Skip to content

Protection — Block websites and content

The Protection screen is where you define what your child can and cannot see on the internet. You can block specific websites, enable entire content categories like social media or gaming, set an automatic night schedule, and recover rules you accidentally deleted.

Before creating or changing any rule, make sure you are applying changes to the correct device. At the top of the Protection screen you will see the scope selector, which lets you choose who the rule applies to:

  • All devices: The rule applies to every device you have linked. Useful for general blocks you want across the whole family.
  • Group: You can create family groups (for example, “Young children” or “Teenagers”) and apply rules only to that group. Groups are managed in Devices → Groups.
  • Specific device: The rule only applies to one specific device. This is the most precise option and the recommended choice when each child has different needs.

Tip: Start by applying rules to a specific device. Once you verify everything works as expected, you can expand to a group or all devices if the rule makes sense for the whole family.

In the Protection screen you will find the rule inspector. It is a tool where you can enter any domain and see exactly what rule would apply if your child tried to access it — whether it would be blocked or allowed, and why (a direct rule, a category, the whitelist, a schedule…).

Use it when you are not sure whether a specific website will be blocked or not. It is the fastest way to verify your configuration without testing on the child’s PC.

The Rule health button opens a summary of the current configuration: how many rules are active, whether there are conflicts between rules, whether any category has domains that overlap with the allowed list, and so on. If something seems not to work correctly, this is the first place to look.


The Domains tab is where you block or allow specific websites. If you want your child not to be able to access TikTok, Instagram, or any other specific site, this is where you configure it.

  1. Make sure the scope selector points to the correct device or group.
  2. In the Domains tab, type the domain you want to block in the text field. Type only the domain, without https:// in front: for example, tiktok.com or instagram.com.
  3. Select “Block” as the action.
  4. Optionally, add a comment to remind yourself why you added this rule (only you see it).
  5. If the block is temporary, you can set an expiry date — past that date, the rule deactivates automatically. Very useful for weekend restrictions or exam period blocks.
  6. Click save. The rule is sent to the device’s agent within seconds.

When you block tiktok.com, the agent automatically blocks all its subdomains too: www.tiktok.com, m.tiktok.com, and the auxiliary domains TikTok uses to load videos or ads. You do not need to add them manually.

If you have a broad category active (for example, “Streaming”) but want to allow a specific platform within that category (like educational YouTube), add that domain as “Allowed”. The exception always takes priority over the category block.

For example:

  • You have the “Streaming” category blocked.
  • You add youtube.com as an allowed domain.
  • Result: YouTube is accessible, but Netflix, Twitch, and the rest of streaming remain blocked.

If you have a list of domains in a text file (one domain per line), you can import it directly using the import button. The system validates duplicates before adding them.


Categories are the most efficient way to protect your child from broad types of content. Instead of adding hundreds of domains manually, you enable a category and the system automatically blocks thousands of websites of the same type, keeping the list updated.

CategoryWhat it includes
Social mediaTikTok, Instagram, Snapchat, Twitter/X, Facebook, Twitch, and similar platforms
GamingOnline game websites, launchers, download platforms, and gaming communities
StreamingNetflix, HBO, Disney+, YouTube (entertainment mode), Twitch, and similar
Adult contentAdult sites and content inappropriate for minors
GamblingOnline casinos, betting sites, and gambling platforms
Proxies and VPNsTools and sites that allow bypassing browsing controls
  1. Select the correct scope (device, group, or all).
  2. In the Categories tab, you will see each category with a toggle.
  3. Enable the toggle for the category you want to block.
  4. The change applies to the child’s device within seconds.

What to do if a category blocks something it should not

Section titled “What to do if a category blocks something it should not”

Sometimes a category may include a domain your child needs for school or work. To resolve this without disabling the whole category:

  1. Identify the specific domain you need to allow.
  2. Go to the Domains tab.
  3. Add that domain as “Allowed”.
  4. The exception takes priority: that domain will be accessible even though the category is active.

The night profile disables useful browsing during a time window you define. It is perfect for preventing your child from browsing late at night or past a bedtime you have established.

  1. Select the child’s device (the night profile works per device, not globally).
  2. In the Night profile tab, enable the main toggle.
  3. Define the start time and end time of the cutoff period.
  4. Save the configuration.

From that moment on, when the system clock enters the window you defined, the agent automatically blocks browsing. When it exits that window, browsing returns to normal according to the regular rules.

Important: Verify that the time zone in Settings → Appearance is correct for your family. If the system has a different time zone from where you live, the night cutoff will activate at the wrong time.


When you delete a rule, it does not disappear immediately — it goes to the trash. This gives you the chance to recover it if you deleted it by accident.

  1. Open the Trash tab.
  2. Find the rule you want to recover.
  3. Click Restore. The rule becomes active again with the same scope and configuration it had.

If you want to permanently delete a rule, select it in the trash and click Delete permanently. This action cannot be undone.

The Empty trash button deletes all the content shown in the trash at that moment. Apply the scope filter before using it to make sure you do not accidentally delete rules from other devices.


  1. Check the scope selector: Is the rule assigned to the correct device? A rule assigned to “Device A” does not affect “Device B”.
  2. Check for an exception: If that domain or one of its parent domains is in the allowed list, the exception takes priority. Search for it in the Domains tab.
  3. Check agent status: In the Devices section, confirm the agent has recent contact. If it has not communicated in the last hour, the rules may not have been updated.
  4. Use the inspector: Run the rule inspector with that domain to see what decision the system would make.

Incognito mode browses without restrictions

Section titled “Incognito mode browses without restrictions”

If incognito is not blocking, it is usually because:

  • The agent is not correctly installed in the supervised user’s profile.
  • The browser the child uses has its own VPN active (common in Brave and Opera).
  • Firefox does not have proxy integration configured — see the Firefox section in Windows Agent.

This happens when an active category includes that domain. The solution is to add the domain explicitly in the Domains tab as “Allowed”. That exception always takes priority over the category.

If you created a rule but see no records in Activity when your child tries to access that website, check:

  • That the device selected in Activity is the same one the rule was assigned to.
  • That the device’s agent has recent contact in the Devices section.
  • That the child is using the supervised Windows user (not a different user on the same PC).