The short version
- No account, nothing sent. The timer, your history and your settings stay in your browser.
- With an account, your sessions and settings are stored so they follow you between devices. You can export or delete them whenever you like.
- No passwords. You sign in with a code sent to your email, or with a passkey that stays on your device (the site keeps only its public half).
- Ads come from Google when they are switched on, and Google uses cookies once you allow it. Account holders can hide ads for now, and then no Google code loads at all.
- Nothing is sold, and nothing is shared beyond what this page describes.
Without an account
Everything the timer remembers is saved in your browser’s local storage, under one
key, adhd-pomodoro-v1: your runs, your chosen length and your reading
settings. It never leaves the device unless you export it or create an account. Clearing this site’s
data in your browser removes it. If you create an account, your runs and breaks move
into it (and out of the browser); signing in to an account you already had asks first.
The site itself still sees each page request, like any website does. That is covered in 05 Visit records.
The visual timer (/visual-timer) keeps nothing at all: no history, no
settings of its own, and it sends nothing once the page has loaded.
With an account
What is stored
- Your handle, your display name if you gave one, your timezone and when you joined.
- Your email address, if you sign in with one. It is stored only after you type in the code sent to it, and used only to send sign-in and confirmation codes: never for news, marketing or anything else, and never shown to anyone in your groups.
- Each focus session: when it started and ended, how long you were focused, how it ended, the length you set, and the task and subject you typed, if any.
- Each break: when, how long, and whether you came back early.
- Day totals worked out from those, your subject categories, the groups you are in, and your devices (a label, when added, when last seen).
- Your passkeys: the public key, a use counter, the kind of authenticator, and when each was added and last used. The private key never leaves your device.
- Your recovery codes, as one-way hashes only. Nobody can read them back, including us.
- Email codes, also as one-way hashes. Each works once, for 10 minutes, and the record of it is deleted a day after it expires.
- Whether you chose to hide ads, and whether you use the simple or full layout.
- Runs and breaks from before you signed up, if they were carried over from your browser: their start times, lengths and how they ended. Kept apart from the time the server measured, and counted only in your own record, never in a group.
The one cookie
Signing in sets one cookie, fs: a random token that keeps you signed in.
Scripts on the page cannot read it, it is only ever sent to this site, and it lasts 30
days or until you sign out. The site stores a hash of the token, never the token itself.
For ten minutes after you sign in or confirm with your passkey, the site remembers that you did, so it does not ask again for things like new recovery codes.
Groups
If you join a group, its members (eight at most, all invited) see your handle and display name, your sessions, total, average and longest run for this week, how that compares with your own recent average, and how many days in a row you have studied. With presence on, they also see that you are mid-session, and only while you can see theirs.
They never see your email, what you worked on, your subjects, your breaks, your consistency score or your day-by-day history.
Invite links
Anyone holding a group’s invite link or code can see the group’s name and how
many people are in it before joining, signed in or not; never who they are. Joining takes
a press of Join while signed in. Invite links carry no ads, and the visit records
note them as /join, without the code. The group’s owner and admins can
replace the link at any time, and the old one stops working.
Visit records
For each page you open (not the timer’s background traffic) the site records the time, the page, the country Cloudflare reports, your browser family, your account if you were signed in, and your IP address.
- The full address is kept for 7 days, then cut down to an anonymised form.
- A salted hash that changes every day counts unique visitors without identifying anyone.
- The records are deleted after 90 days, and are never part of backups.
- Sign-in, sign-up, recovery-code and group-join attempts, and invite links opened, are counted per address for up to an hour, to slow down guessing.
Backups
The account database is copied every night, and each copy is kept for 180 days. Once a month a copy is archived for 24 months, without passkeys or recovery codes. Backups are private: the website never serves them.
When an account is deleted, it is removed from the live database at once, and then from every backup and archive over the following nights.
Ads
When ads are switched on, the timer and the guide show one Google AdSense ad per page. Never on the timer itself while it runs, never in the account window, and never on this page, an invite link, the visual timer or the LogicFire.app home page.
What Google does
Google and its partners use cookies and similar technology to show ads, which can be based on your earlier visits to this site and to others. Visitors in the European Economic Area, the UK and Switzerland are asked first, through Google’s consent message. You can change your answer at any time with Privacy choices at the bottom of the timer or the guide.
- Turn off personalised ads: My Ad Center.
- How Google uses information from sites that show its ads: policies.google.com.
- Opt out of other ad companies’ cookies: aboutads.info.
Hiding ads
Account holders can hide ads in Settings, for now. With ads hidden, your pages do not load any Google code at all; the ads are not merely covered up.
With ads shown, Google’s code runs on the page alongside the timer’s own, and can see what the page shows. That is why generating recovery codes, removing a passkey and deleting your account each ask you to confirm with your passkey.
Your choices
- Export everything as JSON or CSV from the bottom of the timer. Signed in, it comes from the server; signed out, from your browser.
- Delete your account under Account → Delete this account. There is no undo and no copy kept for you, so export first if you want one.
- Ask about anything else, or ask what is held about you, at privacy@logicfire.app.
Who runs this
Timer is run by LogicFire.app, ABN 85 469 126 730. The site runs on Cloudflare (Workers, the D1 database, KV and R2 storage), and sign-in emails are sent through Cloudflare Email Service. Cloudflare processes this data on the site’s behalf, in its data centres, which may be outside your country.
When this page changes, the date at the top changes with it.