A product about protecting attention that harvested behaviour to sell would be an unpleasant kind of joke. So here is the whole position, in plain terms.
Two ways to use Eonara
Eonara works without an account. It also works with one. The difference matters for privacy, so it is stated first and plainly.
Without an account (Guest Mode): Everything Eonara knows about your use of it is stored in your own browser and never sent anywhere. Your tasks, settings, visual preferences, and focus configuration live in your browser’s local storage. They are not transmitted to us, they are not synchronised between your devices, and we cannot see them. Clearing your browser data deletes them, and we have no copy.
With an account (Authenticated Space): You may choose to sign in using a Google account. When you do, Eonara creates a personal Space for you. Your task list, visual preferences (the world you chose, your screen phrase, mood, and typography style), and interface sound setting are synchronised to a database hosted by Supabase. Your profile — display name, avatar URL, and timezone — is stored so the experience can greet you properly. This data belongs to you. It is protected by row-level security policies that ensure only your authenticated account can read or modify it.
You can use Eonara fully without creating an account. Signing in is optional and exists only to let your Space follow you across devices and sessions.
What stays on your device
When you use Eonara without signing in, the following are kept in your browser’s local storage:
- your chosen focus length,
- your short and long break lengths, and how often a long break is offered,
- your appearance and motion preferences,
- whether interface sounds are on,
- your task list, including the names you gave your tasks and the lengths attached to them,
- the visual world you last chose, your screen phrase, mood, and typography style,
- your selected atmosphere, music track, volume, and frequency preferences,
- the position of the Pocket window.
All of this sits on the device you are reading this on. In Guest Mode, your Space stays in your browser and isn’t synced to an Eonara account.
Additionally, your browser’s session storage holds temporary continuity flags (such as whether you just crossed the threshold into the application) that vanish when you close the tab.
What changes when you sign in
When you authenticate, your task list, visual Space preferences (world, words, mood, typography), and interface sound toggle are written to your personal Space in the Supabase database. Your Google profile information (display name, avatar, timezone) is stored in a profiles table.
The following remain strictly local even when signed in:
- appearance preference (day/night/auto)
- motion preference
- global timer durations (focus length, break lengths)
- atmosphere and music track selection
- volume levels
- Pocket position
- onboarding and discovery flags
- UI state (panel positions, presentation mode)
- active timer runtime state
Your browser’s local storage continues to hold these values. They are not uploaded. Cloud-synchronised data is limited to Tasks, Visual Space, and Sound Enabled — nothing more.
Security of your account data
Account data is stored in a Supabase PostgreSQL database. Every table uses row-level security (RLS) policies enforced at the database level. These policies ensure that your data can only be accessed by requests carrying your authenticated session token. No other user can query your Space, your tasks, or your profile through the application’s API.
Authentication tokens are managed by Supabase Auth and stored in your browser’s local storage under Supabase’s own key namespace. Eonara does not independently read, log, or transmit these tokens.
Cookies
Eonara sets no cookies. Zero first-party cookies are written by the application.
The HTTP response headers from the static site contain no Set-Cookie
directives. Authentication tokens are held in browser local storage by the
Supabase client library, not in cookies.
Browser storage (localStorage and sessionStorage) is not the same thing as cookies. Eonara uses browser storage extensively for Guest Mode preferences and temporary session continuity. Unlike cookies, browser storage is never automatically sent with network requests to servers.
The living visual
The application plays video backgrounds, served from this site or from our media domain like any other file. Requesting them produces an ordinary web-server request. They contain no tracking, no beacons and no audio.
Analytics
This site runs no analytics. There is no Google Analytics, no Meta Pixel, no Mixpanel, no PostHog, no Plausible, no Umami, and no telemetry of any kind.
If that changes we will name the provider on this page before it is switched on, and we will prefer a provider that does not use cookies and does not build profiles of individuals. If analytics are ever added, this section will say what is measured and how to opt out.
Third parties
This site links to other sites — research papers, publishers, documentation. Following a link means the destination’s own privacy practices apply, and we have no control over or insight into those.
Fonts are served from this site rather than from a font network, so reading these pages does not tell a third party that you did.
Video and audio assets are served from our media domain. Requests to this domain are standard HTTP range requests with no tracking headers.
Authentication is provided by Supabase (using Google OAuth). When you sign in, your interaction with Supabase’s authentication service is governed by their privacy practices. Eonara does not add any additional tracking to this flow.
Product purchases through the Library are handled by Gumroad. Clicking a purchase link takes you to Gumroad’s checkout. Their privacy policy applies to that transaction.
We do not currently operate a mailing list. If one exists later, it will be opt-in, it will say what you are subscribing to, it will have a one-click unsubscribe, and the addresses will not be sold, shared or used for anything other than the thing you subscribed to.
Research
We have written elsewhere about wanting to publish original research on how people actually use focus sessions — how long they choose, where sessions get abandoned, whether the twenty-five minute convention is a real preference.
None of that data exists, because none of it is being collected.
If we ever do collect it, the conditions are already decided and stated publicly: explicit opt-in that defaults to off, aggregation before any analysis so that no individual session is examined, a published method with the sample size, and the conflict of interest stated in every study. If those conditions are not met, we do not run the study.
What we do not collect
Eonara does not collect, store, or transmit:
- your IP address (beyond standard web server access logs required to serve any website)
- your precise geolocation
- keystroke dynamics or typing patterns
- cross-site identifiers or advertising IDs
- canvas fingerprints or device fingerprints
- browsing history outside of Eonara
Task titles and custom screen phrases you type are stored as part of your Space (either locally or in the database if authenticated). They are never analysed, aggregated, or used for any purpose beyond displaying them back to you.
Your rights
In Guest Mode: All your data is in your browser. Clearing your browser’s local storage removes it completely. There is nothing on our side to access, delete, or export.
With an Account: You can delete your tasks and reset your visual preferences within the application. To request complete deletion of your account data (profile and Space), contact us. Because your data is isolated by row-level security, deletion of your account removes all associated records.
Data portability: your task list and preferences are simple structured data. If you need an export, contact us.
Changes to this page
If Eonara later collects any new category of personal data, operates in a way that engages data-protection regimes differently, or adds new third-party integrations, this page will change first. The date at the top reflects the last update.
This page describes what the product actually does, in plain language. It has been reviewed against the current codebase. If Eonara’s architecture changes in ways that affect data handling, this page will be updated before those changes ship.