Privacy information
Updated: 1 November 2026 · Test version
This notice describes the test version and is based on the notice in the app. Before public launch, the outstanding items must be completed, including retention periods, data deletion and child advertising settings.
Visiting this website
This website is hosted on Cloudflare Pages. Your browser sends an IP address and technical request data to the hosting provider to display, operate and secure the website. The website code contains no analytics or advertising tools and no registration or payment form. Support and deletion links open your email app; a message is only sent when you send it. Support emails are processed in the support mailbox to handle and respond to enquiries.
Hosting provider policy: Cloudflare Privacy Policy.
1. Scope and operator identity
1.1 In this notice, “app” or “service” means S-Block; “operator” means the operator of the S-Block service; “user” means a personal, parent or child account holder; “parent” means a parent or family administrator with appropriate legal authority; “personal data” means information about an identified or identifiable person under applicable law.
1.2 This notice describes data processing in the current service version. The service filters websites and manages family protection. Feature availability and operation depend on account type, permissions, device and connection. Read the plan-specific provisions together with this notice.
1.3 The brand is S-Block and the service domain is erthb.co.il. For support, privacy enquiries, access and correction of data, or account deletion requests, contact Contact support.
2. Account and family information
2.1 Sign-in uses Google and Supabase authentication. It processes a user identifier, email address and profile details supplied by the sign-in service under its permissions. The app stores an identifier and email address and holds access and refresh tokens. It does not ask you to enter your Google password in the app or receive it through its sign-in flow.
2.2 Family accounts store the family identifier, membership, user role, display name, invitations and their usage status, and protection rules. These identify users, link devices, enforce access permissions and sync parent selections. Names and blocking rules may reveal personal data or interests; enter only what is necessary.
3. Device information and status reports
3.1 A random app installation identifier is created. Stored or transmitted data includes installation identifiers or derivatives, device manufacturer and model, Android and app versions, profile type, protection status and reporting time. Firebase Cloud Messaging tokens support notifications and availability checks. Online connections also expose IP addresses and technical communication data to the services involved.
3.2 Protection status is a technical app report, not proof of continuous protection. Missing reports may result from no internet, background restrictions, a powered-off device or other causes; they do not prove uninstallation. Notification availability depends on the services and their settings.
4. Website filtering and DNS requests
4.1 Filtering uses an Android local VPN for supported browsers. DNS requests and domain names are processed and compared with blocklists. Blocked requests are handled locally; allowed requests are forwarded over HTTPS to Cloudflare DNS at 1.1.1.1. That service therefore receives the forwarded DNS requests and connection data such as IP addresses.
4.2 The current code does not send a complete DNS or browsing history to the S-Block server for parent viewing. This does not mean that the network provider, DNS resolver, browser or website performs no processing. The filter does not decrypt HTTPS page content or messages.
4.3 Local blocking notifications may contain a domain name. Personal blocklists, preferences, cached rules and protection pause information are stored on the device. A user request to the operator to block or allow a website is a separate flow that sends the domain and request details to the server.
5. App detection and device management
5.1 For child internet management, after approval on the activation screen, the server receives names and identifiers of launchable apps in the current Android user, with an installation identifier, device description and update time. Authorized parents in the family can view the list. It does not include app content or usage history. Hidden apps or apps in another Android user may be absent.
5.2 Internet blocking uses a local VPN and requires Android 10 or later. It does not prevent apps from opening or delete downloaded content. No factory reset or Device Owner permission is needed. An all-internet pause may block messages and internet calls; S-Block stays connected to receive management instructions.
5.3 Removing a child from the family releases family blocks after successful sync, but does not itself remove any Device Owner status in the system. Existing blocks may remain while offline. Previously granted system permissions are not requested each time the app opens.
6. Limits of parental management
6.1 Authorized parents or family administrators can manage family membership and available protection rules, view child and device details and status reports, and receive approval requests in supported flows. This does not grant access to all files, activities or content on the child device.
