Privacy Policy

Information We Collect

RealFocus collects and processes the following categories of data:

Locally stored data (stays on your device — never sent to any server):

• Blocked-site rules (domains, paths, modes)
• Pomodoro timer settings, state, and session history
• Tasks, notes, and due dates
• Quick links and link groups
• New-tab customization preferences (colors, background, font, layout toggles)

Account information (only if you choose to link an account):

• Email address — provided when you sign in via the RealFocus website
• Authentication tokens — stored locally in the extension to maintain your session

Location (only if you enable weather):

• Approximate latitude and longitude from browser geolocation — sent to our server over HTTPS to fetch a weather forecast; never stored on our servers

We do not collect browsing history, form inputs, keystrokes, or any data from the pages you visit. The extension reads the current tab URL only to check it against your blocklist and to let you save a page as a quick link from the popup.

How We Use Your Information

We use the data described above exclusively to provide the core features of the extension:

• To block distracting websites based on your rules
• To run Pomodoro timers and display session analytics
• To store and display your tasks, notes, and quick links
• To apply your chosen new-tab theme and layout
• To show a weather forecast when you have linked an account and granted location access

We do not sell your data. We do not use your data for advertising, analytics profiling, or any purpose unrelated to the extension's functionality. We do not transfer your data to third parties for their own purposes.

Third-Party Services

RealFocus uses the following third-party services. Data is shared with them only as described:

• Supabase — authentication and account management when you choose to sign in. Supabase Privacy Policy
• WeatherAPI.com — weather forecasts. Our server sends your approximate coordinates to WeatherAPI on your behalf; WeatherAPI does not receive your identity. WeatherAPI Privacy Policy
• Unsplash — random background photos for the new tab (fetched server-side). No user data is sent to Unsplash. Unsplash Privacy Policy
• Google Fonts — font files loaded in the browser when you select a custom font. Google Privacy Policy
• Google Favicons — favicon images for your saved quick links. The domain of each link is sent to Google's favicon service. Google Privacy Policy

No other third-party services receive your data.

Permissions

The extension requests the following Chrome permissions, each required for a specific feature:

• storage — save your settings, blocklist, tasks, notes, and customization locally
• tabs — read the active tab URL to check against your blocklist and to add quick links
• webNavigation — detect page loads to enforce blocking rules
• scripting — inject the scroll-lock script on sites you have marked for scroll lock
• alarms — run Pomodoro timer countdowns and strict-mode timers in the background
• notifications — notify you when a Pomodoro session ends (if enabled in settings)
• offscreen — play notification sounds in the background
• host_permissions (<all_urls>) — required to observe navigations and inject scroll-lock on any site in your blocklist

The extension does not use the `history`, `cookies`, `bookmarks`, or `identity` permissions.

Data Storage and Security

All extension settings, blocklists, tasks, notes, quick links, and Pomodoro history live in your browser's local storage (`chrome.storage.local`) and are never sent to any server.

When your browser communicates with our server — for weather forecasts, background photos, or account authentication — all requests are sent over HTTPS. Authentication tokens are stored locally and transmitted only to our server over HTTPS for session verification.

Our server does not maintain a database of extension user data. It acts as a proxy for weather and background-photo requests and as an authentication provider.

Your Rights

You can:

• Access your data — all your data is stored locally in your browser and visible within the extension's settings and dashboard
• Delete your data — uninstall the extension to remove all locally stored data, or use the Clear History button in the dashboard
• Revoke account access — log out from the extension settings to clear your session tokens
• Request deletion — email us at anorouzi.work@gmail.com to request deletion of your account from our authentication service

If you are located in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us and we will honor your request.

Children's Privacy

RealFocus is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy when we add new features or change how data is handled. The "Last updated" date at the top reflects the most recent version. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or your data, contact us at anorouzi.work@gmail.com.