HexBlock and HexBlock Shield don't collect, transmit, or sell any personal data. Everything runs on your own hardware or stays local to your browser, by default.
HexBlock is self-hosted software that you run on your own hardware (a Raspberry Pi or any Linux server). We don't operate any HexBlock servers ourselves and have no access to your DNS query logs, blocklists, device list, or any other data your instance stores. All of that lives entirely on your own machine.
HexBlock does not phone home, report usage statistics, or contact any HexBlock-operated infrastructure at any point.
All settings and preferences — which filter lists are active, YouTube ad-blocking and SponsorBlock options, Twitch ad-removal settings — are stored locally in your browser using Chrome's storage API. Nothing leaves your device unless you explicitly enable the optional gateway connection described below.
If you choose to connect HexBlock Shield to your own self-hosted HexBlock instance (by entering its URL in the extension's settings), the extension will:
/api/v1/blocklists/api/v1/events — only if you separately enable this optionBoth of these only ever communicate with a server you configure and control. Nothing is sent to any third party, and this feature is off by default.
SponsorBlock integration queries the public SponsorBlock API (sponsor.ajay.app) to identify sponsored segments in YouTube videos. Only a video ID is sent for this lookup — see SponsorBlock's own privacy practices for details on how they handle this data.
If this policy changes, the update will be reflected here with a new "last updated" date. Since HexBlock is open source, you can also verify these practices directly by reading the source code.
Questions about this policy: open an issue on github.com/happygream/hexblock or github.com/happygream/hexblock-shield.