Privacy

Pomotid works without a profile. Then your settings, tasks and sessions are stored only in your browser, and nothing is sent to us. Clear site data to delete everything.

If you create a profile

A profile is optional. It stores your statistics and shows them on all your devices. You sign in with a passkey, so we need neither an email address nor a password. On our server we store:

• a random user ID
• your name, if you give one
• your passkey’s public key. Fingerprints, faces and PINs never leave your device.
• a one-way hash of your recovery code, not the code itself
• the number of focus sessions and focus minutes per day for each device (devices have random IDs), and your weekly goal
• when the profile was created and last used

Your tasks and timer settings stay in your browser and are not sent to us.

We do not store your IP address. It is held briefly in memory to stop repeated sign-in attempts and is gone within an hour.

We use this information only to provide the profile you asked for (GDPR Art. 6(1)(b)). We do not share it and do not use it for advertising or analytics.

The information is kept until you delete your profile. Profiles unused for two years are deleted automatically. We keep a daily backup for 14 days, so a deleted profile is fully gone within 14 days.

In the statistics panel you can download your data and delete your profile. You can also contact us for access or correction, and you may complain to the Norwegian Data Protection Authority (Datatilsynet).

Cookies

Without a profile, Pomotid uses no cookies. When you are signed in, we set one cookie (pt_s) that keeps you signed in for up to a year. While you sign in, a short-lived cookie (pt_c) is used for five minutes. Both are strictly necessary for signing in and therefore need no consent. We use no other cookies.

Other

Your browser stores the site’s files so the timer works offline.

Your personal link contains your settings and tasks, but is never sent to us.

The server keeps no access logs.

The coffee cup opens Stripe’s payment page. Stripe processes the donation, and we receive the payment details you give there.

The data controller is STSY.