Privacy

Last updated: July 23, 2026

The short version: your focus data lives on your device. Signing in is optional. If you do, your email and tracker data are stored in the EU so they can sync across your devices. We count a handful of anonymous, cookieless product events; there are no ads, no tracking pixels, no profiles, and nothing tied to who you are. You can delete everything yourself, instantly, from inside the app.

What is stored, and where

On your device (always): everything you put into the tracker (hours, targets, notes, category names, archived weeks), plus small preferences like theme and language. It lives in your browser's local storage and never leaves your device unless you sign in.
On our servers (only if you sign in): your email address and the same tracker data, so it can follow you across devices. It is stored in a Supabase database hosted in Frankfurt, Germany (EU). Access is locked to your account by row-level security, so each account can only ever read and write its own rows.

Signing in

You can use Focushours forever without an account. If you want sync, you can sign in with Google (Google shares your email address and basic profile with us) or with a magic link sent to your email. We never see or store a password.

Analytics, ads, and trackers

We use PostHog, hosted in the EU, in cookieless mode, to answer one question: is the product working? Concretely that means page views and three product events (a signup happened, a first session was logged, a week was completed). These events are anonymous: no cookies, nothing stored on your device, no identifier that survives closing the tab, never linked to your email or account, and your tracker contents (hours, notes, categories) are never sent.

No ad networks, no tracking pixels, no fingerprinting, and no data sale. The app's security configuration (its Content-Security-Policy) instructs your browser to refuse connections to anything except our database and PostHog's EU endpoint. You can verify that yourself in your browser's developer tools.

Cookies

We set no cookies, not even for analytics. If you sign in, your session is kept in your browser's local storage, on your device.

Service logs

Our infrastructure provider (Supabase) keeps standard, time-limited security logs of authentication events, like sign-in attempts and the IP address they came from. These exist to keep the service safe and expire automatically.

Deleting your data

Inside the app: account menu → Danger zone → Delete account. That removes your account and every piece of your data from our servers immediately. It's not a "within 30 days" promise; it's gone the moment the button finishes. The copy on your own device stays yours; you can clear it with the app's Reset button whenever you like.

Want a copy of your data first? Email me and I'll send you everything we hold about you.

Who runs this

Focushours is built and run by one independent developer based in Norway, who is also the data controller for anything described above. Questions, concerns, or data requests: [email protected].

Changes

If any of this changes (a new destination, a new event, anything), this page will say so, with a new date at the top, before the change applies to you. (July 23, 2026: added the cookieless PostHog analytics described above, in the same release that enabled them.)