Chrome Install for Chrome
Firefox

Legal

Privacy Policy

Last updated: February 2026

Related Terms of Service

Summary

  • ✓ Your data is yours. We don't sell, rent, or share your personal data with anyone.
  • ✓ Minimal collection. We only collect what's necessary for the extension to work.
  • ✓ Local first. All your data is stored locally on your device by default.
  • ✓ Optional sync. Cloud sync is opt-in. Don't want it? Don't sign in.
  • ✓ No tracking. No analytics, no ads, no third-party trackers.
  • ✓ Delete anytime. You can delete all your data with one click.
  • ✓ AI is optional. AI Coach and Journal Insights use OpenAI, opt-in only, not stored.

1. Who We Are

Focusora is an indie productivity extension built by a solo developer. This isn't a big corporation with complex data pipelines. It's a simple tool designed to help you focus. Privacy isn't just a feature; it's a core principle.

2. What We Collect

2.1 Data Stored Locally (On Your Device)

By default, all your data stays on your device in Chrome's local storage:

  • Timer settings - Pomodoro duration, break duration, sessions count
  • Blocked sites list - Sites you choose to block
  • Focus statistics - Pomodoros completed, focus minutes, streaks
  • Achievements & XP - Your gamification progress
  • Tasks - Your task list items
  • Preferences - Theme, navigation position, notification settings
  • Deep Work data - Flow state sessions and milestones
  • Journal entries - Your personal journal notes (stored locally)

This data never leaves your device unless you explicitly sign in and enable cloud sync.

2.2 Data Collected When You Sign In (Optional)

If you choose to create an account for cloud sync, we collect:

  • Email address - For authentication and account recovery
  • Google ID - Only if you sign in with Google
  • Sync data - Your local data (listed above) synced to our servers

Signing in is completely optional. The extension works fully offline without an account.

2.3 What We DON'T Collect

  • Your browsing history
  • Specific URLs you visit
  • Keystrokes or screen content
  • IP addresses
  • Device fingerprints
  • Personal information beyond email
  • Payment or financial data

3. How We Use Your Data

Your data is used solely to:

  • Make the extension work (blocking sites, tracking focus time)
  • Sync your data across devices (if you opt in)
  • Send OTP codes for authentication (if you sign in via email)

That's it. We don't:

  • Sell your data to anyone
  • Share your data with advertisers
  • Use your data for marketing
  • Build profiles about you
  • Train AI models on your data

4. Browser Permissions Explained

The extension requests certain permissions. Here's why:

tabs

To detect when you're on a blocked site and redirect you

storage

To save your settings and focus data locally

alarms

To run the Pomodoro timer in the background

notifications

To alert you when a focus session ends

host permissions

To check if the current site is on your blocklist

identity

To enable Google Sign-In (if you choose to use it)

identity.email (OAuth scope)

To read your Google Calendar events (only if you enable Calendar integration)

5. Third-Party Services

We use minimal third-party services:

Google OAuth

If you sign in with Google, we receive your email and Google ID. We don't access your contacts or any other Google data beyond what you authorize.

Google Calendar (Optional)

If you connect Google Calendar, we access only your calendar events to display them in the extension. This data stays local. We don't store your calendar data on our servers. You can disconnect anytime from settings.

AI Features - OpenAI (Optional)

If you use AI Coach or Journal Insights, your prompts are sent to OpenAI's API for processing. We don't store AI conversations beyond the current session. Journal entries sent for insights are processed in real-time and not retained by us.

Email Service (SMTP)

If you sign in with email, we send OTP codes via SMTP. We only send authentication emails. No marketing, no newsletters.

Database (PostgreSQL)

If you enable sync, your data is stored in a PostgreSQL database. Data is encrypted in transit (TLS) and at rest.

6. Data Security

  • Encryption in transit - All API calls use HTTPS/TLS
  • Secure authentication - JWT tokens with expiration
  • Password-less - No passwords stored (OTP or Google Sign-In only)
  • Minimal exposure - Server only stores what's needed for sync

7. Your Rights

You have full control over your data:

  • Export Download all your data anytime from the extension settings.
  • Delete Delete all local data or your entire account with one click.
  • Disconnect Sign out and continue using the extension offline.
  • Opt out Never sign in. Use all features without an account.

8. Data Retention

  • Local data - Stored until you delete it or uninstall the extension
  • Cloud data - Stored until you delete your account
  • OTP codes - Automatically deleted after 10 minutes
  • Account deletion - All associated data is permanently deleted

9. Children's Privacy

Focusora is not intended for children under 13. We don't knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we'll delete it immediately.

10. Changes to This Policy

If we make significant changes to this policy, we'll notify users through the extension. The "Last updated" date at the top shows when changes were made.

11. Contact

Questions about privacy? Found an issue? Reach out:

privacy@focusora.space

Back to Home