If you're considering using Focus Room—or any monitoring tool—in your sessions, privacy should be your first concern. Participants and organizations all rightfully care about what data is collected, how it's used, and who can see it.
This guide explains exactly how Focus Room handles participant data, what privacy principles we follow, and what you need to know to use the tool responsibly.
The Core Principle: Minimal Data, Maximum Privacy
Focus Room was built with one guiding principle: collect only what's necessary for the tool to function, nothing more.
Here's what that means in practice.
What Focus Room Collects
Focus Room monitors website access during active sessions. Here's the complete list of data collected:
During Active Sessions Only
1. Participant Name
- What we collect: The name participants enter when joining a room
- Why we need it: So hosts can identify which participant tried to access which sites
- What we don't collect: We don't verify this name against any database or require real names
2. Website URLs
- What we collect: The web addresses participants attempt to visit
- Why we need it: To determine if the site is on the whitelist and notify hosts of violations
- What we don't collect: Page content, form data, search queries, or anything typed on those sites
3. Session Timestamps
- What we collect: When a participant joins a room, leaves a room, and attempts to access blocked sites
- Why we need it: For session reports and to show hosts when violations occurred
- What we don't collect: Activity outside of active sessions
4. Room Association
- What we collect: Which room code the participant joined
- Why we need it: To connect participants to the correct host's monitoring session
- What we don't collect: Any data when participants aren't in a room
That's It
Focus Room does NOT collect:
- ✗ Browsing history before or after sessions
- ✗ Passwords or login credentials
- ✗ Content of websites visited (text, images, videos)
- ✗ Keystrokes or what participants type
- ✗ Screenshots or screen recordings
- ✗ Email addresses or contact information (for participants)
- ✗ Location data or device information
- ✗ Personal identifiers
- ✗ Any activity outside of active sessions
When Monitoring Happens (And When It Doesn't)
This is critical: Focus Room only monitors when a participant is actively in a room.
Active Monitoring
Monitoring begins when:
- Participant clicks the Focus Room extension icon
- Enters a room code provided by their host
- Clicks "Join Room"
From that moment until they leave the room, Focus Room tracks which URLs they attempt to access.
No Monitoring
Monitoring stops immediately when:
- Participant clicks "Leave Room"
- The host ends the session
- The participant closes their browser
- The session ends and the room automatically closes
Outside of active sessions, Focus Room does nothing. It doesn't track browsing history, record activity, or collect any data. The extension is completely inactive.
Example Timeline
8:45 AM - Participant browses normally (no monitoring)
9:00 AM - Participant joins host's room (monitoring begins)
9:50 AM - Participant leaves room (monitoring stops)
10:00 AM - Participant browses normally (no monitoring)
This session-based approach means participants maintain full privacy outside of designated session time.
Data Protection Principles
Focus Room is built on these foundational privacy principles:
1. Purpose Limitation
We only collect data for one purpose: helping hosts maintain focus during sessions. We don't use data for advertising, analytics, profiling, or any other purpose.
2. Data Minimization
We collect the absolute minimum data needed. No keystrokes, no screenshots, no content—just URLs and timestamps during active sessions.
3. Transparency
Participants know when they're being monitored. The extension clearly shows active status, and hosts are encouraged to communicate openly about monitoring.
4. Access Control
Only the host who creates a room can see that room's data. Focus Room staff cannot access individual session data.
5. No Third-Party Sharing
Focus Room never sells, shares, or discloses participant data to third parties. Data stays between the host and their participants.
6. User Control
- Participants can leave rooms at any time
- Hosts can delete session reports whenever they want
- When a host deletes their account, all associated data is permanently deleted
Data Security
Beyond privacy principles, Focus Room implements security measures to protect participant data:
