Short version
Pomodoro Timer is a free browser-based Pomodoro timer with 25-minute work intervals, short breaks, and a long break cycle. Whatever you type or paste into the tool stays entirely in your browser and is never sent to our servers. We run aggregate page analytics (Google Analytics 4), explained in full below.
Who we are
The data controller for this site is ThinkStack Limited, a company registered in Ireland (CRO number on file). Registered office: 51 Bracken Road, Sandyford, Dublin D18 CV48, Ireland. Contact: info@brighttoolstudio.com.
What we collect
Tool inputs
Nothing. The tool runs entirely in your browser. Your inputs are never transmitted to our servers and we have no server-side logging of tool inputs or outputs.
Google Analytics 4 (GA4)
We use Google Analytics 4 to collect aggregate, anonymised page metrics: pages visited, approximate country, browser family, and session duration. Consent Mode v2 is configured with all storage denied by default — GA4 does not set cookies or fingerprint your device unless you explicitly grant consent. Google acts as a data processor under our instructions. See Google's Privacy Policy and Google Analytics data practices. Data is retained for 14 months.
Cloudflare
Cloudflare handles site delivery and edge caching. It processes IP addresses in transit and TLS metadata under its own privacy policy. We do not retain server logs ourselves. We use Cloudflare Web Analytics (cookieless, no fingerprinting) for aggregate request metrics.
Cookies and storage
This site sets no first-party cookies. When GA4 consent is denied (the default), Google does not set analytics cookies. If you grant consent via our consent prompt, GA4 measurement cookies may then apply under Google's standard terms.
Some tool features (e.g. draft autosave) use localStorage
in your browser. This data never leaves your device.
Legal basis (GDPR)
- Tool operation — no personal data processed, so no legal basis required.
- Cloudflare operational data — legitimate interests (Art. 6(1)(f)) in operating a secure, performant website.
- GA4 analytics (default-denied) — legitimate interests once consent is withheld; full analytics processing requires consent (Art. 6(1)(a)).
Your rights
Under the GDPR and Irish data-protection law you have the right to access, rectification, erasure, restriction, portability, and objection regarding personal data we hold about you. Because the tool itself processes no personal data, there is very little personal data involved at all. GA4 analytics can be opted out via Google's tools.
To exercise any right or to lodge a complaint, contact info@brighttoolstudio.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC), our lead supervisory authority.
Children
This site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will delete it.
Changes
Material changes to this policy will update the "last updated" date at the top of this page. The change will also be reflected in the site's git history.
Contact
Questions, requests, or complaints: info@brighttoolstudio.com.