Hambit : Privacy Policy
Last updated: 2026-05-08

Hambit replaces visits to your chosen "blocked" sites with a
quick learning question. This page explains what data Hambit
handles, where it goes, and how to delete it.

WHAT HAMBIT STORES ONLY ON YOUR DEVICE (NEVER TRANSMITTED)

• The list of sites you've chosen to block.
• Your spaced-repetition review history (which questions you saw,
  when, and how you answered).
• Custom question packs you've created or imported.
• Your preferences (re-appear interval, selected packs, etc.).

These are kept in your browser's local extension storage.
Uninstalling the extension or clearing browser storage erases them.

WHAT HAMBIT TRANSMITS (ONLY WHEN YOU SIGN IN)

You can use Hambit fully without creating an account. Signing in
is only needed to sync your Pro subscription across browsers and
devices. If you sign in, the extension transmits:

• Your email address — to our authentication provider, Supabase
  (https://supabase.com).
• An authentication token issued by Supabase — kept in extension
  storage to keep you signed in.
• Your Pro subscription status (free or pro) — checked against
  Supabase.

If you choose "Sign in with Apple" or "Sign in with Google,"
your browser briefly contacts appleid.apple.com or
accounts.google.com to complete the OAuth flow. Hambit does not
see your Apple/Google password.

Subscription status originates from RevenueCat (our subscription
processor) and is forwarded to Supabase. The extension never
talks to RevenueCat directly.

WHAT HAMBIT DOES NOT COLLECT OR TRANSMIT

• Your browsing history. The list of sites you visit never
  leaves your browser.
• The contents of pages you visit.
• Search queries, keystrokes, mouse movement, or analytics.
• Your IP address or device identifiers, beyond what your
  browser inherently sends to our auth server during sign-in.

There is no analytics or telemetry of any kind.

LEGAL BASIS (GDPR)

Account data is processed under Art. 6(1)(b) GDPR — performance
of the contract you enter into when you create an account to
access Pro features.

HOW TO DELETE YOUR DATA

• Uninstall the extension — instantly removes all local data.
• Delete your account — email louis.viard@edu.escp.eu and we
  will erase your email and authentication record from Supabase.
  We respond within 30 days.

You may also exercise your other GDPR rights (access,
rectification, portability, objection) via the same email.

CONTACT

louis@hambit@app
Hambit, https://hambit.app