← Back to Sanctuary (cadenzato.com)
The Sanctuary Guarantee
Your focus is sacred. Cadenzato is engineered from the ground up as a private cognitive sanctuary. We do not sell your personal information, we do not host advertising trackers, and our audio engines synthesize sound locally inside your browser without recording or listening.
1. Information We Do NOT Collect
- No Audio or Microphone Surveillance: Our procedural acoustic soundscapes (rain, fireside, ocean breakers, binaural waves) are generated using math and the HTML5 Web Audio API. We never access, record, or transmit audio from your microphone.
- No Advertising Trackers or Data Brokers: We do not include third-party advertising SDKs, Facebook Pixels, or cross-site tracking beacons.
- No Payment Card Storage: We never touch, process, or store credit card or bank account details. All patron transactions are processed directly by Stripe under PCI-DSS Level 1 compliance.
2. Information We Process & Collect
We only collect the minimum data necessary to deliver your focus sanctuary:
- Authentication Data: When you sign in with Google or Email, we store your User ID (UID), email address, display name, and avatar URL provided by Google Cloud Firebase Authentication.
- Focus Ledger & Cadence History: If you are signed into an account, we record your completed focus interval lengths (e.g., 25 minutes), intent categories (e.g., "Deep Work", "Coding"), session completion timestamps, and active day streaks.
- Sanctuary Preferences: Volume slider levels, selected live wallpaper theme (e.g., Café, Obsidian, Rain), and custom interval durations stored in your local browser storage.
- Guest Mode: If you use Cadenzato as a Guest, zero focus history or streaks are saved to our cloud servers. All sessions are discarded upon closing the browser tab.
3. How We Secure Your Data
- Row-Level Security (RLS): All database records are protected by strict server-side rules. Only authenticated requests matching your unique Google UID can read or write your focus sessions.
- Encryption in Transit & at Rest: All web traffic is strictly encrypted using TLS 1.3 / HTTPS. Cloud databases are encrypted at rest with AES-256 standards.
- Irreversible Password Hashing: Passwords submitted for email accounts are salted and hashed using one-way cryptographic algorithms (scrypt/Argon2) handled directly by Google Identity Services.
4. Cookies & Local Storage
We respect international privacy directives including GDPR (EU) and CCPA/CPRA (California):
- Strictly Necessary: LocalStorage keys (e.g.,
cadenzato_settings, cadenzato_theme) to preserve your timer states and prevent reset on refresh.
- Aggregated Anonymous Telemetry: Anonymized event counts (e.g., total timers started) to help us diagnose sound latency and performance bottlenecks. You can opt out at any time in the Sanctuary Cookie Banner.
5. Your Rights & Data Deletion
You maintain complete ownership of your cognitive data:
- Right to Export: You can export your entire focus ledger to CSV at any time from the Focus Ledger panel.
- Right to Erasure (Forget Me): You can wipe all local storage from Settings or request complete account deletion by contacting us.
6. Contact the Sanctuary Custodian
If you have any questions regarding this Privacy Policy or your data protection rights, please contact:
Email: [email protected]
Website: cadenzato.com