Privacy Policy

Parental Control ("we," "us," or "our") operates the website at parental-ctrl.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

For privacy-related questions or requests, contact us at privacy@parental-ctrl.com.

Account information

When you register, we collect your name, email address, and authentication method. If you sign in with Google, we also receive your Google account ID from Google's OAuth service.

Children's profile information

You may create profiles for your children that include a name and profile settings. This information is provided by you as the parent or guardian.

Activity and monitoring data

Depending on how the Service is deployed on your children's devices, we may collect websites visited, search queries, screen time durations, and blocked content logs.

Usage data

We collect information about how you interact with the dashboard, including which features you use and settings you configure.

Technical data

We automatically collect your IP address, browser type, operating system, device type, and access timestamps when you use the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate you and keep your session secure
• Store and display the monitoring data you configure
• Respond to your support requests and communications
• Detect and prevent fraud, abuse, and security incidents
• Improve, develop, and personalize the Service
• Comply with legal obligations

We do not use your data for advertising or sell it to data brokers.

Our Service is directed at parents and guardians aged 18 and older. Children do not create accounts. Their interaction with the Service is limited to one scenario: when a page is blocked on their device, a child may submit an unblock request to their parent or guardian through the blocked-page interface.

As a parental monitoring tool, our Service collects activity data from devices used by children — including websites visited, search queries, and screen time — at the explicit direction of and with the consent of the parent or guardian who configured the monitoring. The parent or guardian is the account holder and the data controller for their children's information.

Parents and guardians provide profile information about their children (such as a name) directly. The only information we collect from children themselves is the content of unblock requests they choose to submit. Unblock requests are stored and made visible solely to the parent or guardian who manages that child's profile.

Parents may delete an individual child's profile and all associated data at any time directly from the dashboard. To remove all children's data at once, parents may delete their Parental Control account via Account Settings — all associated data is permanently removed upon account deletion.

If you have questions or concerns about how children's data is handled, contact us at privacy@parental-ctrl.com.

This policy is intended to comply with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

We use two categories of first-party cookies. We do not use advertising, analytics, tracking, or third-party cookies.

Strictly necessary

Session and backend authentication cookies keep you signed in and securely identify you to our server. These are essential for the Service to function, are set only when you sign in, and do not require consent under applicable law.

Preference (functional)

A cookie that remembers which child profile is selected, so it stays selected after you reload the page. This cookie is not required for the Service to work — without it, the Service simply defaults to your first child profile — and is only set with your consent, which you give or decline via the cookie banner shown on your first visit.

You can change your choice at any time: Manage cookie preferences. You may also disable cookies entirely in your browser settings, which will prevent you from signing in.

We do not sell your personal data.

We may share information with:

• Infrastructure and hosting providers — who process data on our behalf under confidentiality agreements
• Google LLC — when you use Google Sign-In, your authentication is handled by Google subject to Google's Privacy Policy
• Law enforcement or regulators — when required by law, court order, or to protect the rights and safety of our users or the public

We do not share personal data with advertisers, data brokers, or unaffiliated third parties for marketing purposes.

We retain your account data for as long as your account remains active. When you delete your account, all associated data — including children's profiles, activity logs, block rules, and schedules — is permanently and irreversibly deleted from our systems.

We may retain certain technical logs for a limited period for security and fraud prevention purposes, after which they are deleted.

We implement commercially reasonable technical and organizational security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Authentication tokens stored as httpOnly, Secure cookies not accessible to client-side scripts
• Hashed password storage using bcrypt
• Restricted database access

No security measure is 100% effective. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

California Residents — CCPA / CPRA

If you are a California resident, you have the following rights:

• Right to Know — request disclosure of the categories and specific pieces of personal data we have collected about you
• Right to Delete — request deletion of your personal data (you can also do this directly via Account Settings → Delete account)
• Right to Correct — request correction of inaccurate personal data
• Right to Opt-Out of Sale — we do not sell personal data, so this right does not apply
• Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA rights

To exercise your CCPA rights, email privacy@parental-ctrl.com. We will respond within 45 days.

EU / EEA / UK Residents — GDPR / UK GDPR

Our legal basis for processing your personal data is the performance of our contract with you (providing the Service). You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Port your data to another service
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests

To exercise these rights, email privacy@parental-ctrl.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page and update the "Last updated" date. Your continued use of the Service after the effective date of a revised policy constitutes your acceptance of the changes.

For privacy questions, requests to exercise your rights, or COPPA-related inquiries: