Privacy

Blumour is built to need as little about you as possible. You can use the scene, music, timer and task list without an account; then everything stays in your own browser. This page explains what we store when you do sign in, why, and which services are involved.

What stays in your browser

• Your settings (station, volumes, ambient mix, timer rhythm), the current timer, and your task list.
• Focus sessions you complete as a guest, until you sign in and they move to your account.

This is stored in your browser's local storage. Clearing site data removes it.

The Blumour app for iPhone and Android

The app works the same way: as a guest, your settings, timer, tasks, exams and focus sessions stay on the phone, and deleting the app removes them. The city scene in the app is loaded from this website. Timer alerts are scheduled on the phone itself; no push service is involved. The app does not use the microphone, your location, advertising identifiers or analytics.

What we store when you have an account

• Your email address, and your name and profile picture if you sign in with Google. If you sign in with Apple, your name (if you share it) and your email, which can be a private relay address from Apple.
• An optional username so friends can find you.
• Your tasks and projects, focus sessions (start, end, rhythm, linked task and project) and settings, to sync devices and show stats.
• If you share a project or join one, everyone in it sees its tasks, who created or is assigned each one, the names and profile pictures of the people in it, and how much time each person focused on that project and how many of its tasks they finished (never the rest of their history). Leaving the project, or its owner removing you, ends that.
• If a project's owner invites you by email, we keep your address with that project until you answer the invitation or the owner cancels it. You see the invitation only when signed in with that address; the owner never learns whether it belongs to an account.
• Rooms you create or join, messages you send in them, and your friend connections.
• When you were last active and which room you are in, visible only to accepted friends.

Room members see your name, picture and focus status while you are in the room. Your current task is shared with a room only if you switch that on.

Cookies

We only use cookies that the app needs to work: your sign-in session, and, if you connect them, the keys that let us talk to Spotify and Todoist on your behalf. They are not used for advertising or tracking. If we measure usage, we do it without cookies and without building a profile of you.

Services we rely on

• Supabase stores account data and delivers live room updates. While you play a station, your browser is counted in that station's anonymous listener number (“3 listening”); only the station is shared, under a random id that changes on every visit. In the same way, while your timer runs, your browser is counted in the city's anonymous focus number (one lit window in the scene): only the city and whether you are focusing or on a break, under a random id that your browser's tabs share and that changes every day, deleted minutes after you stop. To stop fake numbers, that check-in also keeps a scrambled (salted hash) form of your IP address, or your account if you are signed in, for the same few minutes.
• Vercel hosts the app.
• Cloudflare serves the station music files. Like any web server it sees your IP address and which file is requested; no cookies are set.
• MET Norway (the Norwegian Meteorological Institute) provides the weather in the scene. Our server asks it for the city's forecast; your browser never contacts it and nothing about you is sent.
• Spotify and Todoist, only if you connect them.

Sponsors

A business may sponsor a sign in the scene (the cinema marquee, the buses, a shop front) or a small card, always marked “Sponsored”. We count how often it is shown and clicked so we can report totals to the business. We never give sponsors your personal data.

If you ask about sponsoring on the businesses page, we store your business name, your name, email, website and message only to reply to you, and delete them on request.

If you send music from the artists page, we store your artist name, your name, email, the links and the message to listen and reply to you, and keep them as the record of the licence you accepted for as long as your music plays on Blumour and the law requires after that.

If you write to us from the feedback page (a city request, an idea or a support question), we store your message, the city you asked for, your email if you leave one, your language and, if you are signed in, your account, only to read and answer it. Deleting your account unlinks it.

Your rights

You can delete your account and everything linked to it at any time: in the app, under Account, or on this website, in Settings. Deletion is immediate and cannot be undone. You can also ask for a copy of your data or ask us to correct it. Write to the contact address we will publish on this page before launch. If you are in the EU, you can also complain to your data protection authority (in Spain, the AEPD).