Pomzy Privacy Policy

Last updated: 2026-10-27

Pomzy is a focus timer and website blocker for Chrome. This policy explains what the extension does with your data. The short version: everything stays on your device, and Pomzy sends nothing anywhere. The only exception is optional: if you pick Spotify for study music, Spotify's own player loads from Spotify (see below).

What Pomzy stores

Pomzy keeps the following information locally in your browser, using Chrome's extension storage and IndexedDB:

Settings you choose: your Pomodoro rhythm and timer lengths, the categories and sites you block, your allow list, your blocking schedules, your weekly focus goal, notification preferences, your streak rollover hour, and your custom quit-reason list.
To-do tasks: the task names and time guesses you type, how long you spent on each, and whether you finished within your guess. Finished tasks are deleted automatically after 60 days.
Session history: when each focus session started and ended, whether it was completed or abandoned, the optional goal you typed, and the reason you gave if you quit early or bypassed a site.
Blocked-site attempts: the host name (for example youtube.com) of a blocked site you tried to open during a session, and when. Pomzy does not record full page URLs in its history, only the host name of the site it blocked.
Game state: your coin balance, purchases, room layout, and streak.

Web history (how Chrome Web Store classifies this)

To block sites, Pomzy looks at the web address of your tabs while blocking is on, and keeps a local list of the blocked sites you tried to open (host name and time). The Chrome Web Store calls this kind of information “web history”, so Pomzy declares it there. It is used only to block sites and to show you your own statistics, it never leaves your device, it is never sold or shared, and you can delete it at any time with Settings → “Reset all data” or by removing the extension.

Spotify (optional)

If you choose Spotify as your study music, Pomzy opens a tab containing Spotify's official embedded player for the playlist you picked. That player is loaded from open.spotify.com and is covered by Spotify's own privacy policy; Pomzy does not see your Spotify account, listening history or login, and sends Spotify nothing beyond loading the player for that playlist. Pomzy's built-in music is generated on your device and contacts no one.

What Pomzy does not do

It does not transmit any data to the developer or to any third party. There is no server. (Choosing Spotify music loads Spotify's player from Spotify, as described above; Pomzy shares none of your data with it.)
It does not collect analytics, telemetry, or crash reports.
It does not read the content of web pages. It only acts on the address of a page to decide whether to block it.
It does not use chrome.storage.sync, so your data is not uploaded to your Google account.
It does not use cookies, fingerprinting, or advertising identifiers.

Permissions and why they are needed

Permission	Why
`storage`	Save your settings and game state locally.
`alarms`	Wake the extension when a focus session or break ends, or when one of your blocking schedules starts or ends, even if the popup is closed.
`notifications`	Tell you when a session or break ends. Can be turned off in settings.
`declarativeNetRequest`	Block the sites on your list (or, in allow-list mode, every site except your allow list) during sessions and schedules. Blocking happens inside Chrome's network layer without Pomzy reading page content.
`tabs`	Detect when a tab navigates to a blocked site so it can be swapped to the Pomzy block page, and move already-open blocked tabs there when a session starts. Chrome labels this permission "read your browsing history" because it exposes tab URLs; Pomzy only compares them against your blocklist and stores the host name of blocked attempts.
`offscreen`	Play a short chime when a phase ends, and the optional built-in study music. Chrome requires an invisible page for audio.

Pomzy requests no host permissions, so it cannot read or change the content of any website.

Your control

Export: Settings → "Export JSON" downloads everything Pomzy knows as a single file.
Import: Restore a backup on another device.
Reset: Settings → "Reset all data" erases everything permanently.
Uninstall: Removing the extension deletes all of its local data.

Children

Pomzy does not knowingly collect any personal information from anyone, including children, because it does not collect personal information at all.

Changes

If a future version ever adds optional cloud features, this policy will be updated first and the feature will be opt-in with a clear explanation of what is shared.

Contact

Questions about this policy can be sent to pomzyhq@gmail.com.