Privacy Policy

This policy is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and describes how personal data is processed when you use Tabula: Pomodoro Timer (the “App”), available at tabula-pomodoro-timer.lovable.app.

1. Data controller

2. Data we process

Navigation data. When you open the App, the hosting infrastructure automatically receives technical data needed to deliver the pages, such as IP address, date and time of the request, pages requested, referring URL, and browser and device information. This data is used only to run the App, keep it secure and understand aggregate usage, and is not combined with other information to identify you.

Timer data stored on your device. Your sessions, task labels, notes, statistics and settings are saved only in your browser’s local storage. They are not sent to us and we cannot see them. Backup files you download from the Daily Log stay on your device unless you choose to share them.

No direct collection. The App has no sign-up, contact form, newsletter or reserved area, and does not ask you for personal data.

Fonts. Typefaces are loaded from Google Fonts, a service of Google, which receives your IP address and browser information when the fonts are requested.

3. Purposes

• delivering the App and its features;
• security of the systems and prevention of abuse;
• anonymous, aggregate analysis of usage to improve the App;
• complying with legal obligations or requests from authorities.

We do not carry out profiling, direct marketing or promotional communications.

4. Legal basis

The controller’s legitimate interest in operating, securing and improving the App (Art. 6(1)(f) GDPR); compliance with legal obligations where applicable (Art. 6(1)(c)); your consent where required, for example for desktop notifications, which your browser asks you to allow.

5. Recipients

Data may be processed by hosting and infrastructure providers, technicians responsible for maintenance, and third-party providers (such as Google LLC for fonts) only for the services they deliver, and by people authorised by the controller under confidentiality obligations. Data is not sold or disclosed for commercial purposes.

6. Transfers outside the EU

Some providers, including Google, may process data outside the European Union, in particular in the United States. Such transfers rely on the safeguards provided by the GDPR, including the EU–US Data Privacy Framework or other adequate measures under Articles 45 and 46 GDPR.

7. Retention

Navigation data is kept only as long as needed for technical and security purposes. Timer data remains in your browser until you delete it — for example with “Erase history” in Settings or by clearing your browser storage.

8. Your rights

You may exercise at any time the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction, objection, withdrawal of consent where given, and data portability where applicable. Write to the PEC address above. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. Cookies

See the Cookie Policy.

10. Changes

We may update this policy. The date at the top shows the latest version.