Privacy Policy

1. Introduction

At Anti-Productivity Tracker, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

TL;DR: Your data stays in your browser. We don't sell it, we don't mine it, and we barely even see it.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address - for account identification and recovery
• Username - for your profile and display purposes
• Password - stored as a hashed value (we never see your actual password)
• Authentication provider - if you sign in with Google or Discord

2.2 Activity Data

When you log activities, we collect:

• Activity descriptions - what you did
• Duration - how long you spent
• Category - the type of activity
• Timestamp - when the activity occurred

2.3 OAuth Data

If you sign in with Google or Discord, we receive your email address and name from the provider. We do not access any other information from your Google or Discord account.

3. How We Store Your Data

Important: Your activity data is stored locally in your browser using localStorage. This means:

• Your data never leaves your device
• We don't have access to your activity logs
• Your data is tied to your specific browser and device
• Clearing browser data will delete your activities
• Private/incognito mode will not persist data

User account information (email, username, hashed password) is also stored in localStorage. In a production environment, this would be stored in a secure database with proper encryption.

4. How We Use Your Data

We use your information to:

• Provide and maintain the Service
• Authenticate your identity when you log in
• Display your activity statistics and charts
• Show your public profile (if you enable it)
• Improve and optimize the Service

We do NOT:

• Sell your data to third parties
• Use your data for advertising
• Share your data with anyone (except what you choose to make public)
• Track you across other websites
• Send you marketing emails (we don't even have your email on a server)

5. Public Profiles

By default, your profile is private. If you choose to make your profile public:

• Your username will be visible to others
• Aggregate statistics (total time, category breakdowns) will be public
• Anyone can view your profile at /@yourUsername
• Your individual activity descriptions remain private

You can toggle your profile visibility at any time in Account Settings.

6. Cookies and Tracking

We use minimal cookies for essential functionality:

• Authentication cookies - to keep you logged in (via NextAuth.js)
• Session tokens - to maintain your session securely

We do NOT use advertising cookies, analytics cookies, or third-party tracking cookies.

7. Third-Party Services

We integrate with third-party authentication providers:

• Google OAuth - covered by Google's Privacy Policy
• Discord OAuth - covered by Discord's Privacy Policy

When you use these services, their respective privacy policies apply to the data they collect.

8. Data Security

We take reasonable measures to protect your data:

• Passwords are hashed (not stored in plain text)
• Authentication uses secure session tokens
• HTTPS encryption for data in transit (in production)

However, no method of transmission or storage is 100% secure. Since data is stored in your browser's localStorage, you are responsible for keeping your device secure.

9. Your Rights and Choices

You have the right to:

• Access your data - all your data is visible in the app
• Delete your data - clear your browser's localStorage or delete individual activities
• Export your data - use browser developer tools to export localStorage data
• Control visibility - toggle public/private profile in Account Settings
• Close your account - clear your localStorage to remove all account data

10. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

11. Data Retention

Your data is retained in your browser's localStorage indefinitely until you:

• Manually delete activities
• Clear your browser data
• Uninstall your browser
• Switch to a different device

We do not have the ability to delete your data from our end because we don't store it on our servers.

12. International Users

Since all data is stored locally in your browser, there is no international data transfer. Your data stays on your device, wherever you are in the world.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our GitHub repository or support channels.