EasyBrick only requests permissions that are essential for protection. Here's exactly what we need and why.
Installs a local DNS-only VPN profile. This routes DNS queries through EasyBrick's filter.
Why: This is how we block sites at the system level. No traffic is routed through our servers - only DNS lookups.
Reads aggregated app usage data from iOS Screen Time.
Why: Tracks total screen time per app. We only see app names and durations, not content.
Send push notifications for alerts, reminders, and task updates.
Why: Block alerts when you try to access a protected site, daily summaries, streak reminders.
Only used when submitting photo proof for assigned tasks.
Why: Managed users can take photos as proof of completing real-world tasks (e.g., homework, chores).
Keeps protection active and sends heartbeat data.
Why: Ensures DNS protection stays active even when the app is in the background.
Creates a local VPN to filter DNS requests on the device.
Why: Same as iOS - intercepts DNS queries to block protected domains. Traffic stays on-device.
Reads which apps are used and for how long.
Why: Required for screen time tracking. Only records app name + duration, not content.
Prevents easy uninstallation of EasyBrick.
Why: If permanent lock is enabled, this prevents bypassing by simply deleting the app.
Push notifications for protection alerts and task updates.
Why: Real-time alerts when limits are reached or tasks are assigned.
Only for task proof photo submission.
Why: Same as iOS - photo proof for completed tasks.
Installs a DNS content filter as a system extension.
Why: Provides system-wide DNS filtering that covers all browsers and apps.
Allows EasyBrick to inspect and filter DNS queries.
Why: Core protection mechanism on macOS. Only processes DNS, not HTTP content.
Reads app usage statistics.
Why: Tracks which apps you use and for how long.
Menubar and notification center alerts.
Why: Quick status updates and protection alerts.
Modifies system DNS settings to route through EasyBrick's local filter.
Why: System-level DNS filtering that works across all browsers and apps.
Runs as a Windows service to maintain protection.
Why: Ensures protection stays active even after restart, and is harder to disable without the password.
Monitors which applications are in the foreground.
Why: Screen time tracking for desktop apps.
Intercepts navigation requests to blocked domains.
Why: This is how the extension blocks sites. It checks the domain against your block list and redirects if matched.
Stores your authentication token and block rules locally.
Why: Keeps you signed in and caches block rules for fast lookups.
Browser notifications for block events.
Why: Shows a notification when a site is blocked.
Stores authentication tokens to keep you signed in.
Why: Standard web authentication. Tokens expire automatically and are refreshed securely.
Copies sharing code to clipboard when you click it.
Why: Convenience feature for sharing your code with family members.
Every permission serves a purpose. Nothing more, nothing less.
We never log which sites you visit
We never access personal content
We never request GPS data
Your data is never sold to anyone