Privacy Policy — Sakura Focus
Effective date: July 18, 2026
Who we are
Sakura Focus is a Pomodoro focus-timer browser extension. This policy covers the extension and its companion site (sakura-focus.com).
Data we collect
- Account data: your email address, and — if you sign in with Google or Apple — the name and email address those providers share with us.
- Usage data: your focus sessions (start/end time, duration, completed or interrupted, chosen category), custom categories you create, grove progress, and your settings.
- Billing data: your subscription status and order/customer identifiers from our payment provider, Lemon Squeezy. Payment card details are handled entirely by Lemon Squeezy and never reach us.
- Local data: timer state and cached settings are stored in your browser's extension storage on your device.
- Site analytics: aggregate pageviews, referrer, country, and device/browser type for sakura-focus.com, collected via a cookieless analytics service that does not track you across other sites. Any per-user identifier in the page URL is stripped before this data is sent.
How we use it
Solely to provide the product: syncing your sessions and settings across devices, showing your stats and grove, unlocking Pro features you purchased, and responding to your support requests. We do not sell your data, show ads, or track you across websites.
Service providers
- Supabase — database, authentication, and API hosting.
- Lemon Squeezy — merchant of record for payments and subscriptions.
- Google / Apple — optional sign-in providers.
- Vercel — site hosting and privacy-friendly, cookieless analytics.
Limited Use of Google user data
Sakura Focus's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data (your email address, and your name if your Google account provides one) only to create and authenticate your Sakura Focus account — the single purpose of the extension.
- We do not transfer Google user data to third parties except as necessary to provide or improve the extension (our authentication and hosting provider, Supabase), to comply with applicable law, to protect against malware, spam, phishing, or other fraud or abuse, or as part of a merger, acquisition, or sale of assets with your explicit prior consent.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data, except: with your explicit consent to read specific data; where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data is aggregated and anonymized for internal operations.
Retention & deletion
Your data is kept while your account is active. To delete your account and all associated data, email us at the address below and we will complete the deletion within 30 days.
Your rights
- Access & export: Pro users have the ability to export focus sessions as CSV or JSON from within the extension.
- Correction: ask us to fix inaccurate account information.
- Deletion: delete your account and all associated data — see “Retention & deletion” above.
To exercise any of these, email us at the address below.
Security
Data is transmitted over TLS and stored with per-user row-level access controls.
Changes
We will update this page if our practices change; material changes will be noted in the extension's release notes.