Legal
Privacy policy
The All Block works without an account and sends nothing anywhere until you ask it to. This page says exactly what that means.
Last updated 20 August 2026
The short version
There is no analytics, no telemetry, no advertising and no tracking in The All Block. Your sessions, schedules, history and Accountability Lock password never leave your computer. The only personal data we ever hold is an email address — and only if you choose to make an account so your Pro licence follows you between machines.
The data controller is Auzeo, a sole trader in the United Kingdom. Contact: MrAuzeo@protonmail.com.
What stays on your computer
The All Block keeps its data in a folder in your user profile
(~/.allblock). That includes:
- your scheduled blocks and their settings;
- your session history and stats;
- the state of a running session, so it survives a restart;
- your Accountability Lock password, stored only as a PBKDF2-SHA256 hash with a random salt — never in plain text, and never uploaded.
We can't read any of it. Deleting that folder deletes all of it.
What we collect, and only if you opt in
| Data | When | Why |
|---|---|---|
| Email address and password | Only if you create an account | To sign you in and attach your Pro licence to you. The password is stored as a salted hash by our authentication provider; we never see it. |
| Account ID and Pro status | With an account | So the app knows whether to unlock Pro features. |
| Licence key and whether it has been paid and redeemed | If you buy Pro | To issue the licence, honour it once, and stop the same key being redeemed twice. |
That is the complete list. No name, no address, no device identifier, no usage statistics, no contents of your blocks.
Payments
Purchases are handled by Paddle.com, our reseller and Merchant of Record. You give Paddle your payment and billing details directly; they never pass through us and we never store them. Paddle is an independent data controller for that transaction — see paddle.com/legal/privacy. What comes back to us is a licence key marked paid.
Who processes data for us
- Supabase — hosts the account database and the licence table.
- Paddle — payments, tax and receipts, as above.
- GitHub — hosts this website and the download. GitHub records requests to it, including IP addresses, in its own server logs.
- Google Fonts — this website loads its typefaces from Google's CDN, which means your browser's request (and therefore your IP address) reaches Google. No cookies are set by it.
We do not sell data, share it for advertising, or pass it to anyone else except where the law requires it.
Cookies
This website sets no cookies and runs no analytics. The app sets none either. Paddle's checkout, which opens in your browser, uses its own cookies for the payment session.
Legal basis and how long we keep things
Under UK GDPR we rely on performance of a contract for account and licence data — without it we cannot give you the Pro you paid for — and on legal obligation for the transaction records Paddle keeps for tax.
Account data is kept until you delete the account. Licence records are kept while the licence is valid, so we can honour and support it. Ask us to delete your account and we remove the email address and profile; a licence key may be retained in a form that is not linked to you, so the same key cannot be redeemed again.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to it — by emailing MrAuzeo@protonmail.com. We will answer within 30 days, and will not charge you for it.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local supervisory authority in the EU.
Children
The All Block is not directed at children under 13, and accounts are not intended for them. Parents do use the app on a child's machine — that is a fine use, and it involves no account and no data leaving the computer.
International transfers
Our providers may process data outside the UK. Where that happens it is covered by the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an adequacy decision.
Changes
If this policy changes we will update the date at the top. If a change is significant and you have an account, we will email you.