6.2 Anyone adding a child must be a parent, guardian or appropriately authorized person under applicable law, act in the child's interests, explain management in an age-appropriate way, and avoid covert or harmful use. An invitation code links an account to a family; it does not itself legally prove guardianship. Do not use the service to monitor someone without proper authority.
7. Requests, support and email
7.1 Website blocking or access requests may include account identifier, email, domain, request type, handling status and timestamps, and be accessible to the operator for handling. An approved global block may add a domain to a list distributed to other users; identity details are not included in the domain list downloaded by the app.
7.2 Support enquiries include a category, message and reply email. Resend forwards them to the Gmail support mailbox. A draft stays on the device until successfully sent or edited. Verification and service notices also pass through email providers depending on the flow. Do not send passwords, sign-in codes, medical data or unnecessary details about other people to support.
8. Advertising and third-party services
8.1 This version includes Google Mobile Ads for rewarded ads and Firebase Cloud Messaging for notifications. The ads component initializes and may load an ad when the home screen opens, before you choose to watch it; this also applies to child profiles in the version under review.
8.2 According to Google documentation, the ads component collects and shares IP addresses, interactions, diagnostic data and device or account identifiers for advertising, measurement and fraud prevention. An IP address may indicate approximate location. Provider component collection is part of the app's overall privacy behaviour even if S-Block itself does not request that data in an input field.
8.3 Main providers: Google for sign-in, messaging and ads; Supabase for authentication, database and server functions; Cloudflare for DNS; Resend for sending email; Gmail for receiving enquiries. Provider processing may occur outside Israel. Processing regions, provider agreements and international transfer arrangements require verification and completion before publication.
Google policy: https://policies.google.com/privacy Ads component information: https://developers.google.com/admob/android/privacy/play-data-disclosure Cloudflare DNS privacy: https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/
9. Permissions and data the app does not request
9.1 The app uses internet, connection status, a background service and system notifications. It requests VPN approval for filtering and notification permission when needed. Device Owner management is a separate process. Current app code does not request camera, microphone, contacts, SMS, call log or GPS permissions, or upload photos or files as part of the described protection features. This does not exclude technical data collected by the third-party components described above.
9.2 Providing data is generally the user's choice and, for children, subject to parental responsibility and law. Without sign-in details, connected services cannot be used; without family membership, family child management is unavailable; without VPN approval, filtering cannot operate; without app list sync, a current selection list cannot be shown to parents. Refusing notifications may prevent alerts. This document does not claim any general legal obligation to use the service or provide data.
10. Retention, access, correction and deletion
10.1 Final retention periods have not yet been set for all data types, and a comprehensive automatic deletion mechanism is not complete. Account records, requests, emails and provider records may remain after uninstallation. Removing a child from a family does not delete the sign-in account or all related information. Do not assume uninstalling the app deletes server or mailbox data.
10.2 Applicable law may provide rights to access personal data and correct inaccurate, incomplete, unclear or outdated information. Deletion or cessation of processing may also be requested, subject to assessment under the law, requester authority and lawful retention needs; immediate or total deletion is not guaranteed for every request. Requests for a child require assessment of authority, the child's rights and the circumstances. The dedicated contact channel, handling times and backup treatment must be completed before publication.
11. Security and service limitations
11.1 The service uses HTTPS, authentication and access permissions. Local sign-in tokens are encrypted using an Android Keystore-based mechanism. No system is completely immune to failures, misuse or intrusion. Protect your Google account and invitation and verification codes; do not share them.
11.2 Website and app blocking do not guarantee blocking every piece of content or access method. Private DNS, alternative software, Android limitations, lack of connection, another device or system changes may affect results. The service does not replace parental supervision, conversation with children or seeking help in danger.
12. Reading this notice and updates
12.1 This notice provides information and does not itself constitute consent to processing. Selecting Close or Back is not recorded as consent, parental authorization or waiver of rights. The notice does not exempt the operator from legal duties or transfer all responsibility to the parent. It does not limit mandatory legal provisions.
12.2 Material changes to data types, purposes, recipients or management capabilities require review and an updated notice and, where needed, proper information and consent before activation. Public distribution requires completion of missing details, verification of actual behaviour and legal review of both the text and the service.