Coffee Focus

Privacy Policy

Last updated: September 8, 2026

1. Data controller

The Coffee Focus app and website are published by Abdelnaim BOUALI. Contact: abdelnaimbouali@gmail.com.

2. Data we collect

To run Coffee Focus, we may process:

  • for an account: username, display name, email address, password hash or Google identifier, and optional profile data;
  • for a session: username, code, timer plan, breaks, participants, history, saved sessions, statistics, and activity streaks when those features are used;
  • for a former purchase: Stripe references and historical access status required for accounting or to manage a subscription started before Coffee Focus became free; Coffee Focus does not receive your full card details;
  • for emails: address, requested recap content, delivery status, proof of the request, and unsubscribe choices;
  • technical and measurement data: URL, referrer, device, approximate country, usage events, and pseudonymized fingerprints of the IP address or browser.

3. Purposes

  • enable collaborative session creation and participation;
  • synchronize the timer in real time across participants;
  • manage accounts, profiles, saved sessions, and statistics;
  • manage former payments or subscriptions started before Coffee Focus became free, where applicable;
  • send requested recaps, account messages, reminders, and newsletters, with the available unsubscribe mechanisms;
  • measure use, improve journeys, and ensure service stability, security, and availability;
  • display and measure advertising according to the consent choices described below.

4. Legal basis

Processing required for accounts, sessions, and purchases is used to provide the requested service or contract. Security, abuse prevention, and internal measurement needed to improve the service rely on Coffee Focus's legitimate interests. Non-essential cookies, Microsoft Clarity measurement, advertising uses subject to consent, and optional session recap delivery rely on your consent, which you can withdraw as described below.

5. Data sharing

Data required to operate Coffee Focus is not sold to third parties. Some technical or advertising providers may process limited data to provide their services, measure performance, or display ads.

  • Hetzner Online GmbH: hosting of the site, API, and data required for the service;
  • Google Identity: optional sign-in with Google;
  • Stripe: management of former payments or subscriptions, where applicable; Coffee Focus no longer offers new paid plans;
  • Resend: delivery of Coffee Focus emails;
  • Discord: internal notifications about former purchases, containing only a masked email address and Stripe reference;
  • Microsoft Clarity: journey measurement, only after consent;
  • Google Ads and Google AdSense: advertising measurement and ad delivery according to your choice;

You can read the privacy policies of Hetzner, Stripe, Resend, Microsoft, and Discord.

6. Google AdSense and advertising

Coffee Focus uses Google AdSense to display and measure advertising on certain editorial pages. Google and its partners may use cookies, identifiers, or similar technologies to serve ads, measure their performance, limit repetition, prevent fraud and abuse, and personalize ads only where your consent allows it.

The provider is Google LLC and, depending on the service and your place of residence, the relevant Google entities. To understand how Google processes information from sites using its services, see How Google uses information from sites or apps that use its services.

7. Consent and Google CMP

Coffee Focus is configured to use Google's certified consent management platform (CMP), provided through Google Privacy & Messaging, to collect and transmit the choices of relevant users, particularly in the European Economic Area, the United Kingdom, and Switzerland. The message must be published in the AdSense dashboard before advertising is enabled.

The message lets you consent, refuse, or manage options. You can later change or withdraw your choice at any time with . Choices made in the CMP may be sent to Google services through Google consent signals, also known as Consent Mode, so those services can adapt their behaviour to your preferences.

Advertising storage, ad personalization, advertising user data, and analytics storage are denied by default on Coffee Focus and then updated according to the choice transmitted by the CMP.

8. Cookies, advertising technologies, and third-party services

Cookies and similar technologies used on Coffee Focus notably fall into the following categories:

  • Necessary: authentication, security, language, local preferences, and session operation; these are not used to personalize advertising.
  • Analytics: Microsoft Clarity, only after consent, to understand use and fix user journeys.
  • Advertising: some technologies support the technical operation of advertising, ad delivery and measurement, or fraud prevention; uses subject to consent are enabled only according to your choice.
  • Personalization: ad selection based on activity, only when accepted.

Third-party service — Google AdSense. Provider: Google LLC / relevant Google entities. Purposes: ad delivery, advertising measurement, fraud prevention, and ad personalization where you have consented. The detailed list of advertising partners and their purposes is available in the consent message's options.

Refusing does not prevent use of Coffee Focus's essential features. You can also read Google's official information about advertising technologies and its Privacy Policy. Google ad personalization can also be managed in Google's My Ad Center.

9. Data retention

Account, profile, saved-session, and statistics data is kept while the account or relevant feature is used, then deleted or anonymized when it is no longer needed, subject to legal and security requirements. Temporary session state is kept for the time required to synchronize and maintain the service.

Historical payment and subscription references are kept during the commercial relationship and then for the period required for accounting, tax, disputes, and fraud prevention. Recap requests, delivery logs, and suppression lists are kept to document the request, manage errors, prevent duplicate sends, and permanently honor objections. Requesting a recap does not automatically subscribe you to a newsletter or future emails.

10. International transfers

Depending on the provider and your place of residence, some data may be processed outside the European Economic Area, including in the United States. Each provider's information about those transfers and applicable safeguards is available in the policies linked in section 5.

11. Security

Network communications use standard security mechanisms (HTTPS/TLS) to protect exchanges between the app and the API.

12. Your rights

Under applicable regulations (including GDPR), you may request access, correction, deletion, restriction, or portability of your data, object to certain processing, and withdraw consent by contacting abdelnaimbouali@gmail.com.

You may also lodge a complaint with your competent data protection authority.

13. Updates

This policy may be updated. The date displayed at the top of this page is authoritative.