section about plans applies to the paid plans.

1. Who is responsible
   Keeptoit is made by Aleksandar Gjorgiev, an individual, who decides how your data is used. Write to alekgj.dev@gmail.com about anything on this page.
2. What stays on your computer
   Your sessions and plans, the calendar, goals, Do Later, time tracking, the log of overrides, your settings and your provider key (if you use one) are stored in your browser's extension storage. They are never sent to Keeptoit.

Pictures and photos you add to your new tab page, and the small previews of layouts you save, are made smaller and kept there too. They are never sent to Keeptoit or anyone else.

Settings → Your data → Download My Data saves all of it as one file. It leaves out your provider key, Keeptoit's own sign-in details, and the pictures and photos on your new tab. Removing the extension deletes everything it stored in the browser, so download it first if you want to keep it.

Two things on Keeptoit's new tab page go from your browser straight to another website, never through Keeptoit:
- Searching: text you search for goes to your browser's default search engine. If you paste or drop an image into the search box and press Enter, your browser sends that image to Google Lens (or Bing, if it is your default search engine in Firefox or Zen) to search by it, as if you had uploaded it there yourself. Keeptoit doesn't send it anywhere else or keep it.
- Shortcut icons: when you pin a shortcut, your browser asks that website once for its icon, without your cookies, and keeps the small picture with the shortcut. The ready-made Google Docs, Drive and Photos shortcuts show icons from Google's servers.

1. What is sent when a page is checked
   Keeptoit asks you before it sends anything. In Chrome, the page checking step of the first run (and later Settings) shows what is sent and where, and nothing is sent until you press Agree. In Firefox and Zen, your browser lists the data Keeptoit sends when you install it, and the first run asks you to agree to this page before Keeptoit does anything. You can turn page checking off at any time in Settings → Page checking.

Pages are checked only during a focus block, and only when page checking is on. Sites on your always-allowed list are never checked. For each check Keeptoit sends:
- the block's theme, topics and intention, and for goal sessions the goal's name and topics;
- the page's site, address, title and description, or for a search, the search words and the titles of the results.

It travels over HTTPS, so nobody on the network can read it. It goes to Keeptoit's server, which runs on Cloudflare, and from there to TypeSafe, the company that makes Jev, the AI model that reads it to answer. Keeptoit's server and TypeSafe can both read it, because Jev has to read it to answer. The answer comes back the same way. TypeSafe's own privacy policy applies to what it receives.

The page's address, title and description and your search words are used only to decide whether the page fits your session. They are never sold, never used for advertising, never used to decide anything about you, and never read by people.

To check a page, the extension has permission to see every website you open, because a focus session has to apply to any site. It looks at a page only during a focus block and only when page checking is on. Outside a session it only locks the sites you chose. It runs no code from the internet: every script comes in the package you installed.

1. What Keeptoit's server keeps
   The server keeps none of what a check says: no addresses, titles, searches, topics or answers are logged or stored. What it does keep:
2. for each install, a random id and a secret, so the server can tell installs apart without knowing who you are;
3. for each install and day, the number of checks, the tokens used and what they cost;
4. with an account, your email address and Google account id;
5. with the waitlist, your email address and when you joined (section 7);
6. with a plan, which plan it is and its dates;
7. with a shared card, the card's numbers (your streak, the last 14 days, focus time, sessions, pages blocked and goals met), under a random link, for a year or until you delete your account (section 9).

Because all checks go out under Keeptoit's one account with TypeSafe, TypeSafe cannot tell one person's requests from another's.

1. With your own key
   If you use your own provider key (OpenRouter, TypeSafe or Vercel), checks go straight from your browser to that provider and never pass through Keeptoit's server. That provider's privacy policy applies.
2. Accounts
   An account is optional. You sign in with Google on this website. Keeptoit asks Google only for your email address and account id (the openid and email scopes), and nothing else: not your name, contacts, calendar, files or anything in your Google account. It never sees your Google password. In Firefox and Zen your browser asks for your permission before an email address is shared; in Chrome Keeptoit asks you itself, with the same words, before anything is sent.

What Keeptoit does with them:
- the account id recognises your account, so your plan and your days of full page checking follow you across your browsers;
- the email address is shown to you as the account you are signed in to, and, only if you said yes, is used to email you about discounts, tips and new features. You are asked when you sign in, and can change the answer in Settings → Account → Email me about discounts, tips and new features;
- both are kept in Keeptoit's database on Cloudflare (section 4). They are not sold, not shared with anyone else, not used for advertising, and not read by people, except where the law requires it.

Keeptoit's use of information received from Google APIs follows the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.

Keeptoit's use of information it receives from your browsing (the addresses, titles and descriptions of pages, and your search words) follows the Chrome Web Store User Data Policy, including its Limited Use requirements: it is used only to provide the page check, it is not sold, it is not used or transferred for advertising, credit decisions or any purpose unrelated to the page check, and it is not read by people.

