Privacy Policy — Heyday Focus

Website: https://heydayfocus.com
Contact: hello@heydayfocus.com
Company: HeyDay

1. Introduction

HeyDay (“we,” “us,” or “our”) operates the Heyday Focus Chrome Extension (“Extension”) and the website https://heydayfocus.com (“Website”). We are committed to protecting your privacy and handling your data in accordance with:

• Chrome Web Store Developer Program Policies, including the User Data Policy
• Applicable data protection laws
• Industry best practices

This Privacy Policy explains what data we collect, how we use it, how we store it, and the choices you have. By using the Extension or the Website, you agree to the practices described here.

2. Information We Collect

Heyday Focus collects only the data necessary to provide the Extension’s single purpose: helping users manage focus by applying user-selected impacts to chosen websites at scheduled times.

We do not collect full browsing history, page content, or unrelated user activity.

2.1 Data Collected Through the Chrome Extension

a) Account Information (Optional Google OAuth Login)

If you choose to sign in, we collect:

• Google account email address
• Google display name
• Google user identifier (UID)
• Authentication tokens required for sign-in

We do not access or request Google Drive, Contacts, Calendar, or any other Google services. Authentication information is used only to associate your settings with your account and enable cross-device sync.

b) User Settings and Configuration

Stored locally and, if you sign in, synced to our backend to enable multi-device functionality:

• Focus schedules
• Site lists
• Impact settings
• Enabled/disabled state of schedules
• Pause preferences and other extension settings

This data exists solely to operate the Extension.

c) Impact Events (Limited User Activity Metadata)

When an impact is applied on a site you selected, the Extension generates a functional event containing:

• Timestamp of impact
• Impact type (block, grayscale, simplify, etc.)
• Domain name only (no full URLs)
• Related schedule or site list identifiers

Important Clarifications:

• We do not collect full browsing history
• We do not collect page titles, paths, query parameters, or time spent on a site
• We do not monitor activity on any sites you have not added to your site lists
• We do not track clicks, scrolls, keystrokes, or mouse movements

Impact events are used only to power your personal analytics dashboard.

d) What the Extension Does Not Collect

The Extension does not collect, store, or transmit:

• Full browsing history
• Page content (text, images, videos, or media)
• Keystrokes or form entries
• Payment or financial information
• Cookies
• Sensitive categories (health, biometrics, or location data)
• Authentication data for other services

The Extension does not read or analyze webpage content. It only applies CSS modifications or redirects according to your settings.

3. Information Collected Through the Website

The Website (https://heydayfocus.com) uses Google Analytics to understand aggregate visitor behavior.

We collect:

• Pages visited
• Browser and device type
• Operating system
• Approximate location (city-level only)
• Referring URL
• Anonymous engagement metrics

Analytics data is processed according to Google’s Privacy Policy. We do not combine analytics data with Extension data or personal identifiers.

4. How We Use Information

4.1 To Operate the Extension

• Syncing schedules and site lists across devices (optional)
• Applying impacts based on your settings
• Maintaining authentication sessions
• Resolving bugs and performance issues
• Improving reliability and user experience
• Generating your personal analytics dashboard

We never use Extension-collected data for advertising, profiling, or marketing.

4.2 To Operate the Website

• Understanding visitor navigation patterns
• Improving content and design
• Measuring marketing effectiveness

4.3 Communication

If you contact us directly, we may use information you provide (such as email) to respond to your request.

5. Legal Basis for Data Processing

Depending on your jurisdiction, we may rely on:

• Performance of a contract to provide the Extension’s core functionality
• Legitimate interest for improving stability and security
• Consent for Google Analytics cookies and optional Google OAuth sign-in

6. Data Storage and Security

6.1 Storage Locations

Extension data is stored:

• Locally in your browser
• In our secure Supabase database if you sign in and enable sync

Google OAuth tokens are stored using Google’s secure authentication mechanisms.

6.2 Security Measures

We implement:

• Encryption in transit and at rest
• Row Level Security (RLS) in Supabase
• Role-based access controls
• Restricted internal access
• Regular monitoring and audits

We never store your Google password or other sensitive credentials.

7. Data Retention

We retain data only as long as necessary to provide the service.

When you request account deletion, we delete:

• All schedules
• All site lists
• All impact events
• All synced preferences
• All authentication records

Local browser data may also be cleared by uninstalling the Extension.

Analytics data on the Website may be stored according to Google Analytics retention policies.

8. Data Sharing

We do not sell, rent, or trade your data.

We only share data with:

• Supabase (database and authentication infrastructure)
• Google OAuth (authentication provider)
• Google Analytics (website analytics)
• Law enforcement only when legally required

We do not use third-party advertising networks.

We do not engage in cross-site tracking.

9. Cookies

The Website may use cookies for Google Analytics. You can disable cookies in your browser settings at any time.

The Extension does not use cookies.

10. Children’s Privacy

The Extension and Website are not intended for children under 13. We do not knowingly collect data from children.

11. International Users

Data may be processed or stored in regions where Supabase operates. All transfers comply with applicable privacy regulations and industry standards.

12. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available at: https://heydayfocus.com/privacy

Significant changes will be communicated through the Website or Extension.

13. Contact Us

For questions, concerns, or data requests, contact: hello@heydayfocus.com