A         
for a           

Nowhere. Everything is stored in chrome.storage.local on your machine. Export anytime as a JSON file.

No. NSFW.js runs entirely in your browser using bundled MobileNetV2 weights. There is no inference server.

Only if you explicitly enable the extension for incognito mode in chrome://extensions. We don't ask for that by default.

Only slowly. It takes a typed passphrase, a cooldown, then the passphrase again — and the cooldown doubles each time you disable within a week, up to a day. You can also nominate hours when the off switch doesn't exist at all, or have someone else hold the passphrase so you need them present.

Yes, but only with an admin account — that's an OS-level policy, not something an extension can do to itself. Chrome's enterprise policy can force-install CleanTab so it can't be removed or disabled from the browser at all, and lock its settings. There's a generator on the Lock it down page that writes the config file for you.

Yes, and it needs no account or server. Someone you trust types a passphrase during setup and keeps it — CleanTab stores only a one-way hash, locally. You need them present to turn protection off. No email address is stored and nothing is ever sent anywhere.

Yes — force-install it and lock the settings by policy, and it can't be removed or turned down from the browser. Two honest caveats: do it on a device you administer and with your child's knowledge, and set up DNS filtering and OS parental controls too. An extension protects one browser, not a phone or a second browser.

All data is wiped — it lived in browser storage. Export first if you want to keep your stats.

Yes, and on every other site. Text and link scoring runs on any page except an aggregated home feed, where the content was picked by a recommender rather than by you. Image detection is dwell-based everywhere — it looks at pictures you stop on, not every thumbnail that scrolls past. On YouTube, normal videos are left alone; only adult-keyword pages and searches flag.

Yes. A specific subreddit is a place you chose to go, so its titles and text are scored like any other page. Only Reddit's own aggregate feeds — the homepage, r/popular, r/all — are exempt, because the posts there are not yours.

Streaks turn intrinsic motivation into extrinsic. The moment you slip, the structure collapses and most people uninstall. The daily ring resets every morning — a bad day costs you nothing.

Use export/import to manually move your data. Local-first storage stays the default.

Only when force-installed by admin policy, and even then Google's own docs call it best-effort. Without policy: the passphrase pool is in the source, and anyone with developer tools open defeats any client-side blocker. That's true of every extension that claims otherwise. The friction is built for the version of you that isn't determined — and if you need more than that, the Lock it down page shows you how to get it.

One click gets you through, always, and that stays true no matter how hard you've locked the rest down. Detection misfires on health writing, art and news — if a misfire became unreachable content, you'd stop trusting the tool. Turning it off is a wall; getting past one wrong block is a door.