Privacy policy

Effective 28 October 2026. Applies to the FalconShield browser extension (free and FalconShield +) and to falcon.f138.cloud.

The short version

We never see your browsing. Blocking happens entirely inside your browser. No history, page addresses, searches or page content are ever sent to us.
The extension has no accounts, no analytics and no ads, and we never sell data.
The free extension only downloads blocking updates, without sending anything about you.
FalconShield + checks your license key with our server, using only the key, a random ID for that browser, the browser type and the extension version.
FalconShield + checks sites against its scam and phishing list on your device; it downloads the list, it never sends the sites you visit.
To skip sponsor segments in YouTube videos, the extension asks SponsorBlock with only the first 4 characters of a fingerprint of the video's ID, a code that thousands of videos share.
If you buy, Dodo Payments (our merchant of record) handles the payment; we receive your email, name and order details to send and manage your key.
This website (not the extension) can use Google Analytics, only if you accept the cookie banner.

1. Who we are

FalconShield is made by FalconShield, KSA ("we", "us"), the controller of the personal data described here. Questions or requests about your data: support@f138.cloud.

2. What stays on your device

Your settings, site lists, your own blocking rules, blocked counts, Focus and Family mode settings, your Family mode PIN (stored only as a salted hash) and the FalconShield + privacy report are stored in your browser's extension storage. They are not sent to us.

Optional sync: if you turn on FalconShield + sync, your settings are encrypted on your device with a passphrase you choose and stored through your browser's own sync service (for example your Google or Microsoft account). We cannot read them, and they never pass through our server. Encrypted backup files work the same way and stay wherever you save them.

3. What the extension sends, and when

When	What is sent	Why
Every few days (daily with FalconShield +), unless you turn off "Keep blocking up to date" in Settings	A plain download request for blocking updates, naming the extension build. No key, no ID, nothing about you or your browsing.	To keep blocking current between extension updates.
When you activate a FalconShield + key, and about twice a day while it's active	The license key, a random ID created for that browser installation, the browser type (Chrome, Edge or Firefox) and the extension version.	To confirm the key is valid, enforce the limit of browsers per key, and send + filter updates.
When you open the checkout from inside the extension	The same random browser ID is added to the checkout page's address and passed to Dodo Payments with your order (as order metadata), and for up to two hours the extension asks our server whether a purchase made with that ID is ready.	So FalconShield + switches on by itself after you pay, without copying the key.
Once a day while FalconShield + is active, unless you turn off scam and phishing protection	A download request for the scam and phishing list (with the same license token as the filter updates). The list is short fingerprints of site names; addresses are checked against it on your device and are never sent.	To warn you before a known scam or phishing site opens.
When a YouTube video opens, if "Skip sponsor segments" is on (it is by default, free and +)	To SponsorBlock (sponsor.ajay.app, run by an independent project, not by us): the first 4 characters of the SHA-256 fingerprint of the video's ID, and the segment types you chose. Nothing else: no cookies, no referrer, no ID of yours. SponsorBlock answers with the segments of every video whose fingerprint starts the same way, and the extension picks the right one, so SponsorBlock can't tell which video you watch. Like any website, SponsorBlock sees your IP address, and its own privacy policy applies.	To skip sponsor reads and similar segments inside videos.
When you choose "Remove from this browser"	The key and the random browser ID.	To free that browser's slot on your key.

On Firefox, the extension asks for your permission before it sends license information for the first time. The extension never loads analytics of any kind.

4. What we store on our server

For each license: the key, your email address and name as given at checkout, the Dodo Payments customer, payment and subscription numbers, the plan and billing interval and its end date, whether it's a trial, and a history of changes to the license (created, renewed, refunded, browsers added or removed).
For each browser using a key: the random browser ID, browser type, extension version, and when it first and last checked in. Browsers not seen for 90 days stop counting towards your limit.
Server logs: our application keeps no logs of requests. Like any web server, the machine that hosts falcon.f138.cloud may keep standard access logs (IP address, time and the address requested) for a short period, normally up to 14 days, for security and to fix problems. They are not combined with license data.

We use this information only to deliver, check and support your license, and to answer you when you contact us. We don't use it for marketing unless you ask us to, and we never sell or rent it.

5. Legal bases

Contract: license, order and browser data, to provide the FalconShield + subscription you bought.
Legal obligation: keeping order records for accounting and tax.
Legitimate interests: short-lived server logs for security, and answering support requests.
Consent: Google Analytics on this website, only after you accept; you can withdraw at any time.

6. Payments

Payments are processed by Dodo Payments, the Merchant of Record for all our orders. Dodo Payments collects your payment details on its own checkout page, handles taxes, invoices, subscriptions and refunds, and shares with us your email, name, country and order details so we can issue and manage your key. We never receive your card number. Dodo Payments' privacy policy, linked from its checkout page, applies to the payment.

7. Cookies and Google Analytics (this website only)

The extension never uses cookies or analytics. This website uses Google Analytics 4 to understand how visitors find and use it (pages viewed, approximate country, device type, and whether a checkout was started or completed), only if you choose "Accept" in the cookie banner (on this site it is currently switched on for every visitor). Until then no analytics script is loaded and no analytics cookies are set.

Cookies: _ga and _ga_*, set by Google Analytics, kept for up to 2 years. Your choice itself is kept in your browser's local storage.
Google signals and ad personalisation are turned off; IP addresses are not logged or stored by Google Analytics 4.
Google processes this data as our service provider; it may be transferred to and processed in the United States under Google's safeguards (standard contractual clauses). See Google's privacy policy.
Change your mind any time with "Cookie settings" at the bottom of every page. Dodo Payments' checkout page (on its own site) sets its own cookies needed for payment and fraud prevention.

8. Service providers and recipients

Dodo Payments: merchant of record, as described above.
Our email provider: delivers your license key and replies to support emails.
Our hosting provider: runs the server at falcon.f138.cloud.
SponsorBlock: receives the 4-character video fingerprint described in section 3, only if you use sponsor skipping. It is an independent service, not our processor.
Google: website analytics, only with your consent.
Professional advisers and authorities, where the law requires it.

They process data only on our behalf and only to provide their service. Your browser's sync service (if you turn on sync) only ever receives encrypted data.

9. How long we keep it

License records are kept for as long as the license exists and afterwards as long as needed for accounting, tax and legal obligations (usually up to 6 years), and to handle refunds or disputes. You can ask us to delete your license data at any time; we'll do so unless we are required to keep it.

10. Your rights

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format, by writing to support@f138.cloud. Where we rely on consent you can withdraw it at any time. Depending on where you live (for example under the EU/UK GDPR or Saudi Arabia's Personal Data Protection Law) you can also complain to your data protection authority. We'll answer within one month.

You can stop all communication with our server at any time: turn off "Keep blocking up to date" in Settings, and remove FalconShield + from the browser (Settings → FalconShield + → Remove from this browser) or uninstall the extension.

11. Security

License tokens and filter updates are signed so they can't be forged, our server is reached only over HTTPS, and the data we hold is kept to the minimum above.

12. Children

FalconShield is not directed at children under 13, and we don't knowingly collect personal data from them. Family mode settings stay on the device.

13. Changes

If we change this policy, we'll update this page and the date at the top. If a change affects what the extension sends, we'll say so in the extension's update notes.

14. Contact

FalconShield, KSA · support@f138.cloud