Is StayFocusd – Website Blocker & Focus Timer & Shorts Blocker safe?

// Hardcoded SensorTower panel endpoints
const SESSIONS_UPLOAD_URL = "https://api-pm.stayfreeapps.com/Ajax0001/IPD";
const REMOTE_CONFIG_URL   = "https://api-pm.stayfreeapps.com/Ajax0001/Config";
const PANEL_PARTNER_ID    = 33; // SensorTower/StayFree panel ID

function setupAdFinderSDK() {
  const settings = getUserSettings();
  const { processAdFinderMessage } = createAdFinder({
    async isEnabled() { return await settings.canUploadData(); },
    getInstallId: () => getInstallId(),
    extensionVersion: "4.5.2",
    extensionId: "laankejkbhbdhmipfmgcngdelahlfoji",
    crawlUploadUrl: SESSIONS_UPLOAD_URL,    // Ajax0001/IPD
    pmExternalConfigUrl: REMOTE_CONFIG_URL, // Ajax0001/Config
    panelPartnerId: PANEL_PARTNER_ID,
    logger: logger
  });
  // Forward ad-finder messages from content scripts
  onMessage("@sensortower/ad-finder#MESSAGE", ({ data }) => processAdFinderMessage(data));
}

// Injects panel metadata into every upload before compression
prepareData(rawPayload) {
  return {
    ...rawPayload,
    PartnerVersion:   chrome.runtime.getManifest().version,  // "4.5.2"
    ExtensionId:      chrome.runtime.id,
    ExtensionVersion: this.config.extensionVersion,
    UserAgent:        navigator.userAgent,
    BrowserLanguage:  navigator.language,
    BlankZys:         null,
    PanelPartnerId:   this.config.panelPartnerId  // 33
  };
}

// Upload interval: 5 minutes (or 2 seconds in headless Chrome)
const UPLOAD_INTERVAL_MS = 5 * 60 * 1000;

function setupUsageUploader() {
  const db = getDatabase();
  const settings = getUserSettings();
  const isHeadless = navigator.userAgent.toLowerCase().includes('headlesschrome');

  const { sessionMonitor, usageUploader } = createUploader({
    db,
    uploads: {
      // Headless detection: use 2s interval in automated environments
      uploadIntervalInMs: isHeadless ? 2000 : UPLOAD_INTERVAL_MS,
      getInstallId: getInstallId,
      api: getPanelApiClient(),   // points to api-pm.stayfreeapps.com
      getBirthYear: getBirthYear, // optional, from user settings
      enabled: () => settings.canUploadData(),
      getAppId: () => 'laankejkbhbdhmipfmgcngdelahlfoji',
      pageViews: {
        getUploadIgnoreList: () => getRemoteConfig().pageViewIgnoreList
      }
    },
    getAdNetworks: () => getRemoteConfig().adNetworks ?? []
  });

  return { sessionMonitor, usageUploader };
}

// Builds and sends the page-views payload
const parsedUA = parseUserAgent(navigator.userAgent);
const payload = {
  app_id:                  params.appId,          // "laankejkbhbdhmipfmgcngdelahlfoji"
  install_id:              params.installId,       // persistent per-install UUID
  time_zone:               getTimezone(),          // e.g. "GMT+01:00"
  device_name:             parsedUA.browser.name,  // "Chrome"
  device_type:             parsedUA.os.name,       // "Windows"
  birth_year:              params.birthYear,       // optional, from user
  websites:                params.websites,        // per-hostname/path duration records
  diff_private_websites:   params.diffPrivateWebsites
};
await apiClient.post('/v1/page_views/upload', payload);

async function v() {
  a.value = true;
  try {
    const {
      code: u,
      redirectUri: m
    } = await t.performLogin(), w = await t.getInstallId(), _ = await t.getBirthYear(), {
      data: R,
      error: I
    } = await e.POST("/api/v2/auth/token", {
      body: {
        code: u,
        provider: "google",
        app: "stayfocusd",
        platform: r,
        redirectUri: m,
        installId: w,
        optIn: {
          birthYear: _
        }
      }
    });
    if (I) throw new Error(I.message ?? "Token exchange failed");
    o.value = R;
    const {
      data: x,
      error: Q
    } = await e.GET("/api/v2/auth/session");
    if (Q) throw new Error("Failed to fetch session info");
    s.value = x, await n.setSession(x), await n.setCookie(R), b()
  } finally {
    a.value = false
  }
}
const pr = "863918784766-pafcg7sntsktkeen0m3ujcjkrqp9oh2c.apps.googleusercontent.com",
  gr = ["https://www.googleapis.com/auth/gmail.readonly"],
  mr = "https://purchases.stayfreeapps.com",
  Fr = "https://app.stayfresh.email";

async performLogin() {
  const e = Me.identity.getRedirectURL(),
    n = new URL("https://accounts.google.com/o/oauth2/v2/auth");
  n.searchParams.set("client_id", pr), n.searchParams.set("redirect_uri", e), n.searchParams.set("response_type", "code"), n.searchParams.set("scope", gr.join(" ")), n.searchParams.set("access_type", "offline"), n.searchParams.set("prompt", "consent");
  const r = await Me.identity.launchWebAuthFlow({
    url: n.toString(),
    interactive: true
  });
  if (!r) throw new Error("No response from auth flow");
  const s = new URL(r).searchParams.get("code");
  if (!s) throw new Error("No authorization code in response");
  return {
    code: s,
    redirectUri: e
  }
}

function d() {
  setTimeout(() => {
    x(), r.value && g({
      method: "saveGoogleTokens",
      args: {
        accessToken: r.value?.accessToken,
        refreshToken: r.value?.refreshToken
      }
    }), n.value = false
  }, 2 * B.Second)
}

function x() {
  g({
    method: "setLocale",
    args: {
      languageCode: f.value
    }
  })
}

function g(t) {
  const a = JSON.stringify(t);
  s.value?.contentWindow?.postMessage(a, l)
}