Site Restrictor

About

Site Restrictor is a clean, no-nonsense focus tool. Create as many block
lists as you want, and for each one choose how strict the block should be —
a permanent "site is restricted" page, a password prompt, or a schedule
that only blocks during the hours you set. Per-rule keyword whitelists let
you keep specific paths reachable (e.g. block facebook.com generally but
keep /messages working).

Everything runs locally in your browser. No accounts, no servers, no
telemetry, no ads — your block lists never leave your machine.


✦ KEY FEATURES

• Unlimited block lists — group sites by intent (Work focus, Evening wind-
  down, Doomscroll detox, etc.) and toggle each list on/off in one click.

• Three block modes per list:
   – Permanent — shows a friendly "Site is restricted" page.
   – Password-protected — prompts for a password before allowing access.
   – Time-restricted — blocks only during the days and time ranges you
     pick (supports overnight windows like 22:00 → 06:00).

• Three match types per list — Domain (host + subdomains), URL substring,
  or full Regular Expression.

• Per-rule whitelist keywords — bypass the block when the URL contains any
  listed keyword. Great for "block X, except for the parts I actually
  need."

• Flexible password unlock — when you enter the correct password, you can
  choose how long it stays unlocked:
   – Until the browser is closed (current session).
   – Until the tab is closed.
   – For a set time (configurable minutes).

• Custom block message per list — explain to yourself why this site is
  off-limits.

• Polished UI with light + dark theme that follows your system setting.

• Built on Manifest V3, the modern, secure Chrome extension platform.


✦ PRIVACY

Site Restrictor stores everything in your browser's local extension
storage. It does not:

• …send your browsing data anywhere.
• …include trackers or analytics of any kind.
• …make outbound network requests.
• …read page contents (no content script injection).

Passwords are hashed with PBKDF2-SHA256 (150,000 iterations) using a unique
per-rule salt and the browser's built-in Web Crypto API. The plaintext
password is never stored.


✦ WHY THE REQUESTED PERMISSIONS?

• Storage — to save your block lists and unlock sessions on your machine.
• webNavigation — to detect when you navigate to a URL and decide whether
  the rule applies.
• Tabs — to redirect the current tab to the "Site is restricted" or
  password prompt page when a rule matches.
• Host access (all sites) — your block lists can match any URL, so the
  extension needs to inspect the URL on every navigation. It does not read
  page contents; only the URL is checked, on-device.


✦ TIPS

• Click the toolbar icon to see whether the current tab is being blocked
  and by which list, or to quickly start a new block list for the current
  site.
• Combine match types: keep one regex rule for catch-alls and a domain
  rule for everyday sites.
• Use whitelist keywords sparingly — they make the rule looser. If a URL
  contains the keyword, the rule does not fire.


Built for people who want their browser to help them focus, not nag them.
No accounts. No subscription. No data harvesting. Open it, set your rules,
and get on with your day.