Is Self Control -- Block sites and stay focused safe?

Medium risk

Self Control -- Block sites and stay focused is medium risk. When you change the block list or visit a blocked page, the extension sends analytics events to us.i.posthog.com, including the changed setting or matched block pattern, tied to a persistent per-installation UUID.

nhandyalv3.2.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Block-list changes and blocked-page visits are sent to PostHog.

When you change the block list or visit a blocked page, the extension sends analytics events to us.i.posthog.com, including the changed setting or matched block pattern, tied to a persistent per-installation UUID.

01EvidenceCAUSE EFFECT
What actually happens
You did this

The user changes blocking settings or opens a page that matches a blocked pattern.

The extension did this

The extension sends PostHog analytics events for block-list changes, focus settings, and blocked-page visits, tied to a persistent per-installation UUID.

02EvidenceNETWORK CAPTURE
Captured request
POSThttps://us.i.posthog.com
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
Blocked page URL or pattern
https://example.com/news (illustrative)Shows which page or URL pattern matched the user's block list.
Stored blocking settings
addBlockPattern: example.com (illustrative)Shows changes to block patterns, focus intervals, and related extension settings.
Updated 17 September 2026ncaaipdfhdijmfdfmeoagmogddhkfdec