Privacy

The short version

Pivot has no account requirement, behavioral analytics, or advertising. The browser extension and Pivot website use separate storage that stays in the browser profile where it was created.

Browser extension data

The extension stores its enabled state, category preferences, custom site rules, and optional journal in WebExtension storage in your browser profile. A journal entry can include a normalized hostname, grounding path, decision, rationale, reflection, and timestamp. You can turn off hostname retention.

Pivot never durably stores page content, URL paths, queries, fragments, or complete destination URLs. The full destination exists only long enough in extension memory to complete the choice you make.

Local interception and filters

Navigation interception and filter matching happen inside the extension without a Pivot network request. Built-in adult-site and adult-generative-AI collections are packaged as shortened SHA-256 fingerprints instead of readable hostname lists.

Those fingerprints provide practical obfuscation, not encryption. Someone who already has candidate domain names can hash and compare them. Custom sites remain readable so you can review and edit your own list.

Pivot website data

The Pivot website has a separate local vault in IndexedDB for its settings and completed interruption events. It is not synchronized with the extension journal or uploaded to a Pivot account. Website storage created during private browsing may be temporary and should not be relied on for durable history.

Optional journal encryption

You can protect a Pivot journal with passphrase-based AES-GCM encryption. Pivot cannot recover a forgotten passphrase. An encrypted export contains the information needed to unlock it with the passphrase; an unencrypted export contains readable journal entries and should be handled accordingly.

Your controls

• You can delete your local extension journal and export or import extension settings. Journal import and export are available in the separate Pivot website vault; the initial extension release does not offer them.
• Delete the local journal with an explicit confirmation.
• Clear the website vault through your browser's site-data controls.
• Remove extension data by uninstalling Pivot or clearing its storage.

Hosting and network records

Visiting these public documentation pages makes an ordinary web request. The portfolio host, content-delivery provider, internet provider, browser, DNS provider, or an external site you choose to open may keep ordinary infrastructure logs under their own policies. Pivot does not add analytics, advertising pixels, session replay, fingerprinting, or support widgets to these pages.