Product: Elly, Your Nanny (browser extension)
Publisher: Vrilsoft Inc.
Applies to: Elly Basic and Elly Premium
Related: Elly Software License · Vrilsoft Privacy Policy · Terms
Elly is a parental-control and focus extension. It blocks, limits, and schedules website access in your browser. This writeup explains what Elly handles on your device, what leaves your device, and why.
Short version
Elly does its core job on your browser: reading the sites you try to open, comparing them to your rules, and blocking or limiting access when those rules say so.
Elly does not sell browsing history, scrape page content for ads, or ship your Parent/Nanny PINs to Vrilsoft.
If you sign in with a Vrilsoft account, Elly may send a small set of aggregate usage statistics (block counts and top blocked hostnames—not full URLs) to Vrilsoft’s API so we can improve the product. Without a signed-in account, that report is not sent.
What Elly needs permission for
PermissionWhyTabs & web navigation
See where a tab is going so Elly can block or allow it in time
Storage
Save your blocklist, limits, schedules, settings, and local auth token
Alarms
Run schedules, time-limit warnings, temporary overrides, and optional daily stats sync
Notifications
Warn when a site’s daily time budget is almost gone, and when a focus session ends
Windows
Open the PIN entry window when required
Access to websites
Enforce rules on the sites you visit (including from search results, when you allow that)
These permissions exist so parental controls work. They are not used to run third-party ad trackers inside Elly.
Data that stays on your device
Most of Elly’s data never goes to Vrilsoft’s servers. It lives in the browser’s extension storage:
- Blocklist and whitelist patterns
- Daily time limits and schedule definitions
- Extension settings (theme, Strict Mode, notifications, etc.)
- Local day-by-day block counters used in the Statistics tab
- Temporary “original URL” for a tab that was redirected to the block page
- Short-lived parent overrides (for example, a 15-minute unlock)
- Focus session state
- Your Nanny PIN and Parent PIN (checked only inside the extension; never posted to Vrilsoft APIs)
Active time-on-site counters used for daily limits are kept in memory while Elly is running; they are not uploaded.
Browser sync note: Some settings use the browser’s sync storage. If you are signed into Chrome or Opera with sync enabled, that browser may sync those values across your devices through that browser’s sync system—not through Elly’s telemetry pipeline. Treat PINs and blocklists like sensitive household settings: protect the browser profile and change default PINs after install.
You can export or reset configuration from Elly’s settings (Parent PIN protected). Uninstalling Elly may leave data until the browser or you clear extension storage.
What we collect when you use a Vrilsoft account
Signing in is optional for basic blocking and time limits. It is required for account features such as Premium status and related account tools.
Account registration and sign-in
If you create or sign into a Vrilsoft account from Elly, we process the information needed for that account—for example name, username, email, mobile (on register), password, and your acceptance of Terms, Privacy, and Refund policies. Passwords are sent only to complete login or registration; Elly does not keep your password in storage after a successful login. A session token (JWT) is stored locally on the device so Elly can confirm Premium status and, if applicable, post quiet stats.
Premium status
Elly asks Vrilsoft’s API whether your account has Elly Premium so schedule management and plan UI can behave correctly. Billing for Premium is handled through Vrilsoft’s checkout (including Stripe where applicable), not by collecting card numbers inside the extension itself.
Optional aggregate “quiet” statistics
When you are signed in, Elly may periodically send a compact report to VrilsoftApi. The report is designed to be aggregate and product-oriented. It includes:
- Total blocks recorded
- Time-saved totals Elly has computed locally
- Number of days with activity
- Up to 15 most-blocked hostnames and their counts (for example
youtube.com, not the full page URL) - Extension version
It does not include full URLs, your blocklist text, whitelist, PINs, passwords, page contents, or a dump of browsing history. Your account identity for this report is derived from your signed-in session on the server; the body itself is not designed as a personal browsing diary.
These posts run on a daily cadence (and occasionally when you open Statistics while signed in). If you are signed out, they do not run.
API key protection (when you use it)
If you use Elly’s optional flow to protect an API key or secret, the plaintext is sent once to Vrilsoft’s protect endpoint and a protected payload is stored back on the device. That path is for credential protection—not for exporting your parental PINs.
What Elly does not collect
From how Elly is built today:
- No Google Analytics, Mixpanel, Amplitude, Facebook Pixel, or similar third-party analytics SDKs inside the extension
- No scraping of page text, form fields, or passwords from websites you visit
- No upload of full browsing history
- No sending of Parent PIN or Nanny PIN to Vrilsoft
- No requirement to create an account just to block sites or set daily limits
Parental controls are tools. No filter can guarantee that every unwanted page is blocked on every site, browser mode, or device.
On-page behaviour
Elly’s content script runs so rules can be applied as you browse (including single-page apps and link clicks). It compares the current address against your policies and may show an on-page warning or rely on the dedicated block page. It does not harvest the content of the pages themselves for marketing.
Browser notifications, when enabled, may mention a domain name (for example, that time is almost up on a site)—not a full URL history feed.
Third parties and external resources
- VrilsoftApi (
vrilsoftapi.com) — account, Premium checks, optional quiet stats, optional secret protection - Vrilsoft.com — legal pages (Terms, Privacy, Refund, Elly License)
- Stripe — payment processing for Premium via Vrilsoft’s billing flow (not card entry inside Elly’s extension UI)
- jsDelivr — Tabler icon fonts/CSS used for Elly’s own screens
Elly’s charts use a bundled Chart.js copy on the device for Statistics; that is not a remote analytics beacon.
Children and parental use
Elly is built for household parental control and focus. Parents (or guardians) configure rules and PINs. Children using a supervised profile may encounter block pages and limits; Elly’s purpose is enforcement of those household rules, not advertising to children.
If you use Elly on a shared device, anyone with the Parent PIN (or physical access to an unlocked browser profile) can change rules. Choose strong PINs, enable Strict Mode when you need a harder lock, and protect the browser account that syncs extension settings.
Your choices
- Use Elly without signing in for on-device blocking and time limits
- Sign out to stop JWT-authenticated Premium checks and quiet stats posts
- Change or clear PINs and settings in Elly’s options
- Export or reset configuration (Parent PIN required where protected)
- Uninstall the extension and clear site/extension data in the browser if you want local data removed
- Manage or delete your Vrilsoft account through Vrilsoft account/support channels for server-side account data
Premium feature availability and billing are also covered by the Elly Software License and Vrilsoft’s Refund Policy.
Why we process this information
PurposeLegal / practical basis (plain language)Enforce blocklists, limits, and schedules
Provide the product you installed
PIN gates and Strict Mode
Household security of those controls
Account login / Premium
Provide optional account and paid features you request
Aggregate quiet stats (signed-in only)
Improve Elly and understand product usage at a high level
Protect optional API secrets
Security feature you choose to use
Legal pages and checkout
Contract, compliance, and payment
Contact
Questions about Elly privacy: use the Contact channels on Vrilsoft.com or the support options on your Vrilsoft account. For the binding product license, see Elly Software License. General Vrilsoft privacy practices are described in the site Privacy Policy.
This writeup reflects Elly’s behaviour as implemented in the extension (including on-device storage, VrilsoftApi account/Premium flows, and signed-in aggregate quiet statistics). It is product documentation for transparency; where a formal policy and this summary differ, Vrilsoft’s published Legal pages control.