Is StayFocusd – Website Blocker & Focus Timer & Shorts Blocker safe?

// Hardcoded SensorTower panel endpointsconst SESSIONS_UPLOAD_URL = "https://api-pm.stayfreeapps.com/Ajax0001/IPD";const REMOTE_CONFIG_URL   = "https://api-pm.stayfreeapps.com/Ajax0001/Config";const PANEL_PARTNER_ID    = 33; // SensorTower/StayFree panel IDfunction setupAdFinderSDK() {  const settings = getUserSettings();  const { processAdFinderMessage } = createAdFinder({    async isEnabled() { return await settings.canUploadData(); },    getInstallId: () => getInstallId(),    extensionVersion: "4.5.2",    extensionId: "laankejkbhbdhmipfmgcngdelahlfoji",    crawlUploadUrl: SESSIONS_UPLOAD_URL,    // Ajax0001/IPD    pmExternalConfigUrl: REMOTE_CONFIG_URL, // Ajax0001/Config    panelPartnerId: PANEL_PARTNER_ID,    logger: logger  });  // Forward ad-finder messages from content scripts  onMessage("@sensortower/ad-finder#MESSAGE", ({ data }) => processAdFinderMessage(data));}

// Injects panel metadata into every upload before compressionprepareData(rawPayload) {  return {    ...rawPayload,    PartnerVersion:   chrome.runtime.getManifest().version,  // "4.5.2"    ExtensionId:      chrome.runtime.id,    ExtensionVersion: this.config.extensionVersion,    UserAgent:        navigator.userAgent,    BrowserLanguage:  navigator.language,    BlankZys:         null,    PanelPartnerId:   this.config.panelPartnerId  // 33  };}

// Upload interval: 5 minutes (or 2 seconds in headless Chrome)const UPLOAD_INTERVAL_MS = 5 * 60 * 1000;function setupUsageUploader() {  const db = getDatabase();  const settings = getUserSettings();  const isHeadless = navigator.userAgent.toLowerCase().includes('headlesschrome');  const { sessionMonitor, usageUploader } = createUploader({    db,    uploads: {      // Headless detection: use 2s interval in automated environments      uploadIntervalInMs: isHeadless ? 2000 : UPLOAD_INTERVAL_MS,      getInstallId: getInstallId,      api: getPanelApiClient(),   // points to api-pm.stayfreeapps.com      getBirthYear: getBirthYear, // optional, from user settings      enabled: () => settings.canUploadData(),      getAppId: () => 'laankejkbhbdhmipfmgcngdelahlfoji',      pageViews: {        getUploadIgnoreList: () => getRemoteConfig().pageViewIgnoreList      }    },    getAdNetworks: () => getRemoteConfig().adNetworks ?? []  });  return { sessionMonitor, usageUploader };}

// Builds and sends the page-views payloadconst parsedUA = parseUserAgent(navigator.userAgent);const payload = {  app_id:                  params.appId,          // "laankejkbhbdhmipfmgcngdelahlfoji"  install_id:              params.installId,       // persistent per-install UUID  time_zone:               getTimezone(),          // e.g. "GMT+01:00"  device_name:             parsedUA.browser.name,  // "Chrome"  device_type:             parsedUA.os.name,       // "Windows"  birth_year:              params.birthYear,       // optional, from user  websites:                params.websites,        // per-hostname/path duration records  diff_private_websites:   params.diffPrivateWebsites};await apiClient.post('/v1/page_views/upload', payload);

async function v() {  a.value = true;  try {    const {      code: u,      redirectUri: m    } = await t.performLogin(), w = await t.getInstallId(), _ = await t.getBirthYear(), {      data: R,      error: I    } = await e.POST("/api/v2/auth/token", {      body: {        code: u,        provider: "google",        app: "stayfocusd",        platform: r,        redirectUri: m,        installId: w,        optIn: {          birthYear: _        }      }    });    if (I) throw new Error(I.message ?? "Token exchange failed");    o.value = R;    const {      data: x,      error: Q    } = await e.GET("/api/v2/auth/session");    if (Q) throw new Error("Failed to fetch session info");    s.value = x, await n.setSession(x), await n.setCookie(R), b()  } finally {    a.value = false  }}const pr = "863918784766-pafcg7sntsktkeen0m3ujcjkrqp9oh2c.apps.googleusercontent.com",  gr = ["https://www.googleapis.com/auth/gmail.readonly"],  mr = "https://purchases.stayfreeapps.com",  Fr = "https://app.stayfresh.email";

async performLogin() {  const e = Me.identity.getRedirectURL(),    n = new URL("https://accounts.google.com/o/oauth2/v2/auth");  n.searchParams.set("client_id", pr), n.searchParams.set("redirect_uri", e), n.searchParams.set("response_type", "code"), n.searchParams.set("scope", gr.join(" ")), n.searchParams.set("access_type", "offline"), n.searchParams.set("prompt", "consent");  const r = await Me.identity.launchWebAuthFlow({    url: n.toString(),    interactive: true  });  if (!r) throw new Error("No response from auth flow");  const s = new URL(r).searchParams.get("code");  if (!s) throw new Error("No authorization code in response");  return {    code: s,    redirectUri: e  }}

function d() {  setTimeout(() => {    x(), r.value && g({      method: "saveGoogleTokens",      args: {        accessToken: r.value?.accessToken,        refreshToken: r.value?.refreshToken      }    }), n.value = false  }, 2 * B.Second)}function x() {  g({    method: "setLocale",    args: {      languageCode: f.value    }  })}function g(t) {  const a = JSON.stringify(t);  s.value?.contentWindow?.postMessage(a, l)}