Privacy Policy

Last updated: March 22, 2026

What data Bastion collects

Bastion tracks browsing activity only for sites you explicitly configure. For those sites, it records:

  • Time spent on the site (via a 1-minute heartbeat)
  • Number of visits to the site
  • Bypass usage (if you configure a bypass policy)

Bastion also stores your configuration: which sites you have set up, which controls are active, and their settings.

Where data is stored

All data is stored locally on your device using Chrome's chrome.storage.local API. No data is transmitted to any server, third party, or external service. There are no accounts, no analytics, and no telemetry.

Data sharing

Bastion does not sell, transfer, or share any user data with third parties for any purpose. Your browsing data never leaves your browser.

Data deletion

Uninstalling the extension removes all stored data. You can also clear tracking data at any time by removing site configurations in the Settings page.

Contact

If you have questions about this privacy policy, open an issue on GitHub.