Privacy Policy — Sakura Focus
Effective date: September 15, 2026
Who we are
Sakura Focus is a Pomodoro focus-timer browser extension. This policy covers the extension and its companion site (sakura-focus.com).
Data we collect
- Account data: your email address, and — if you sign in with Google or Apple — the name and email address those providers share with us.
- Usage data: your focus sessions (start/end time, duration, completed or interrupted, chosen category), custom categories you create, grove progress, and your settings.
- Billing data: your subscription status and order/customer identifiers from our payment provider, Lemon Squeezy. Payment card details are handled entirely by Lemon Squeezy and never reach us.
- Local data: timer state and cached settings are stored in your browser's extension storage on your device.
- Site analytics: aggregate pageviews, referrer, country, and device/browser type for sakura-focus.com, collected via a cookieless analytics service that does not track you across other sites. Any per-user identifier in the page URL is stripped before this data is sent.
- Reliability diagnostics: when the extension or a supporting service encounters an error, we send Sentry a sanitized error type, stack-frame locations, extension version, runtime context, and limited status flags. A signed-in event carries your pseudonymous Supabase account UUID; a signed-out event carries a random installation UUID instead. The two identifiers are never sent together. These diagnostics exclude your email address, browsing history, website content, session replay, user-entered text, authentication tokens, payment payloads, and persisted focus-session records.
How we use it
Solely to provide the product: syncing your sessions and settings across devices, showing your stats and grove, unlocking Pro features you purchased, and responding to your support requests. We also use sanitized reliability diagnostics to identify, investigate, and fix crashes and operational errors. We do not sell your data, show ads, or track you across websites.
Service providers
- Supabase — database, authentication, and API hosting.
- Lemon Squeezy — merchant of record for payments and subscriptions.
- Google / Apple — optional sign-in providers.
- Vercel — site hosting and privacy-friendly, cookieless analytics.
- Sentry — error monitoring and alerting. We share only the sanitized reliability diagnostics described above for product reliability and support. The extension sends these diagnostics to our dedicated Sentry ingestion host; that connection is not used to read websites or browsing activity.
Limited Use of Google user data
Sakura Focus's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data (your email address, and your name if your Google account provides one) only to create and authenticate your Sakura Focus account — the single purpose of the extension.
- We do not transfer Google user data to third parties except as necessary to provide or improve the extension (our authentication and hosting provider, Supabase), to comply with applicable law, to protect against malware, spam, phishing, or other fraud or abuse, or as part of a merger, acquisition, or sale of assets with your explicit prior consent.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data, except: with your explicit consent to read specific data; where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data is aggregated and anonymized for internal operations.
Retention & deletion
Your data is kept while your account is active. To delete your account and all associated data, email us at the address below and we will complete the deletion within 30 days.
Sentry error events, including any account or installation UUID attached to them, are available under our current plan for up to 30 days and may be deleted sooner. If you ask us to delete your account, we will also delete identifiable Sentry diagnostics that we can locate using your account UUID, subject to any short processing delay required by the provider.
Your rights
- Access & export: Pro users have the ability to export focus sessions as CSV or JSON from within the extension.
- Correction: ask us to fix inaccurate account information.
- Deletion: delete your account and all associated data — see “Retention & deletion” above.
To exercise any of these, email us at the address below.
Security
Data is transmitted over TLS and stored with per-user row-level access controls.
Changes
We will update this page if our practices change; material changes will be noted in the extension's release notes.