Privacy Policy

Last updated: August 2026

Focus Companion is built around a simple rule: look at as little as possible, keep as little as possible, and never send more than is needed to answer one question: "does this page match what I said I'm working on?" This page explains exactly what that means in practice.

What Focus Companion looks at

While a focus session is running, on the page you're actively viewing, Focus Companion may read:

• The page title, meta description, and headings (each capped in length)
• A short, capped excerpt of the page's main text content
• Aggregate behavior signals: scroll activity, edit/mutation counts, media playback state, navigation frequency

It does not capture raw keystrokes, form field values, or passwords. Editable surfaces (documents, comment boxes, message composers, search inputs) and other sensitive content types are automatically excluded from text capture. Only read-only, non-sensitive pages are eligible at all.

Before any of this bounded text leaves your device, it passes through an automatic filter that strips anything that looks like an API key, token, or secret.

Where it goes, and why

The bounded page snapshot, together with your session goal, is sent to our gateway server and forwarded to DeepSeek (currently the only AI provider we use in production), solely to judge whether the current page is relevant to your stated goal for that session. Nothing is sent unless a session is running, and only the capped fields described above are ever included. This can include read-only portions of signed-in or social pages (for example, a feed you're scrolling), but never editable surfaces on them. DeepSeek may cache matching prompt prefixes on their end; no keystrokes, form values, URL paths or query strings, screenshots, or clipboard data are ever sent, on any page.

What we store, and what stays on your device

Our server does not store page content. Each analysis request is processed and discarded; it exists only for the duration of that one request/response.

What our server does keep is a one-way cryptographic hash of a randomly generated, per-install device identifier, used only to apply rate limits and prevent abuse. We never see or store your raw device identifier, there is no user account, and nothing links activity across two different installs or devices.

Everything else (your goal text, session history, and reports) lives entirely in your browser's local storage. It is never synced to any server. You can export or delete this data at any time from the extension, and uninstalling the extension removes it entirely.

What we don't do

• We do not sell or share your data with third parties for advertising.
• We do not run any analytics, tracking, or telemetry SDK.
• We do not require or use an account, login, or identity of any kind.

Your controls

You can export a session's data, delete it, or clear all local state at any time from the extension popup. You can also exclude specific sites (including whole subdomains with a wildcard) from ever being analyzed; excluded sites never have their domain, title, or page text leave your device. Uninstalling the extension removes everything Chrome stored on its behalf.

Children's privacy

Focus Companion is not directed at children and is not intended for use by anyone under 13.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page. Continued use of the extension after a change means you accept the update.

Contact

Questions about this policy or your data: huynhthenghia311@gmail.com.