Is Self Control -- Block sites and stay focused safe?

Medium risk

Self Control -- Block sites and stay focused is medium risk. When you change the block list or visit a blocked page, the extension sends analytics events to us.i.posthog.com, including the changed setting or matched block pattern, tied to a persistent per-installation UUID.

nhandyalv3.2.0Chrome Web Store
47Risk
Who publishes it

nhandyal - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
nhandyal

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Block-list changes and blocked-page visits are sent to PostHog.

MediumunwantedCWE-359Dynamic sandbox

When you change the block list or visit a blocked page, the extension sends analytics events to us.i.posthog.com, including the changed setting or matched block pattern, tied to a persistent per-installation UUID.

What actually happens

You did this

The user changes blocking settings or opens a page that matches a blocked pattern.

The extension did this

The extension sends PostHog analytics events for block-list changes, focus settings, and blocked-page visits, tied to a persistent per-installation UUID.

Captured request

POSThttps://us.i.posthog.com

Fields in the request

  • Blocked page URL or pattern
    https://example.com/news (illustrative)

    Shows which page or URL pattern matched the user's block list.

  • Stored blocking settings
    addBlockPattern: example.com (illustrative)

    Shows changes to block patterns, focus intervals, and related extension settings.

What it can do

Permissions this extension asks for, as declared in version 3.2.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Schedule its own background tasks

    alarms

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Store data in your browser

    storage

Updated 30 September 2026ncaaipdfhdijmfdfmeoagmogddhkfdec