Technical Safeguards
1. Encryption
- All data transmitted between the extension and servers uses HTTPS encryption
- Data at rest is encrypted in our database
- Room codes are generated with secure randomization
2. Access Controls
- Hosts can only see data from their own rooms
- No cross-host data access
- Staff access is logged and limited to essential maintenance
3. No Permanent Storage of Sensitive Data
- Website content is never stored
- Only URLs are recorded
- Session data can be deleted by hosts at any time
4. Regular Security Updates
- Chrome extension updated regularly with security patches
- Server infrastructure maintained with current security standards
Organizational Safeguards
1. Staff Training All Focus Room team members receive training on:
- Data handling best practices
- Privacy principles
2. Limited Data Access Only essential personnel have database access, and all access is logged.
3. Incident Response Plan In the unlikely event of a data breach, we have procedures to:
- Contain the breach immediately
- Notify affected hosts within 72 hours
- Investigate the cause and implement fixes
- Document everything for transparency
What Hosts Can See (And What They Can't)
Understanding the limits of Focus Room helps set appropriate expectations:
Hosts Can See:
During an active session:
- Which participants are currently in the room
- When each participant joined
- Which websites participants attempt to access (URLs only)
- Timestamps of violation attempts
In session reports:
- Complete list of participants
- Total violations per participant
- Most frequently blocked sites
- Session duration and participation time
Hosts Cannot See:
- What participants type on websites
- Content of web pages (text, images, etc.)
- Email content or messages
- Passwords or login credentials
- Screen recordings or screenshots
- Activity on whitelisted sites (beyond knowing they visited the site)
- Anything participants do outside of active sessions
Important Limitation
Focus Room monitors only the browser where a participant has installed the extension and joined an active session. Chrome and Microsoft Edge extensions are available for desktop. Focus Room has no visibility into Safari, Firefox, other browsers, or other apps.
Participant Rights and Transparency
Participants have rights regarding their data. Focus Room respects these rights:
Participants Can:
1. See What's Being Monitored The extension shows participants:
- Whether they're currently in a room (active monitoring)
- Which websites are whitelisted
- When monitoring will stop
2. Leave at Any Time Participants can click "Leave Room" whenever they want, stopping all monitoring immediately.
3. Request Their Data Participants can request to see session reports about their activity. Hosts should honor these requests.
What We Tell Participants
Recommended language when introducing Focus Room:
"I'm using Focus Room to help everyone stay focused during our session. When you join my room, the extension will only allow you to visit websites related to our work. If you try to visit other sites, I'll get a notification—not to punish you, but to help redirect you back to the task at hand. Focus Room only works during our session time. The moment you leave the room, it stops monitoring completely. You have full privacy outside of our sessions."
This transparency builds trust and cooperation.
Comparing Focus Room to Other Tools
Understanding how Focus Room compares to alternatives helps contextualize its privacy approach:
Focus Room vs. Comprehensive Monitoring Software
Enterprise monitoring tools:
- Monitor 24/7 on company-issued devices
- Capture screenshots and browsing history continuously
- Monitor across all browsers and apps
- Require administrative installation
Focus Room:
- Monitors only during active sessions
- Only tracks URL attempts (no screenshots or content)
- Chrome or Edge extension for desktop (participants choose whether to install it)
- Session-based, not persistent
Privacy Trade-off: Focus Room sacrifices comprehensiveness for privacy. It's less invasive but also easier to circumvent. This works well for cooperative environments but isn't appropriate for high-stakes scenarios.
Focus Room vs. No Monitoring
No monitoring:
- Maximum participant privacy
- No data collection concerns
- Complete participant autonomy
Focus Room:
- Balances privacy with accountability
- Helps participants develop focus skills
- Provides hosts peace of mind
- Still respects privacy outside sessions
The Middle Ground: Focus Room offers a compromise—some structure and visibility during sessions without 24/7 surveillance.
Your Responsibilities as a Host
Using Focus Room responsibly means understanding your duties:
Required Actions
1. Inform Participants Before using Focus Room, tell participants:
- What the tool does
- What data it collects
- Why you're using it
- How to ask questions
2. Use Data Appropriately Only use monitoring data for:
- Redirecting participants back to the task
- Understanding engagement patterns
- Improving your sessions
- Communication about focus issues
Don't use it for:
- Punitive actions unrelated to focus
- Sharing with other participants
- Embarrassing participants publicly
- Purposes beyond session management
3. Follow Organizational Policies Check with your organization:
- Does your organization allow monitoring tools?
- Do you need permission to use Focus Room?
- What are the acceptable use policies?
