Last updated: 19 May 2026
Your block lists, focus sessions, statistics, and lock configurations stay on your Mac — they are never uploaded. To buy FocusDragon Pro you create an account; we then store your email, display name, optional age range, and your entitlement state. Nothing about what you block, when you focus, or what is on your screen is sent anywhere. You can export or delete everything we hold about you at any time from Settings → Account → Delete account, or by emailing hi@focusdragon.app.
When you sign in (Google or Apple sign-in, via our authentication partner), we store your email address, display name, and an optional age range you choose during onboarding. This is held by our authentication partner on EU-hosted infrastructure. It is used only to: (1) identify you across devices, (2) attach your subscription entitlement to a stable identity, and (3) personalise the in-app greeting. Auth tokens (refresh tokens) are kept on your Mac in macOS Keychain; a Secure, first-party session cookie is set on the website when you sign in there to complete checkout.
If you buy FocusDragon Pro, payment is handled entirely by our payments partner. They collect and store your card number, billing address, and any other payment-method information directly. We never see your card number. We store only: a customer ID linking your account to your billing record, and your entitlement. Receipts and chargeback records are retained by our payments partner for 7 years to satisfy accounting law (we cannot delete them earlier even on request).
Every block list, every lock configuration, every focus-session log, every minute of statistics, the blocks you've created — all of this is stored in macOS Application Support and never leaves your computer. There is no exception: nothing about your screen, your browsing, or your focus sessions is sent to us or to anyone else.
The Chrome / Safari / Firefox extensions read only the URL of pages you visit and match them against your block list. No page body text, no DOM, no cookies, no form contents — just the URL string. The extension communicates with the local FocusDragon app on your Mac via the browser's native-messaging channel; nothing it reads is sent to our servers.
Our hosting partner keeps standard HTTP access logs for FocusDragon's server and focusdragon.app for up to 30 days. These contain timestamp, IP address, request path, response code, and user-agent — used for debugging and abuse prevention. They are not joined to your account or used to profile you.
focusdragon.app sets three first-party cookies: a Secure session cookie when you sign in (readable by the site's own code so you stay signed in, therefore not HTTP-only), a short-lived HTTP-only `fd_post_auth_redirect` cookie that remembers where to send you after sign-in, and `fd_landed_at`, which records when you first arrived. The site also uses Google Analytics 4 to measure page views and referrers; it sets its own `_ga` cookies and receives your IP address (which Google truncates), page URL, referrer and coarse device information. It runs only on focusdragon.app — never on preview deployments — and we do not send it your email, name, account ID, or anything you type into a form. There are no advertising pixels, no marketing cookies, and no cross-site ad tracking. You can block it with any content blocker or your browser's Do Not Track / tracking-protection setting, and the site works identically without it.
Inside the Mac app you can opt in to anonymous product analytics handled by our optional analytics partner. It is OFF by default. If you enable it, we receive aggregate, non-identifying event names ("a block started", "AI verdict returned") with no block contents, no app names, no URLs, no page text, and no PII. You can disable it from Settings → General → Privacy at any time; existing events are not retroactively deleted but new events stop.
If FocusDragon crashes, a stack trace is sent to our error-monitoring partner with all personal context stripped (no block data, no file paths beyond the bundle, no clipboard, no environment). You can disable crash reporting in Settings → General → Privacy. Crash reports help us fix bugs that would otherwise silently affect users.
We use the following providers, each performing the role described: our authentication partner (auth + accounts + entitlements DB; EU-hosted infrastructure), our payments partner (billing; US/EU); our hosting partner (hosting; EU-hosted infrastructure); our error-monitoring partner (crash reports; EU-hosted infrastructure); our optional analytics partner (optional analytics; EU-hosted infrastructure). Where data is transferred outside the EEA we rely on the EU Standard Contractual Clauses.
If you are in the EU (GDPR Article 15–22), UK, or California (CCPA / CPRA) you have the right to access, correct, port, or delete the personal data we hold about you, and to receive an export in a machine-readable format. You can export all data we hold about you anytime via Settings → Export my data in the Mac or iOS app — you'll receive a ZIP archive containing every row tied to your account (subscriptions, entitlement history, attribution, cancellations, AI usage totals, and any waitlist record). You can also email hi@focusdragon.app to request the same. We will respond within 30 days as required by GDPR Article 15. Account deletion is also self-serve from inside the Mac and iOS apps: Settings → Account → Delete account permanently removes your account record, your subscription, and any entitlements. Records of past payments held by our payments partner are retained as required by accounting law (typically 7 years).
FocusDragon is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. EU users under 16 require parental consent. If we learn we've inadvertently collected data from a minor, we delete it.
When we materially change this policy we update the "last updated" date at the top, list the change in the in-app changelog, and — for changes that expand what we collect — surface a notice in the app the next time you open it. Continued use after that notice constitutes acceptance.
Privacy questions, deletion requests, DSARs, or concerns: hi@focusdragon.app. For anything else, use our support page at focusdragon.app/contact. We aim to respond within two business days.