Privacy policy

What we collect

• Account: your email and a hashed password (handled by Supabase Auth).
• Profile: the username and display name you set, plus any Twitch or YouTube handles you add.
• Focus data: the pomodoros you complete and the objects you grow — tied to your account so we can show your world and the leaderboard.
• Operational logs: standard request logs (IP, user-agent, timestamps) retained briefly for abuse prevention.

What we do with it

We use your data to run the product: authenticate you, show your dashboard, render your overlay, and compute the public leaderboard (username, display name, total objects, hours).

We do not sell your data. We do not run ad tracking. We do not share your data with third parties beyond the infrastructure providers required to run the service (Supabase for data + auth, Vercel for hosting).

Public information

Your username, display name, avatar, social handles, and totals are visible on the public leaderboard. If you don't want to be listed there, hide your account by deleting it (see below).

Cookies

We use cookies only for authentication (keeping you logged in). No analytics or advertising cookies.

Your rights

You can delete your account at any time from Settings → Danger zone. This permanently removes your profile, projects, pomodoros, and objects, and deletes your auth record.

For anything else — export, correction, questions — email hello@pomodoroworld.com.

Changes

We'll update this page if the policy changes and bump the "last updated" date above.