Haven exists to protect households, so this policy is written the way we'd want to read one: plainly.
Domain lookups. To show a trust card, the extension sends the domain of the site you're viewing (and, on supported shopping sites, the brand or seller name on the page) to Haven's lookup service. These requests return verdicts; lookups are not tied to an account and are cached on your device.
Household activity events (optional). If you leave "Log household activity" on, the extension records events like pages blocked, warnings shown, and alternatives chosen so parents can review them. You can turn this off in settings at any time; the extension works fully without it.
Household rules and settings. Your rules, PIN (stored only as a salted hash), and preferences live in your browser's extension storage. If you enable household sync, they are also stored by Haven so your other devices can share them.
Verification checks. When you run "Check my protection," the results (protected / not protected) are reported to Haven so we can help you fix problems and, with your consent implied by running the check, count anonymized provider-interference patterns for advocacy.
We do not sell or rent your data to anyone. We do not build advertising profiles. We do not log your browsing history beyond the optional household events described above. We do not read page content beyond what's needed to identify the brand, seller, or product context on supported shopping sites. Children's activity is visible to their household's parents — never to us as identified individuals, and never to third parties.
Concierge setup payments are processed by Stripe; Haven does not see or store card numbers. Concierge contact details are used only to schedule your session. Questions or deletion requests: contact the Haven team and we will remove household data on request.