Privacy Policy

Last updated September 20, 2026

This policy explains how Yahht handles information in the account service at account.yahht.com and its connection with participating browser extensions. For privacy questions or requests, contact [email protected].

Account information

When you sign in, Google provides your account identifier, email, name and profile information. We store the Google identifier, email, name, locale and account timestamps to create and restore your account. A signed-in session is stored in an encrypted browser cookie. We do not receive your Google password. We also store your marketing email preference when you change Email updates in Notifications.

Data is transmitted over HTTPS and stored in a managed database with encrypted connections and restricted access.

When an extension confirms a connection, we record its product, version and connection timestamps with your Yahht account. We issue credentials that let the extension identify your account and check Premium access. Credentials and some settings can be stored using your browser’s extension sync, according to your browser settings.

Purchases and subscriptions

Paddle handles checkout, card and other payment details, receipts and subscription management. We associate its customer identifier with your Yahht account and check subscription status to provide access. After an account-first sign-in, we also check past subscriptions to decide whether to show the Premium offer. Yahht-ID does not store card numbers. If you are signed in, we can pass your email and account identifier to Paddle to associate the purchase.

A temporary, essential checkout cookie remembers a completed purchase for up to seven days while you attach it to an account. The pricing and checkout pages connect to Paddle to display available prices and process a purchase; technical browser and location information may be processed for these purposes.

To recover an interrupted checkout, this browser stores its transaction identifier, originating extension, progress and a signed recovery receipt in local storage for up to seven days. The record is removed after confirmation or when you choose another plan; expired records are removed when checked. We verify payment with Paddle before granting access. If a verified purchase belongs to another Paddle customer, a temporary signed cookie remembers that customer for this Yahht account for up to seven days so you can review the purchase or connect it. This information does not include card details.

Choosing “Choose later” before signing in saves a short-lived preference cookie for up to 30 minutes so the next account-first sign-in can skip the Premium offer. It is cleared when that sign-in finishes. A separate account-specific preference cookie remembers that this browser has already handled your first account-first sign-in or that you skipped the offer while signed in. It lasts up to one year and prevents repeatedly showing the introductory paywall. Clearing cookies or using another browser may show the offer again. This preference does not grant subscription access.

Extension data and analytics

The updated Breathhh browser extension processes browsing activity locally. Mood entries, practice history and browsing history are not sent to this account service or attached to product analytics events. Removing extension data can erase local history.

Participating extensions send selected product events to PostHog. These can include installation identifiers, product and version information, feature interactions and browser context. After sign-in, product events can be associated with your Yahht account identifier. Yahht-ID sends verified subscription, payment and cancellation events to PostHog. Attribution can include the extension and anonymous installation that started checkout.

This account website does not add general page-view analytics or session replay. This differs from the Breathhh marketing website, which has its own analytics and privacy disclosures.

Why we use and share information

We use Sentry to diagnose technical failures in this account service. Reports include the error, source location, application version, operation and technical browser or server context. Our configuration excludes request bodies, cookies, URL query parameters and account identity, and does not enable session replay. Error reports are retained for up to 30 days on our current plan.

We use information to operate the service, maintain accounts, deliver paid access, understand product use, prevent abuse and respond to support requests. We process service information to perform our agreement with you and to pursue legitimate interests in maintaining and improving the service, subject to applicable law.

Providers involved include Google for sign-in and font delivery, Paddle for billing, PostHog for product analytics, Sentry for error monitoring and DigitalOcean for hosting and database infrastructure. Hosting providers process technical request information such as IP addresses and browser details to deliver and secure the service. If you contact us, our email provider processes your message and contact information to deliver correspondence. We do not sell personal data.

Providers may process information outside your country under their service terms and applicable data protection requirements. External links, including Chrome Web Store links and other Yahht product sites, have their own privacy disclosures.

This website loads Inter from Google Fonts. Your browser connects to Google to fetch the stylesheet and font files, sending technical request information such as your IP address and browser headers.

Retention and existing accounts

We retain account and service records while needed to provide the service, resolve support issues and meet legal or accounting obligations. Session and checkout cookies expire or are cleared as part of the relevant flow. Existing Breathhh account records may be imported to restore accounts and paid access. Older records can remain in legacy systems during migration; this website does not itself delete them.

The Breathhh iOS app remains separate. The descriptions of local browser-extension processing do not describe the iOS app’s data practices.

Your choices and rights

You can sign out, manage browser storage, use free features without an account and contact us to request access, correction or deletion of server-held information. Depending on applicable law, you may also request restriction or portability, object to processing or complain to a data protection authority. We may need to verify that a request concerns your account.

Some records may need to be retained for legal reasons. Deleting an account or uninstalling an extension does not itself cancel a Paddle subscription; cancel future renewals through the billing portal.

Changes

We update this policy when our data practices change. The date at the top identifies this version. If we materially change how we use Google account data, we will notify you by email or in your account before the change takes effect.