What DeepFocus keeps,
and what it never sees.

Without an account

The web app works without signing up. Everything — tasks, timers, timesheets, stats — stays in your browser's local storage on that device. None of it is sent to us.

With an account

Signing in (by email magic link) stores the following so it can sync across your devices:

• Your email address — to sign you in. We send no marketing email.
• Focus sessions — the task names you type, when each session and task started, ended and paused, and the resulting timesheets.
• Totals — lifetime and daily focus time, streak and session count, worked out from your sessions.
• Task suggestions — the list of past task names offered in the task input.
• Blocked sites — the domains you add to the extension's blacklist (e.g. youtube.com).
• Plan — whether you're on the free plan, the extension trial (and when it started), or Pro.

This is stored with Supabase, our database and sign-in provider, in their EU (Ireland) region. Access is restricted per account: each signed-in user can only read and change their own data.

The Chrome extension

The extension asks to run on all sites for two reasons only:

• to show the DeepFocus timer widget on whatever page you're on, and
• to block the sites on your blacklist while a focus session is running.

It does not:

• read, collect or send the content of the pages you visit,
• record the URLs you visit or your browsing history, or
• read cookies or anything typed into other sites.

Blocking is done by Chrome itself (its declarativeNetRequest rules): the extension hands Chrome your blocklist and Chrome redirects matching sites to a DeepFocus page. The extension is never told which sites you open. Your sign-in tokens and a cache of your session are kept in the extension's own storage on your device. Its only network requests go to our Supabase backend and to trydeepfocus.com for the focus music.

Payments

DeepFocus Pro payments are handled by Paystack. You pay on Paystack's checkout; we never see or store your card or bank details. We receive only what we need to switch Pro on and off — your email, the payment or subscription reference, and its status.

Other services that see a request

• Vercel hosts trydeepfocus.com and, like any web host, processes standard request data such as IP address and browser type to serve the site.
• Google Fonts serves the web app's typefaces, so your browser requests them from Google.

What we don't do

• We don't sell or rent your data, or share it for advertising.
• We don't use it for anything other than running DeepFocus — not for credit decisions, profiling or training models.
• There are no ads and no third-party analytics or tracking scripts.

Keeping and deleting your data

Account data is kept while your account exists. To delete your account and everything stored with it, or to get a copy of your data, email us from the address you sign in with. Data in your browser's local storage (no-account mode) never reaches us — clear it with the workspace's Reset Data button or your browser settings.

Changes

If this policy changes, the date at the top changes with it. Material changes to what the extension collects will be stated in its Chrome Web Store listing before they ship.