Privacy Policy
Last updated: October 24, 2025
Legal Information
Service Provider: FlouState (Sole Proprietorship)
Operator: Maksims Skridlevskis
Contact Email: privacy@floustate.com
Location: Spain
FlouState acts as the data controller for all personal data collected through our service.
Privacy First, Always
At FlouState, we believe that tracking productivity shouldn't mean sacrificing privacy. We've built our entire product around this principle. This policy explains what data we collect, why we collect it, and how we protect it.
What We Track
Coding Activity Patterns
- • Keystroke frequency - How often you type, not what you type
- • File activity - Workspace-relative file paths (e.g., "src/auth.ts" - never "/Users/you/secret-company/project/auth.ts") and edit timestamps, NOT file contents
- • Lines of code - Added and deleted line counts only (not the actual code)
- • Programming languages - Languages used in your sessions (e.g., TypeScript, Python)
- • Active vs idle time - When you're actively coding
Session Metadata
- • Session start and end times
- • Total duration and active coding time
- • Focus scores based on consistency
- • Git commits and branch names (no commit messages)
Account Information
- • Email address for authentication
- • GitHub username (if using GitHub OAuth)
- • Subscription status and billing information
- • Usage analytics (feature usage, not code content)
What We NEVER Track
- ✕Your actual code - We never see or store your source code
- ✕Keylogging - We don't record what you type
- ✕Screen recording - No screenshots or screen capture
- ✕Other applications - We only track VS Code activity
- ✕Browsing history - We don't monitor web activity
- ✕Personal files - No access to your documents or system
How We Protect Your Data
• Encryption - All data is encrypted in transit (TLS) and at rest
• Secure infrastructure - Hosted on Vercel with Supabase (SOC 2 compliant)
• Authentication - Secure OAuth 2.0 and token-based authentication
• Access controls - Row-level security ensures you only see your data
• Regular backups - Automated backups with point-in-time recovery
• No employee access - Your coding data is never accessed by our team
Data Sharing
We do NOT sell, rent, or share your personal data. Period.
We only share data in these specific cases:
- • Payment processing - Basic info with Stripe for billing
- • Legal requirements - Only if legally required (we'll notify you)
Note: If using AI insights (Pro feature), anonymized patterns may be sent to OpenAI for analysis. This never includes your actual code.
Leaderboard & Public Profiles
FlouState offers an optional public leaderboard and user profiles to help developers showcase their productivity and compete with the community.
What Data Is Public
When you opt into the leaderboard, the following data becomes publicly visible:
- • Total coding time - Your rank and total hours tracked (weekly and all-time)
- • Active days count - Number of days you've coded
- • Username - Your chosen username (e.g., floustate.com/leaderboard/yourname)
Optional Public Profile Information
If you enable your public profile, you can optionally share:
- • Display name, bio, and location
- • Social links (website, Twitter/X, GitHub)
- • Programming language breakdown
- • Top projects (project names only, no code)
- • Activity heatmap (coding days visualization)
- • Achievements and badges
Each profile field has its own privacy toggle in Settings. You control exactly what's visible.
Privacy Protection:
- • Leaderboard is opt-in only - disabled by default
- • Without enabling your public profile, you appear as "Anonymous User"
- • Two separate toggles: "Show on leaderboard" and "Enable public profile"
- • Work type breakdowns (creating/debugging/refactoring/exploring) are never shown on leaderboard - that's private Pro data
- • File paths, code content, and detailed session data remain private
- • You can disable leaderboard visibility anytime from Settings
Anonymous Leaderboard Participation
You can appear on the leaderboard without revealing your identity. If you enable "Show on leaderboard" but keep "Enable public profile" disabled, you will appear as:
- • Username: "Anonymous User"
- • No clickable profile page
- • Only your total time and rank are visible
- • All profile information remains hidden
Managing Your Public Presence
Control your leaderboard and profile settings from Settings > Leaderboard & Public Profile:
- • Toggle leaderboard visibility on/off
- • Enable or disable your public profile
- • Edit profile information (bio, links, location)
- • Control which profile fields are visible (granular privacy toggles)
- • Changes appear on the leaderboard within 1-5 minutes due to caching
Default Setting: Leaderboard and public profile are disabled by default. You must explicitly opt in to appear publicly. Disabling these settings removes you from the leaderboard immediately.
