Privacy Policy – COCO

Last updated: 20 October 2026

In short

• What you enter in COCO (tasks, settings, mood, water and statistics) is stored on your device only. We have no server that receives it, and we have no access to it.
• The Extension itself does not collect your name, email address or any other identifying detail. Signing up on our Website is optional (clause 6).
• We do not sell personal data, and COCO has no analytics or advertising tools of its own.

This summary does not replace the full Policy below.

1. Who is responsible for your data

1.1 This Policy applies to the COCO browser extension for Google Chrome ("COCO" or the "Extension"), to the website coco-wellbeing.netlify.app (the "Website"), and to communications with us.

1.2 The controller of the personal data described in this Policy, within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), is Tagel Rozen ("we", "us").

1.3 For privacy questions and requests: cocofocus100@gmail.com.

2. Data stored on your device

2.1 COCO stores in your browser's storage, on your device, the data it needs to work, including: settings and preferences; tasks and "my intention for today"; your latest mood answer; water, break and exercise counts; the sites on your Focus Shield list; messages you have marked; and playlist links you have added.

2.2 This data is not sent to us or to anyone else, and it is not synced to your Google account. We have no access to it, so we cannot view, correct or delete it for you.

2.3 Some of this data is deleted automatically after a short period, such as daily statistics and completed tasks. You can delete items within the Extension, and removing the Extension from your browser deletes all the data it has stored.

3. How the Extension works on web pages

3.1 To display its interface (the bubble, reminders, timer and tasks), the Extension runs on every web page. To do so it checks, on your device only, among other things: whether the open site is on your Focus Shield list while a focus timer is running; whether a video call is in progress or the page is in full screen, so as not to interrupt; and whether the mouse or keyboard is active, without reading what was typed.

3.2 The Extension does not read page content, form fields, cookies or the clipboard, and does not keep a browsing history. Nothing from these checks leaves your device.

4. Third-party services

4.1 The Extension connects to third-party services only when you use the related feature:

(a) Video list: when you open the playlists panel or COCO's small music window, the list of videos from our YouTube channels and their thumbnails are loaded from YouTube;

(b) YouTube player: when you choose a video, COCO's small music window opens and loads our player page from the Website and the YouTube player (from youtube-nocookie.com). YouTube may set cookies and similar technologies, count a view and show ads, in accordance with Google's policies. The YouTube player loads only after you choose a video, following a notice shown next to the video list. You can close the music window at any time and delete cookies in your browser settings;

(c) Radio: when you turn on the radio, your browser connects to the Galgalatz live stream and to its now-playing information;

(d) Links: clicking a link (for example to Spotify, Apple Music, a tutorial video, sending feedback through Gmail or Outlook, or the Website) opens that service in a new tab.

4.2 In each of these cases your browser connects directly to the service, and the service receives your IP address and technical details about your browser, as with any website visit. Except as described in clause 5 regarding the Website, we do not receive this data. Each service operates under its own terms and privacy policy, including Google's Privacy Policy (policies.google.com/privacy).

5. The Website

5.1 The Website is hosted by Netlify, which records technical data in its server logs, such as IP address, browser type and time of visit, to operate and secure the Website.

5.2 The Website sets no cookies of its own and uses no analytics or advertising tools of its own. After you sign up, the sign-up page stores a marker in your browser showing that you have signed up, so that you are not asked to fill in the form again.

6. Signing up for updates

6.1 Signing up on the Website is optional. To sign up, you need to provide an email address, and you may also add a name; after you sign up, the Website shows the install button. The Extension is also available in the Chrome Web Store.

6.2 When you sign up, we collect: your email address; your name, if you provide it; the date and time of sign-up; whether you agreed to receive marketing emails, and the consent wording shown to you; and where you came to the sign-up page from (for example, Instagram or the Extension).

6.3 We use these details to:

(a) send service notices about COCO, such as security notices or notices of changes to this Policy;

(b) if you ticked the consent box, send tips, updates, news and offers about COCO and other products and services from the COCO house (ours only, not third parties), in accordance with the consent wording shown to you;

(c) understand, in aggregate, through which channels people sign up.

6.4 You may withdraw your consent to marketing emails at any time, using the unsubscribe option in each marketing email or by contacting us, without giving a reason. Withdrawing does not affect your use of the Extension.

7. Contacting us

When you email us, including to send feedback, we use your email address, name and the content of your message to reply to you. Please do not include medical or other sensitive information in your message.

8. Purposes and legal bases

8.1 We process personal data for the following purposes and on the following legal bases:

8.2 The data stored on your device (clause 2) remains under your control and does not reach us.

8.3 We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects.

9. Who receives your data

9.1 We do not sell or rent personal data, and we do not share it with third parties for advertising.

9.2 We use Netlify (Website hosting), Brevo (receiving sign-ups, the sign-up list and sending our emails) and Google (our mailbox).

9.3 Personal data may be disclosed to a competent authority where required by law.

9.4 The third-party services listed in clause 4 receive data directly from your browser, as described there.

10. Transfers outside the European Economic Area

Some of our service providers, including Netlify and Google, may process personal data in the United States. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, or on the standard contractual clauses approved by the European Commission, as applicable. You may contact us for further information.

11. Retention

11.1 Sign-ups: for as long as you remain signed up. After a deletion request, your details will be deleted within a reasonable time, except for a minimal record of your consent and its withdrawal, kept only as long as needed to honour your request and to demonstrate compliance with the law.

11.2 Messages: for as long as needed to handle your message and any follow-up.

11.3 Website server logs: for a short period, in accordance with the hosting provider's policy.

11.4 Personal data needed to establish, exercise or defend a legal claim will be kept until the matter is resolved.

12. Your rights

12.1 Subject to applicable law, you may request access to your personal data and a copy of it, its rectification, its erasure, restriction of its processing, and its portability.

12.2 You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interest, and you may object at any time to marketing emails, without giving a reason.

12.3 You may withdraw any consent you have given at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

12.4 Requests may be sent to cocofocus100@gmail.com. We will respond within the time limits set by law. We may ask for additional information to verify your identity.

12.5 You may lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live or work or where the alleged infringement took place.

13. Minimum age

The Extension, the Website, signing up for updates and the emails we send about COCO and our other products are intended for people aged 16 and over. We do not knowingly collect personal data of anyone under 16. If we learn that someone under 16 has signed up, we will delete their sign-up details (clause 6.2), except for a minimal record needed so that we do not contact them again (clause 11.1), and stop emailing them. A parent who believes their child has signed up may contact us at the address in clause 1.3. Data that the Extension stores on your device (clause 2) never reaches us and is deleted when you remove the Extension from your browser.

14. Security

We take reasonable technical and organisational measures to protect personal data, appropriate to the level of risk. No security measure guarantees absolute protection.

15. Chrome Web Store

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The data the Extension handles is used only to provide the Extension's features, is not sold, and is not used for personalised advertising or to determine creditworthiness.

16. Changes to this Policy

We may update this Policy from time to time. The updated version will be published on this page with its update date. If we make a material change, we will take reasonable steps to bring it to your attention by appropriate means, such as a notice on the Website, in the Extension or by email to people who have signed up.

17. Contact

cocofocus100@gmail.com