4. Secure Your Account
- Use a strong, unique password
- Don't share your account credentials
- Log out on shared computers
- Review session reports promptly and delete old data
Recommended Actions
1. Be Transparent Show participants the Focus Room dashboard so they understand what you can see.
2. Set Clear Expectations Explain your monitoring policy at the start of your sessions.
3. Use Private Redirection When participants violate rules, message them privately rather than calling them out publicly.
4. Review and Delete Regularly review session reports and delete old data you no longer need.
When NOT to Use Focus Room
Focus Room isn't appropriate for every situation. Be thoughtful about when to use it:
Don't Use Focus Room When:
1. Participants Are Working Independently Outside Sessions Focus Room is designed for synchronous sessions when you're actively facilitating. Don't ask participants to join rooms for independent work time—that's overreach.
2. You Don't Have Organizational Approval Always check with relevant stakeholders before implementing monitoring tools. Some organizations have specific policies about this.
3. You Haven't Informed Participants Surprise monitoring violates trust and may violate policies. Always communicate first.
4. For High-Stakes Scenarios Focus Room can be circumvented by using other browsers or devices. For important situations requiring secure environments, use dedicated proctoring software with device-level controls.
The Ethical Consideration
Beyond policies, there's an ethical question: Is monitoring the right approach for your situation?
Arguments For:
- Creates accountability and structure
- Helps participants develop focus skills
- Provides data to improve sessions
- Reduces anxiety (participants know expectations)
- Levels playing field (all participants have same access)
Arguments Against:
- May reduce intrinsic motivation
- Could feel like violation of trust
- Might not work for all contexts
- Depends on participants being cooperative
- Doesn't address root causes of distraction
Finding Your Balance
Consider:
- Your participants' context and expectations
- Your facilitation philosophy
- Your organization's culture
- Participant attitudes
- The specific challenges you're addressing
Focus Room works best when:
- Participants understand and accept the purpose
- You use it transparently, not secretly
- You combine it with engaging content
- You position it as a focus tool, not punishment
- You trust participants but provide helpful structure
Data Retention and Deletion
Understanding how long data is kept and how to delete it:
Automatic Retention
Session data is retained:
- Until you manually delete it
- Until you delete your account
- Indefinitely if you take no action
Why not auto-delete? Hosts use historical data to identify patterns and track progress. Automatic deletion would eliminate this valuable information.
Manual Deletion
You can delete:
1. Individual Session Reports Click "Delete" on any session report to permanently remove it.
2. Entire Account Deleting your account permanently removes:
- All rooms you've created
- All session reports
- All participant data from those sessions
- Your account information
This action is irreversible.
Best Practice
Review session reports monthly and delete data you no longer need. Keep only what's relevant for ongoing work or required by your organization.
Responding to Privacy Concerns
If participants or stakeholders raise privacy concerns:
Listen First
Don't dismiss concerns. Privacy matters, and people have valid reasons for worrying about monitoring.
Explain Your Approach
Share:
- Exactly what Focus Room collects
- Why you're using it
- How it protects privacy compared to alternatives
- Your policies around monitoring
Offer Alternatives
If someone is uncomfortable with monitoring, discuss alternatives:
- Traditional accountability without monitoring
- Honor system with spot checks
- Modified monitoring (shorter sessions, smaller whitelists)
- Different tools or approaches
Document Everything
Keep records of:
- Notifications you sent about monitoring
- Responses to concerns
- Alternative arrangements made
- Organizational approval to use the tool
This protects you and demonstrates good faith.
The Bottom Line
Focus Room prioritizes participant privacy while providing hosts helpful session management capabilities:
What makes Focus Room privacy-conscious:
- Session-based monitoring (not 24/7)
- Minimal data collection (URLs only, no content)
- Participant control (voluntary joining/leaving)
- Host-only access (no sharing with third parties)
- Transparent operation (participants see what's monitored)
Your responsibility:
- Use Focus Room transparently and ethically
- Communicate with participants
- Follow organizational policies
- Collect only necessary data and delete old reports
- Respect participant privacy outside sessions
When used appropriately, Focus Room provides a reasonable balance between session management needs and participant privacy rights.
Additional Resources
Privacy Policies and Documentation:
Questions about privacy? Email us at [email protected]
We're committed to protecting participant privacy while helping hosts create focused environments.