Research & Aggregate Statistics
FlouState may use aggregated, anonymized data for product research, blog posts, and public statistics about developer productivity trends.
What This Means
- • Only aggregate patterns are analyzed (e.g., "developers use debugger 1% of time")
- • No individual users can be identified from research data
- • Personal information (name, email, account details) is never shared
- • Your code content is never included in research data
- • Research helps improve FlouState and benefits the broader developer community
Examples of Aggregate Research:
- • "100+ developers spend 1% of coding time using debugger tools"
- • "Peak productivity occurs at 2 PM across all users"
- • "Developers spend 40% of time creating new features"
Opt-Out
You can disable research participation anytime in Settings > Privacy. This only affects future data collection for research purposes. Opting out does not affect your ability to use FlouState - all features remain fully functional.
Default Setting: Research participation is enabled by default to help improve FlouState and contribute to developer productivity research. You can opt out at any time.
Your Privacy Rights
You have complete control over your data. Under GDPR and other privacy laws, you have the following rights:
Right to Access
View all personal data we have about you, including coding activity patterns and account information.
Right to Data Portability
Export your data in JSON format. Available to all users (Free tier can export last 7 days, Pro users can export full history).
Right to Erasure ("Right to be Forgotten")
Permanently delete your account and all associated data. Processed within 30 days.
Right to Rectification
Correct inaccurate personal data (email, name, etc.) from your account settings.
Right to Restrict Processing
Disable analytics tracking, AI insights, or other optional data processing features.
Right to Object
Object to data processing for specific purposes. Contact privacy@floustate.com to exercise this right.
How to Exercise Your Rights:
- • Manage data from Privacy Settings
- • Email privacy@floustate.com for deletion or access requests
- • We will respond within 30 days as required by GDPR
Data Retention
We retain your data based on your account status:
- • Active Accounts: Data retained indefinitely while your account exists, even if you haven't logged in recently
- • Free Tier Users: Data older than 7 days is hidden from dashboard view but fully retained in case you upgrade to Pro
- • Deleted Accounts: All personal data permanently deleted within 30 days of account deletion
- • Backup Systems: Deleted data may persist in encrypted backups for up to 90 days, then permanently removed
Your data, your control: You can request data deletion anytime by contacting privacy@floustate.com or deleting your account from Settings. We will process deletion requests within 30 days as required by GDPR.
Trial Period Data
All new users receive a 30-day trial of Pro features. Here's how we handle your data during and after the trial:
- • During Trial: Full access to all Pro features and unlimited history
- • After Trial (Free Tier): Data older than 7 days is hidden but retained for 1 year in case you upgrade
- • If You Upgrade: All historical data immediately becomes accessible again
You can export your full history during the trial or anytime as a Pro user. Free tier users can export their last 7 days.
Cookies & Local Storage
We use minimal cookies and local storage:
- • Authentication - Session tokens (required)
- • Preferences - UI preferences and settings
We use Vercel Analytics for privacy-friendly, cookieless usage tracking. We don't use tracking cookies or sell data to advertisers.
International Data Transfers
FlouState is operated from Spain. Your data is stored and processed in:
- • United States - Primary infrastructure (Vercel, Supabase)
- • EU (optional): Supabase provides EU data residency options upon request
International Data Transfers: While FlouState is operated from Spain (EU), data is stored in the United States. We ensure appropriate safeguards through:
- • SOC 2 compliant infrastructure (Supabase, Vercel)
- • Standard Contractual Clauses (SCCs) with our processors
- • Strong encryption in transit and at rest
- • Your GDPR rights remain fully enforceable
EU users can request data residency in Europe by contacting privacy@floustate.com.
Children's Privacy
FlouState is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16.
If you believe we have inadvertently collected data from a child under 16, please contact us immediately at privacy@floustate.com and we will delete it within 30 days.
Questions?
If you have any questions about this privacy policy or how we handle your data, we're here to help.
privacy@floustate.comWe may update this policy as we improve FlouState. We'll notify you of any significant changes.
Thank you for trusting us with your productivity data. We take that responsibility seriously.