SwearGuard for Windows: privacy policy
Last updated: 6 October 2026
SwearGuard is a parental-control app for Windows, with an optional phone app for parents, SwearGuard Parent. It is coming soon and is not on sale yet. A parent installs it on a PC their child uses. This policy explains what it does with information.
In short:
- Listening stays on the PC.
- What goes to the parent's phone is end-to-end encrypted, so our server can't read it.
- Website names are checked with Cloudflare's family filter, the way any web address is looked up.
- Purchase and activation details will be published before the Windows app launches.
What SwearGuard looks at, and where it goes
| What | Why | Stored? | Leaves the PC? |
|---|---|---|---|
| Microphone sound | To notice swear words and shouting | No. Sound is analysed as it comes in and discarded. | No |
| The words spoken in a sentence that contained a swear word | So the parent can see what was said in the activity log | Yes, in the activity log on the PC | No |
| The address of the browser tab in front | To apply the parent's YouTube and Shorts rules | No. Only minutes of YouTube and Shorts used today are kept. | No |
The name of each new website in the browser (for example example.com, never the full address) | To close adult websites (on by default, can be switched off) | Answers are remembered in memory for an hour | Yes: the name is looked up with Cloudflare's family DNS (family.cloudflare-dns.com), like any DNS lookup |
| Adult websites the child tried | So the parent knows | Yes, in the activity log | Only end-to-end encrypted to the parent's phone, if one is connected |
| Settings, parent PIN (as a salted hash), strikes and activity log | So SwearGuard works and the parent can review what happened | Yes. Protected settings, PIN and counters are in %ProgramData%\SwearGuardPrivate on an installed PC; the ordinary activity log is in %ProgramData%\SwearGuard | The PIN never. Status, activity (swear words masked) and some settings are sent end-to-end encrypted to paired phones |
| Screen-time and app-use totals (including app names), YouTube and Shorts minutes | To enforce the parent's time limits and show use | Yes, in usage files on the PC | Totals and app names are included in the encrypted status sent to paired phones |
| Phone-pairing key and access token | To connect the PC to the parent's phones | Yes, in protected state on an installed PC | The key is shared with a phone in the pairing QR code, not sent to the relay; the relay receives the PC's access token and stores its hash |
SwearGuard has no user accounts, app analytics, advertising or tracking. It never uploads audio, pictures or browsing history. Its local activity log can include a swear-word sentence and the name of an adult site the child tried to open.
The SwearGuard Parent phone app (optional)
When a parent connects a phone, the PC sends it:
- the PC's status (locked, paused, strikes, screen time, YouTube and Shorts minutes), plus the names and use of apps found on the PC;
- activity (for example "Swearing: s***", "PC locked", "Asks for more time");
- the rules the parent may change from the phone.
The swear word is masked and the sentence around it is not sent.
All of this is encrypted on the PC with a key shared only by that PC and the paired phones. The key is inside the QR code the parent scans, and it is not sent to our server. Our server (a Cloudflare Worker) cannot read message content. It can see connection and event times, whether the PC is online, and which events request a push notification. It keeps:
| What | Why | How long |
|---|---|---|
| Encrypted latest status and the last 200 encrypted events | So the phone can catch up when it opens | Status remains until replaced or successfully deleted. Older events are replaced by newer ones |
| Encrypted names of the PC and phones; hashes of their access tokens | To show paired devices and check access | Until the phone is successfully removed or all phones are successfully disconnected |
| A phone's push-service address | To make the phone buzz | Until that phone is successfully removed, all phones are successfully disconnected, or the push service reports the address invalid |
| Event and pairing times, push flags, and whether and when the PC went offline | To show activity and connection state and send alerts | Event times roll off with the oldest of the last 200 events. Pairing and offline times remain until the relevant entry is removed or the family data is successfully deleted |
Push notifications carry no content. They only wake the app, which then fetches and decrypts the news itself. Standard web requests to the parent app also pass through Cloudflare, which receives connection details such as network addresses and request times.
The parent app keeps each pairing's encryption key and access token in the phone's IndexedDB storage. It also caches the latest decrypted status and up to 60 activity events in the phone's local storage, so they remain visible when it is offline. Removing a PC from the phone removes that local pairing and cache and tries to delete the phone's entry on the relay.
When the relay confirms a Disconnect all phones request from the PC, it deletes the family's data on the relay. If that request fails, if a phone is removed while offline, or if SwearGuard is uninstalled without a successful disconnect, server data can remain. There is currently no automatic expiry for an inactive family's stored data. Disconnect all phones while the PC is online before uninstalling.
Safe internet (optional)
When a parent turns on safe internet, SwearGuard changes Windows' own settings on the PC:
- the DNS servers, to Cloudflare for Families;
- the hosts file, for SafeSearch;
- the browser policies.
From then on, the PC's web addresses are looked up with Cloudflare's family DNS instead of the internet provider's. Cloudflare's privacy policy for its public DNS applies.
Turning safe internet off, or uninstalling SwearGuard, puts the previous settings back.
Children
SwearGuard is used by parents to supervise their own children. Nothing about the child leaves the PC except:
- website names looked up with Cloudflare's family filter;
- the end-to-end encrypted updates for the parent's own phones.
We can't read those encrypted updates.
Your control
- The parent can switch features off in settings.
- The activity log can be read and deleted from the data folder (Settings → General → Open).
- Uninstalling SwearGuard deletes its local data folder, including the activity log, and turns safe internet off. It does not itself clear the relay's data.
- Parents can request Disconnect all phones from Settings → Parent app. A successful relay response deletes the family's server data. An offline PC cannot complete that deletion.
Purchases
The SwearGuard Windows app is coming soon and is not on sale yet. Purchase and activation details will be published before launch. SwearGuard DNS subscriptions are separate. Payments are processed securely by our payment provider. See the DNS privacy policy and terms.
Contact
Questions or privacy requests: email support@swearguard.com.
SwearGuard DNS, our separate family DNS service, has its own privacy policy.