Draft. This document still has placeholders in square brackets. Have it reviewed before launch.
This policy covers the Inboxclock website, the app and the timer images we serve. “We” means [Company legal name], [registered address]. Contact: [privacy contact email].
What we collect and why
Account data. Your name, email address, a hash of your password (never the password itself), and, if you use Google or GitHub sign-in, the account ID and email address that provider gives us. We use this to run your account and to send you account and security emails.
Sessions. For each signed-in browser: the browser’s user-agent string, an approximate location (city and country, from Cloudflare), the sign-in method, and when it was last used. We show these to you under “Signed-in browsers” and use them for new sign-in alerts.
Timers and stats. The timers you create, and per day the number of image downloads and link clicks for each timer. These counts are not linked to individual readers.
Evergreen recipients. When an evergreen timer is opened with a subscriber value (for example a subscriber ID or email address filled in by your email platform), we store a one-way SHA-256 hash of the timer ID and that value, plus the time of the first open. We do not store the value itself.
Email log. For each email we send you: the type, recipient address, subject, time and delivery status.
Technical data. Cloudflare, our hosting provider, processes IP addresses to deliver the service, protect it from abuse and apply rate limits. We do not use IP addresses for profiling.
We do not sell personal data, and we do not use advertising trackers.
Readers of your emails
When someone opens an email that contains your timer, their email app downloads the image from us. We count the download and, for evergreen timers, store the hash described above. You, as the sender, are responsible for having a legal basis to email your subscribers.
Processors
- Cloudflare hosts the app and database and serves timer images.
- toSend sends our emails to you.
- Google and GitHub, only if you choose to sign in with them.
How long we keep data
- Account data: until you delete your account.
- Sessions: 30 days after sign-in, or until you sign out.
- Timer stats and evergreen hashes: until you delete the timer or your account.
- Email log: [retention period].
Deleting your account deletes your account data, timers, stats, sessions and evergreen hashes immediately.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to processing. You can change and delete most data yourself in the app. For anything else, contact [privacy contact email].
Changes
We will post changes here and update the date above. For significant changes, we will email account holders.