Sitr Family · for households
Protect the whole household.
Surveil no one — including your own kids.
Sitr Family adds what parents actually need — one household across every device, PIN-guarded settings, shared household lists — without becoming the spyware dashboard every other “parental control” app turns into.
What Family adds
The free filter protects a device. Family protects a household — while keeping the covenant that made you trust the free filter in the first place.
One household, every device.
Enroll each family member’s phones, tablets and browsers under one household. The same public blocklist everywhere, plus your family’s own additions — no per-device fiddling.
Settings a child can’t casually loosen.
On a household device, loosening or switching off the filter asks for the guardian’s PIN — and when protection is off, Sitr says so loudly instead of pretending. We won’t overclaim: the PIN is friction, not a lock. Actually preventing an uninstall is the platform’s job — Family Link or a managed device on Android, force-install policy in the browser — and Sitr is built to work with them.
Your family’s own allow & block lists.
Add sites the public list doesn’t cover, or allow ones your family needs. These lists belong to your household and sync only between your own devices.
End-to-end encrypted sync. We hold ciphertext.
Family settings sync through one endpoint carrying an E2E-encrypted blob. We cannot read it — not “we promise not to,” cannot. The keys never leave your devices.
No child surveillance. On purpose.
Sitr Family is not a spyware dashboard. There is no browsing-history report, no screenshot feed, no location tracking. We protect children without teaching them that surveillance is love.
Exhibit B — what Family does to the endpoints table
We said the free filter's table stays empty, and it does. Family adds exactly one row — and it was documented in docs/data-flow.md before a line of it shipped.
// Keys are generated on your devices and never leave them. What our server stores is ciphertext we cannot open — verifiable in the client source, like everything else.
How setup works
Three steps, once. No accounts, no emails — the household lives on your devices, not on our servers.
Subscribe, get a token
After checkout you land on a page showing your subscription token. It carries an expiry date and nothing about you — no name, no email, no payment details.
Create the household
On the guardian's device, paste the token into Sitr — the extension's settings in the browser, or the Sitr Family screen in the Android app — create the household, and set a guardian PIN. Encryption keys are generated on that device.
Pair the family's devices
Each family device installs the free extension or the free Android app and enters the household's pairing code. From then on settings sync automatically — E2E encrypted, with loosening guarded by the PIN.
Pricing, plainly
Family is how Sitr stays funded without ads, analytics or data — the subscription pays for sync infrastructure and full-time maintenance of the free, public blocklist.
Sitr
Free forever
The full filter, per device. Not a trial, not a tease — the trust engine.
- ✓On-device blocking + SafeSearch
- ✓Public, appealable blocklist
- ✓Zero endpoints, zero telemetry
Sitr Family
€6.99/month or €59/year
Per household — every device in the house, unlimited. Annual saves ~30%.
- ✓Everything in free
- ✓Guardian PIN on settings, household lists
- ✓E2E-encrypted sync — one endpoint, ciphertext only
// Fair use: one household means one family. We can't count your devices (that's the product), but honest clients cap enrollment at 20 per household — no real family hits it, and sharing your pairing code means sharing control of your family's filter. Checkout is handled by Polar as merchant of record; after payment you get a subscription token to paste into Sitr — it contains an expiry date and nothing about you.
Running a school, masjid or network instead of a household? See Sitr for Institutions.