Privacy policy

lofispot is a calm room to focus in. Here is what it keeps, where it keeps it, and what leaves your browser, as the code works today. It is for people 13 and over.

Last updated October 2026.

What stays in your browser

You can use lofispot without an account. Your tasks, focus sessions, settings, skin and everything else you make are kept in this browser’s own storage, and lofispot does not upload them; a copy goes to the cloud only once you sign in (see below). The analytics described below still run, and what they record can include text that is on screen. Clearing this site’s data in your browser removes what is stored here, and “Download my data” in the You card saves a copy first.

If you sign in

Signing in with Google lets lofispot know who you are. We then hold your name, email address and photo from your Google account, and when you signed up. When you sign in, your room is kept in sync in the cloud for free for a first stretch, a week at the moment. What that copy holds, and who can read it, is described under lofispot cloud, below. Your name and email are also given to the analytics service (see below).

It counts from the day you sign up; for an account made before lofispot cloud went on sale, from that day. The room shows the date it ends. After it, unless you have lofispot cloud, nothing more is written: each device keeps its own copy, and the cloud copy waits, read-only, in case you turn lofispot cloud on.

If you have lofispot cloud

lofispot cloud keeps a copy of your room (tasks, sessions, settings, desk snapshots) in Google’s Firebase, so it is kept safe and follows you to your other devices. Only your account can read it, and one account’s data is never shown to, or merged with, another’s. If a year ends, each of your devices keeps its own copy, and the copy in the cloud is kept, read-only, for the day you return. A cloud held for good does not end. You can ask for the cloud copy to be removed at any time.

Export and import

“Download my data” in the You card saves your room to a file on your device, with or without lofispot cloud, and you can import a saved file to bring it back. That file is yours; lofispot does not see it.

The Chrome companion

The companion adds a new tab page, the minutes left on your toolbar, and an optional shield for sites you choose. It keeps these in your browser’s extension storage, on this computer only:

• what your lofispot tab last shared with it: the session running, today’s minutes and goal, your streak, your skin, today’s one thing, your next task, your nearest countdown, how many plants are in your grove and what is playing, with your first name (to greet you), up to 30 of your task names with whether each was done today, and the names of your task folders, and your focus minutes for each of the last 7 days, and a copy of the day before so yesterday’s one thing can be offered again;
• answers and tasks you type or tick on a new tab while lofispot is closed (at most ten in all), kept until lofispot is next opened, which then takes them;
• how you have shaped the new tab: the clock, today’s line, search or today’s one thing under the clock, the tasks, clearer text, and which background it has and how soft it is, and the link you pasted for it, if you did;
• the sites you put on your focus list (and which groups of sites you switched on), how long “Open anyway” lasts, and the ones you let through for a moment (with whether your timer was resting for them);
• how many seconds the shield was up in each of your last few focus sessions, and the one session you switched it off for, if you did, so your lofispot tab can note them with the session;
• a few counts waiting to be sent (see Analytics below).

Of your account the companion learns only whether you are signed out, signed in or in lofispot cloud, to show the right mark on its new tab, and your first name, only to greet you; your email address and photo never reach it. What your lofispot tab shares comes from your own tab on this computer and stays in your browser. The companion makes no request of its own to us. The new tab fetches one picture, the poster of the video lofispot last played, from YouTube’s image host. If you paste a picture or video link as your new tab’s background, the new tab loads it from that link’s site (a YouTube link shows that video’s picture, from YouTube’s image host), and from the wallpaper link your lofispot tab shares when you have put a picture behind the room; that site sees the request as it would for any page that shows its picture. Nothing else is fetched, the link stays in your browser, and the companion still sends nothing to lofispot. A picture or video you choose as your new tab’s background stays in your browser and is never uploaded. Its counts (a new tab opened, a one thing set or ticked, a task added, ticked, moved or started, the room opened from a new tab, the shield shown or let through) leave through your lofispot tab’s own analytics the next time lofispot is open. The shield’s counts never say which site it was, and a task’s never say what it was or which folder it is in. The companion can see lofispot.app, and a site on your focus list only after you allow it in Chrome; it does not read pages and does not read your browsing history. If you use the new tab’s search line, what you type goes to Chrome’s own search, which uses your default search engine; the companion passes it on and keeps none of it. Removing the companion removes what it stored.

Analytics

lofispot uses PostHog to see what people do and what breaks, so it can be made calmer and better. Today it collects:

• a first-party cookie (named ph_<project token>_posthog, which lasts about a year) and entries in this site’s local storage, to recognise the same browser from one visit to the next;
• automatic capture of clicks: when you click something, the element and the text shown on it can be recorded, which can include the title of a task;
• the address of each page you visit on lofispot, including a study room’s invite link (/r/<room name>);
• if you are signed in, your account ID with your Google name and email, so your visits are tied to you;
• errors: unhandled errors and failed promises, with their messages;
• lofispot’s own events, such as starting a session, and the companion’s counts described above;
• your IP address and browser details, as any website you visit receives them.

Analytics are not sent from local development or from automated browsers. lofispot’s code does not set how long PostHog keeps what it receives.

Cookies and the services that may set them

lofispot sets no advertising cookies and sells nothing. The PostHog cookie is described above. A few other services that make lofispot work load in your browser, and each may set cookies or see that your browser visited lofispot, under its own privacy policy:

• YouTube plays the music and scenes. Its player loads from youtube.com, and the posters from YouTube’s image host, when you use the room.
• Google serves the fonts of the skins and of these pages, and Google and Firebase handle sign-in and, while your room is kept in the cloud, that sync.
• Dodo Payments sells lofispot cloud as the merchant of record: its checkout opens only when you start a purchase, and it handles your card details and any sales tax. We give it the email and name of your Google account so you needn’t type them, and we receive confirmation that it was paid, never your card details.

If you choose Spotify in lofispot, your browser loads Spotify’s player. Spotify and its partners may set cookies and see that your browser visited lofispot, under Spotify’s privacy policy. lofispot loads nothing from Spotify until you choose it, and stores nothing from Spotify.

When you pick or play lofispot’s own music, your browser connects to Audius (api.audius.co and the servers that hold the songs), which can see your IP address. Audius and its network partners may set cookies, under Audius’s privacy policy. lofispot sends Audius nothing about you, and keeps on your device only which source and mood you chose, and a day’s list of tracks.

Other things lofispot may keep

• Study rooms. Joining or hosting a room shares, with the others in it, the short name you pick (up to 24 characters), a colour, whether you are focusing, on a break or idle, when you were last seen and any cheer you send. A guest is signed in anonymously, never with an account. Your member record is removed when you leave. The room’s own record, which includes the host’s name and the room’s timer, stays after the room closes. If someone reports a person in a room, a note of who reported whom (by anonymous ID) and when is kept; the app cannot read it back.
• The daily nudge. If you ask for one, lofispot’s server keeps a token for your browser, your time zone, the hour you chose, the last day you focused, your streak, the day the last reminder was sent, how many in a row went unanswered, when the next is due, and when the record was made and last changed. Turning the nudge off removes the record. No names or tasks are ever in a reminder.
• Feedback. Signed in, the note you send from the You card is kept under your account with the time it was sent, the app version and the first 200 characters of your browser’s user-agent text; the app can add to it but not read it back. Signed out, the box opens a prefilled issue on GitHub instead: it is only sent if you submit it there, and then it is public, under your GitHub account.

Asking us to remove something

Write to lofispot10@gmail.com, or send a note from the feedback box in the You card, and say what you would like removed or copied. We reply within 2 working days. Your own data on your device is yours to clear at any time. What you posted to GitHub stays on GitHub.