Privacy Policy
Last updated: 28 September 2026
PomoMates is a free Pomodoro timer to focus alone or with a group. This page explains what data we use, why, and how to exercise your rights. We collect the bare minimum and we never sell your data.
Data we use
- Account: display name, email address, password (stored only in hashed form), language and preferences (public leaderboard, default rhythm).
- Activity: focus time (per day, solo or group), rooms created or joined, messages sent in room chats, tasks in your to-do list.
- Guests: the first name chosen for the room and a temporary session identifier, no email.
- Technical: IP address and browser information in server logs, used for security (abuse limiting) and error diagnostics.
Why we use it
- To run the service: synced timer, rooms, chat, statistics, leaderboard, to-do list.
- To send necessary emails: account activation, password reset, email change. No newsletter without your consent.
- To protect the service: preventing spam, abuse and fraudulent login attempts.
Cookies and local storage
- We only use necessary cookies: login session, protection against forged requests (CSRF) and "stay logged in".
- Your browser also keeps a few settings (light or dark theme, notifications, guest tasks) in its local storage. They are not sent to third parties.
- No advertising cookies or ad trackers are used.
Sharing with third parties
- The website and database host, and the email sending service: they process data only on our behalf.
- Fonts loaded from Google Fonts: your browser contacts Google servers, which can see your IP address.
- Donations: if any, they go through an external platform; we neither receive nor store your payment details.
Retention
- Account data and statistics are kept as long as the account exists. You can delete your account at any time from "My account": your personal data and statistics are then erased.
- Technical logs are kept for a limited time.
Your rights
- You can access your data, correct it (My account), delete it (account deletion), object to processing or request a copy by writing to contact@pomomates.com.
- You can also contact the data protection authority of your country.
Children
- The service is intended for people aged 13 and over. Younger users should use it with a parent's consent.
Contact and changes
- For any question: contact@pomomates.com. This policy may change; the update date is shown at the top of the page.