Privacy Policy

Last Updated: November 8, 2026

1. Introduction

Welcome to Pomodoro Timer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your information. This Privacy Policy explains our practices regarding data collection, use, and storage when you use our Pomodoro Timer application.

2. Information We Collect

2.1 Account & Cloud Data (Registered Users)

If you choose to sign in with Discord or Google, we collect:

  • Identity Data: Discord/Google User ID, username, avatar, and email address (for account linking)
  • Cloud Sync Data: Timer, audio, and display settings synced to our secure backend
  • Progress Data: XP, level, and Pomodoro statistics for continuity across devices

For users who do not sign in, core settings remain local to the browser via localStorage.

2.2 Analytics, Monitoring, and Feature Flag Data

When enabled or required for service reliability, we process:

  • PostHog (Product Analytics): App events (for example timer actions and feature usage), platform/device metadata, and session-level analytics identifiers. PostHog analytics is opt-in via the consent banner.
  • Sentry (Error & Performance Monitoring): Error details, stack traces, performance traces, browser/device metadata, and technical context needed to diagnose issues.
  • GrowthBook (Feature Flags): Feature flag evaluation attributes such as internal user ID, level/faction, locale, and platform context.
  • Datadog: Server logs from our backend functions, used to find faults and raise alerts.
  • Session replay: When an error happens, Sentry may record a short replay of the page. It can include the moments just before the error and what happens after it, until that session ends. Sessions with no error are never recorded, and nothing is recorded on the staff Ops Console.
  • Discord: Hosts the Study Saga Activity inside Discord and is the sign-in provider if you choose Discord.

We use this data to improve reliability, ship safer releases, and understand feature adoption.

2.3 Information We Do NOT Collect

We do not collect:

  • Payment card information
  • Precise location data
  • Biometric data
  • Your private Discord message content

3. How We Use Your Information

The information we collect is used solely for the following purposes:

  • Account Sync: To enable cross-device settings and progress continuity
  • Service Functionality & Security: To authenticate users and protect platform integrity
  • Analytics & Monitoring: To improve functionality, reliability, and user experience

4. Data Storage and Security

4.1 Database, Security, and Local Storage

For registered users, account and progression data are stored in secure backend services. The app also stores settings locally for performance and continuity. Local browser data:

  • Remains on your device unless you sign in and choose synced functionality
  • Can be cleared at any time through your browser settings
  • Is isolated to our domain and cannot be accessed by other websites

4.2 Third-Party Services

We use the following third-party services:

  • Clerk and Convex: Authentication, database, and backend functions
  • PostHog: Product analytics (opt-in through consent choices)
  • Sentry: Error and performance monitoring
  • GrowthBook: Feature flags and controlled rollouts
  • Datadog: Backend server logs and alerting
  • Discord: Sign-in provider and host of the Discord Activity
  • Cloudflare R2: Hosting and delivery of audio/media assets
  • Vercel: Frontend hosting and edge delivery; some public pages may also use Vercel analytics scripts

5. Cookies and Tracking

We use essential storage mechanisms (such as localStorage and required auth/session storage) to run the app.

  • Essential Storage: Required for sign-in, security, and core functionality
  • Analytics Storage: PostHog analytics is disabled by default and is only enabled when you opt in through the consent banner

You can change consent preferences later from the privacy/cookie settings interface in the app.

6. Music and Audio Content

The music and audio files available in our application are sourced from copyright-free and royalty-free collections available on the internet. We believe these files are free to use, but if you are a rights holder and believe your content has been included without proper authorization:

Content Takedown Requests:

Please contact us at: studysagaapp@gmail.com

We will promptly investigate and remove any content upon valid request.

7. Your Rights and Choices

You have the following rights regarding your data:

  • Access: You can request access to account-linked data we store in backend services
  • Deletion: You can delete local data by clearing localStorage. You can delete your account on the website (study-saga.com) in Settings → Account. If your account is banned, you can delete it from the ban screen there. Deletion starts at once and normally completes within minutes. It removes your profile, progress and study history, chat and room messages, Feedback Portal posts, friendships, reports about you, and your login. What is kept is listed under Data Retention.
  • Opt-Out: You can opt out of product analytics via consent settings; this does not disable strictly necessary security/error monitoring

8. Children's Privacy

You must be at least 13 years old to use Study Saga. If you live in the EU or EEA, you must be at least 16, unless a parent or guardian agrees to your use of Study Saga. We may remove the account of anyone below the minimum age. We do not knowingly keep personal information from anyone below the minimum age. If you believe a child has given us information, contact us at the address in section 13 and we will delete it.

9. International Data Transfers

Depending on your location and selected providers, data may be processed in multiple regions (including EU and other jurisdictions) by our infrastructure and subprocessors.

  • Clerk and Convex (auth/database/backend)
  • PostHog (product analytics)
  • Sentry (error/performance telemetry and error replays)
  • GrowthBook (feature delivery)
  • Datadog (backend server logs)
  • Discord (sign-in and Activity host)
  • Cloudflare R2 and CDN delivery networks
  • Vercel hosting/edge delivery

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal compliance. We will update the "Last Updated" date at the top of this policy. Continued use of the application after changes constitutes acceptance of the updated policy.

11. Third-Party Links

Our application may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

12. Data Retention

Local storage data remains on your device until you clear it. Account-linked data in our backend is retained while your account is active and as needed for security, fraud prevention, and legal obligations. Provider telemetry retention (for PostHog, Sentry, and related services) follows each provider's configured retention policy.

When you delete your account, we keep:

  • ban records, as described below;
  • moderation entries that concern other people, without your profile: bans you placed as a moderator, reports you filed, and staff audit entries such as who reviewed a report;
  • operational job logs, which are deleted within 30 days after they finish.

Account deletion does not erase copies outside our backend: messages already posted to our Discord moderation and feedback channels, Discord server roles the app assigned to you, and analytics and error data held by PostHog and Sentry, which follow those providers’ retention policies.

If an account is banned from Study Saga, we keep a moderation record with that account's email address, Discord ID, Google ID and login IDs so the ban can be enforced, including after the account is deleted.

Records of actions our staff take on accounts (for example bans and corrections) are kept for up to 2 years, including after an account is deleted, to prevent abuse.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: studysagaapp@gmail.com

Developer: Achilleas Makris

14. Legal Compliance

This application is designed to comply with major privacy regulations including:

  • General Data Protection Regulation (GDPR) - European Union
  • California Consumer Privacy Act (CCPA) - United States
  • Other applicable data protection laws

We process data only for the purposes described in this policy and apply data minimization, access controls, and transparency practices appropriate to the services we operate.

← Back to Pomodoro Timer