Settings → Account → Delete Account deletes your account, its email address, its usage counts, its shared cards and the link between your usage numbers and your account. You can also stop Keeptoit's access at any time at https://myaccount.google.com/permissions. Your browser's own data stays until you remove the extension.

Each Google account gets its week of full page checking once. So that deleting an account doesn't give a second week, Keeptoit keeps a one-way code made from your Google account id, and the date that week ended. The code can't be turned back into the id or your email address.

1. This website and the waitlist
   This website uses no cookies, and its fonts come from the site itself, not from Google or another provider. Cloudflare, which hosts it, sees each request, including your IP address, as any host does. Keeptoit doesn't keep it.

Cloudflare also counts visits to this website for Keeptoit with its Web Analytics: which page was opened, the site that linked to it, the kind of browser and device, the country, and how fast the page loaded. It uses no cookies and doesn't follow you to other websites. Keeptoit sees only the totals, never who visited.

The form on the home page asks for your email address. Keeptoit keeps that address and the time you joined, and nothing else: no IP address and no browsing. It is stored in Keeptoit's database on Cloudflare and used for one thing, one email to tell you that Keeptoit has launched and to send you the waitlist discount. It is not shared, not sold and not used for anything else. After that email the list is deleted. To be taken off it sooner, write to alekgj.dev@gmail.com.

1. Usage numbers
   If you allow it, Keeptoit sends anonymous usage numbers to PostHog, in its EU region, so Aleksandar can see where people get stuck. They are sent only if you allow it: in Firefox and Zen when your browser's "technical and interaction data" permission is on, and in Chrome when Keeptoit's own switch is on, which asks you before it turns on. You can turn it off at install, or any time in Settings → Your data.

Every event comes from a fixed list: things like "setup finished" or "a session started", with the version, the browser and system, and rounded counts. They are tied to the install's random id, never to your email. They never hold an address, a site, a title, a topic, a search, a goal's name or anything you type.

1. Bug reports, feedback and sharing
   Settings → Report a Bug sends what you write, a screenshot if you add one, your email if you give it, and the extension's version, the browser's version and the operating system. It goes through a small Cloudflare service into a private GitHub repository that only Aleksandar can read. It never holds your key, your browsing or your settings.

Settings → Give feedback goes the same way, without a screenshot. If you are signed in and ask for the 3 extra days, your feedback is also sent to Keeptoit's server and from there to TypeSafe, so Jev can check that it is feedback. The server doesn't keep the text; it keeps only how many times your account tried that day. TypeSafe's own privacy policy applies to what it receives.

When you share a card, Keeptoit's server keeps the card's numbers (section 4) so the link can show a picture of them. The link holds nothing else, and its page isn't shown in search results. When you ask for extra days for a post, the post's link is sent to Keeptoit's server, which checks only that it is a link to a post. The server doesn't keep it.

1. Payments
   Plans are sold by Lemon Squeezy, a payment provider that acts as the seller (the merchant of record) and handles your card and billing details. Keeptoit never sees your card. It receives only which plan you bought, its status and dates, and a reference to the order.
2. The uninstall page
   When you remove the extension, your browser opens a page here with one optional question, what made you remove it, and an optional line of your own (at most 500 characters). It sends the extension's version, your answer and your line if you give them, and the install's random id only if usage numbers were allowed. They go to Keeptoit's server.

Your answer, and whether you wrote a line, are counted as an anonymous usage event in PostHog, in its EU region (section 8). Your line never goes to PostHog: it is kept only on Keeptoit's server, only Aleksandar reads it, and it is not shared. Please don't write personal details in it. Without the install's id the line can't be tied to you; to have it deleted sooner than section 12 says, write to alekgj.dev@gmail.com with what it said.

1. How long things are kept, and your rights
   Usage counts and your account stay until you delete your account; the one-way code in section 6 stays after that. The waitlist stays until the launch email has been sent, or until you ask to be taken off it. Shared cards are kept for a year, or until you delete your account. Lines written on the uninstall page are deleted after 180 days, or sooner when you delete your account, if the install's id was sent and that install was signed in to it. PostHog keeps usage numbers, and uninstall answers, for a year. Records of payments are kept as long as tax law requires.

If you turn usage numbers off, nothing more is sent. To have what was already sent deleted, write to alekgj.dev@gmail.com.

You can ask for a copy of what is stored about you, have it corrected or deleted, object to its use, or ask that it be moved elsewhere. Write to alekgj.dev@gmail.com. You can also complain to your local data protection authority.

1. Children
   There is no minimum age to use Keeptoit. If you are younger than the age at which your country lets you agree to the use of your data (16 in much of the EU), ask a parent or guardian before you create an account.
2. Changes and contact
   If this page changes, the date at the top changes too. Questions go to alekgj.dev@gmail.com.

The current version is always at https://keeptoit.com/privacy