What KidShield knows, and who sees it.

KidShield has two parts: the parent dashboard on this website, and the KidShield extension installed on a child’s browser (Chrome, Edge, Firefox and others). This page explains what each one collects, why, and what happens to it.

Last updated 16 October 2026.

In short

—Only the parent account a child belongs to can see that child’s activity.
—The extension sends domains and minutes, not full web addresses or what is on the page.
—We don’t sell data, show ads, or share activity with anyone else.
—Removing a child deletes their rules and activity.

What the extension collects

The extension does nothing until a parent connects it with a 6-digit code from the dashboard. After that it records the following for the child it is connected to and sends it to our database about once a minute:

Website domains: The domain of the site open in the active tab (for example “youtube.com”), never the full address, page content, searches, messages or passwords.
Active minutes: One minute is counted for a domain when the browser window is focused and the computer has not been idle for a minute. Minutes are added up per child, per domain and per day.
Blocked attempts: How many times a blocked domain was opened, per child, per domain and per day.
Device details: The name a parent gives the computer when connecting it, the KidShield version installed, and when it last checked in.

The extension also keeps a random device token, the child’s name, the current rules and any not-yet-sent minutes in the browser’s local storage on that computer, so the rules keep working when it is offline.

What the dashboard collects

Account: Your email address, your name and your password, held by Supabase Auth. We never see your password in plain text.
Children and rules: The names you give your children, their time zones, and the sites, categories, hours and limits you set.
Payments: Premium is paid through Paystack. Your card or Mobile Money details go to Paystack, not to us. We keep the payment confirmation Paystack sends back (reference, amount, currency, plan and status) and your Paystack customer and subscription codes.

Why we use it

Only to run KidShield for you: to apply the rules you set on your child’s browser, to count screen time against the daily limit, to show you the sites your child used and tried to open, to sign you in, and to manage your Premium plan. We don’t use it for advertising or profiling, and we don’t sell it.

Who can see it

A child’s activity, rules and devices are visible only to the parent account that added the child. This is enforced in the database with row-level security, so a signed-in parent can read only rows that belong to their own children. The extension can’t read the dashboard; it can only send its own minutes and fetch its own rules, using its device token.

On the child’s computer, the extension’s popup shows the child’s name, the current status and today’s screen time.

The data is held by the services KidShield runs on: Supabase (database and sign-in), Cloudflare (hosting for this website) and Paystack (payments). They process it to provide their service to us.

How long we keep it

—Activity, rules and devices are kept until you remove the child. Removing a child deletes all of them.
—Removing a device from the dashboard disconnects it. The extension then clears what it stored on that computer the next time it checks in.
—Connection codes expire after 15 minutes and are deleted.
—Your account and everything in it are kept until you ask us to delete it. Payment records are kept, unlinked from your account, after it is deleted.

Your choices

You can see, change and delete your children, their rules and their activity from the dashboard at any time. To delete your account, or with any question about your data, write to info@coastedcode.com.

If we change this policy, we will update this page and the date at the top.