Who we are
Pomodoroll is run by one person in Taiwan.
Pomodoroll (pomodoroll.anikit.app) is made and run by an individual developer in Taiwan, who is responsible for your data here. If you have a question about your data, write to [email protected].
What we collect
Only what the timer and your account need.
Without an account
Your settings (times, scenery, sounds, exercises) and today’s counts are kept in your own browser. They are not sent to us.
With an account
- Your email address, and your name and photo if you sign in with Google.
- Your plan: when your trial ends, whether you have Premium, and whether you asked for product updates.
- Each focus session and exercise you finish: when, how long, and your time zone. This is what your reports, charts and streaks are made from.
- The webhook addresses you add, if you use that feature.
When you sign in by email
Cloudflare Turnstile checks that a person, not a script, is asking for the link. We keep the email address and the IP address that asked for one day, so nobody can fill someone else’s inbox, then we delete them. The link goes only to the address you entered, whether or not it has an account.
When you pay
Paddle handles the payment as the seller. We never see your card; Paddle tells us whether your subscription is active.
When you write to us or sign up for news
Messages from the contact form (your name, email and message) are emailed to us, and we answer from our own mailbox. Cloudflare Turnstile checks that a person wrote it, and we keep your email address and IP address for one day to limit how many messages can be sent, then we delete them. If you sign up for product news, we keep your email address until you unsubscribe.
Analytics
On by default, off in one click.
We use Google Analytics (through Firebase) to see which pages people use, so we know what to improve. It is on until you say no: answer “No thanks” when the timer asks, or turn it off under Your data below or in Settings. Once it is off, it no longer loads.
The Pomodoroll Ex browser extension
Everything it keeps stays in your browser.
Pomodoroll Ex is our extension for Chrome and Edge that blocks distracting websites while you focus. It has no account and no analytics, and it doesn’t send what you do to us or to anyone else.
- Your blocklist, settings, quotes, the photo you pick for the blocked page and how many times it blocked a site each day are stored in your browser only. Removing the extension removes them.
- To know when to block, it checks the address of each page you open against your blocklist, in your browser. Addresses are not recorded or sent anywhere.
- On pomodoroll.anikit.app it listens for the timer’s “start blocking” and “stop blocking”, and reads which scene you picked, so the blocked page can show the same one. That’s all it reads there.
- It loads scene photos from our image server, and a site’s icon from that site, like any web page does.
- “Save to Reading List” adds the page to Chrome’s Reading List; Chrome asks for your permission the first time.
The camera (Presence)
- Presence, a Premium option that starts and pauses the timer when you sit down or leave, uses your camera only while you have switched it on and only during Focus. Your browser asks for permission first.
- Whether someone is in front of the camera is worked out in your browser, on your device, with a small face detector that is downloaded when you switch Presence on. No picture or video is recorded, stored or sent anywhere, not to us and not to anyone else. The only thing kept is the switch itself, in your browser.
The weather
Your time zone, not your location.
The timer shows the weather in the city your time zone is named after, for example Taipei for everyone on Taiwan’s time. Your browser sends us only the name of its time zone. We look up that city’s weather ourselves, so the weather service sees our server, not you, and we don’t keep which time zone asked. You can turn the weather off in Settings.
Services we use
These companies handle some of your data for us, only for what is listed here.
| Service | What for | What it sees |
|---|---|---|
| Google Firebase | Signing in; analytics | Your email, name and photo; the pages you visit |
| Our hosting provider | Runs the website | Requests to the site |
| Our database | Keeps account data | The account data above |
| Paddle | Payments | Your payment details |
| Resend | Sends sign-in links, contact messages and our replies | Your email address |
| Cloudflare Turnstile | Checks you’re human when you sign in or write to us | Your browser and device |
| Spotify | The music player | Only after you press Play on Spotify |
| YouTube | The music player, when you choose YouTube | The link you paste (to fetch its title), and the player only after you press Play on YouTube |
How long we keep it
- Account data: until you delete your account.
- Sign-in records (email and IP address): one day.
- Analytics: 14 months. After that, Google Analytics deletes the detailed records and keeps only totals, such as visits per day.
- Payment records: Paddle keeps them as tax law requires. When you delete your account we keep only the reference to your past subscription, for refunds and disputes.
Your rights
Under Taiwan’s Personal Data Protection Act you can ask to see your data, get a copy, correct it, stop us using it, or delete it. Most of it you can do yourself: your profile shows what we keep, and you can delete your account below. For anything else, write to [email protected] and we’ll answer within 30 days.
Your data
Analytics
Help us see which pages people use.
Delete my account
Children
Pomodoroll is not meant for children under 13, and we don’t knowingly keep their data. If you think a child has an account, write to us and we’ll delete it.
Changes and contact
When this policy changes we update the date at the top; for a change that matters, we’ll also tell you on the site or by email before it applies. Questions: [email protected].