Privacy policy
Last updated: October 2026
The short version: Locked In doesn't have accounts, servers that store your data, analytics or ads. Everything it learns about you stays on your own devices.
Camera
When you turn on the camera, the video is analysed inside your browser, on your device, to estimate whether you're at your desk, where you're looking, and whether a phone is visible. Video frames are never uploaded, recorded or stored. The only things kept are numbers (for example "focused for 23 minutes") and your eye-calibration model, both in your browser's storage.
If you join a study room and leave "Share my camera" on, a small low-resolution live video is sent directly to the other people in that room (peer-to-peer). It isn't recorded by anyone, including us.
If you use your phone as a second camera, the same analysis runs on the phone. It sends your laptop only a few numbers (whether a face, a person or a phone is in view, and the angle of your head and eyes), never images.
What is stored, and where
| Data | Where |
|---|---|
| Session history, streaks, settings, your display name | Your browser's local storage (and, if you use the Mac app, a file on your Mac). Export or delete it any time. |
| Eye-calibration model | Your browser, for the current session. |
| Allowed-sites list, current session | The browser extension's local storage. |
| Apps you chose to block (iPhone) | Your iPhone. Apple's Screen Time API gives Locked In opaque tokens; it can't see which apps they are or what you do in them. |
Third-party services
- Connection service (only for phone pairing and study rooms): a signaling server introduces your laptop, your phone and your friends to each other so they can connect directly. It sees random connection IDs and network addresses, never your video, status or history, and keeps no logs. A public STUN server (Google) helps devices find a direct route. When no direct route exists, an encrypted relay (TURN) forwards the data without being able to read it.
- No content delivery networks: all code and the eye-tracking models ship with Locked In itself, so using it doesn't contact any third party except the connection service above. The Mac app may check this website once a day for a newer version (a plain request, nothing about you is sent).
- Apple Screen Time (iPhone app) enforces app blocking on your device.
The browser extension
During a session, the extension checks the address of each page you open, only to decide whether it's on your allowed list. It also notes where on the screen you click (coordinates only, never what you clicked) to fine-tune eye tracking. None of this leaves your device.
Children
Locked In doesn't collect personal information from anyone, including children under 13.
Deleting your data
Clear your browser's site data for Locked In, remove the extension, and (if installed) delete the Mac or iPhone app. Nothing remains anywhere else.
Contact
Questions? Contact the developer.