What Untimer knows about you, and what it does with it.

Who is responsible

Untimer is made and operated by Kristaq Kola, a sole trader registered in Albania trading as Argyro Labs, who is the controller of the personal data described here. For anything about your data, write to privacy@untimer.com.

What is stored, and why

Your account. An email address and a password. The authentication service hashes the password before it reaches the database, so the database holds only the hash. These exist so that only you can read your records.

Your sessions. For each session Untimer keeps when it started and ended, and how long it was planned to run against how long it ran. It also keeps how the session ended, how many interruptions you noticed and whether they came from inside or outside. Finally it keeps the task it was for if you named one, and the time zone you were in. It exists so that Days, Insights and Milestones can show you what happened.

Your notes and tasks. The line you write at an interruption, which exists so that the message box can show it when you return. And the tasks you make: a name, how many sessions you said it would take, and when you finished it.

Your settings and milestones. The end of your working day if you set one, your time zone and the lengths the timer runs at. Untimer also keeps which milestones have happened and when.

Daily totals. One row per day you used Untimer, written as sessions end, so that Insights can read a total and does not have to read your whole history.

Technical records. The providers that host the site, the app and the database keep ordinary server logs. Those logs include the IP address a request came from, and they exist for security and for running the service. Untimer reads them for that purpose alone.

If you buy Plus. The payment is taken by Lemon Squeezy, the merchant of record, on their own page. They hold your card and billing details, and a card number stays with them. Untimer keeps a customer reference and a subscription reference from them, so that it knows Plus is on and until when, and so that you can open your subscription from Settings.

If you sign in with Google. Google tells the authentication service your email address, your name and the address of your profile picture, and the request stops there. The authentication service keeps them with your account, and Untimer uses the email address, exactly as it does for an account made with a password.

If you use the Android app. The phone registers itself with your account so that a session started at your desk reaches it. Untimer keeps the phone's push token and platform, and when it registered and was last seen. When a session starts or ends, Untimer sends the phone a push through Google's Firebase Cloud Messaging. The push carries the session's id, its kind and its times. Your tasks, your notes and your email address stay out of it. Signing out on the phone, or deleting your account, removes the registration.

What Untimer does not use

• Analytics. This website and the app carry no analytics script, so no record exists of which screens you open or how long you look at them.
• Trackers and advertising. Untimer runs no trackers, sells no advertising and sets no pixels, and it fingerprints no device.
• Device permissions. The app asks for no access to your contacts, location, calendar, microphone or camera. On Android it asks to show notifications, and it sets an exact alarm for the end of each session you start, which is how the bell rings while the phone sleeps.
• Third party assets. The fonts are served with the app, so using Untimer makes no request to anyone else on your behalf.

Cookies and local storage

This website sets no cookies. The app keeps your sign in token, your theme and whether sound is on in your browser's local storage, which is how it remembers you between visits. None of it is used for anything other than that, and none of it leaves your browser except the token, which is sent with each request so the server knows whose records to answer with.

The Android app keeps the same things on the phone, in its own storage. They are your sign in token, your theme and whether sound is on, plus the task you picked and the session it has set the bell for. That storage is left out of the phone's cloud backups, so the token stays on the phone.

Where it lives

Your data is stored in a Postgres database operated by Supabase, in the European Union, in their Ireland region. Supabase acts as a processor on Untimer's behalf and is bound by its own data processing terms. Every table is protected by row level security, which means the database itself answers with the rows of the account that asked and no others, whatever the application does.

A few other companies do one job each on Untimer's behalf, and each sees only what that job needs. Cloudflare serves this site and the app and forwards the mail sent to Untimer's addresses. Resend delivers the two emails Untimer sends you: the confirmation of your address, and a password link if you ask for one. Lemon Squeezy takes payments, as above. Google carries the push to the Android app, as above, and is otherwise involved only if you choose to sign in with it. Your sessions, your tasks and your notes stay out of all of them.

Who can see it

You. The operator can access the database to operate and repair the service, and reads people's records for that reason only. Untimer does not sell or rent your data, does not use it for advertising and does not use it to train models.

How long it is kept

Until you delete it. Untimer applies no automatic expiry. When you delete your account, every row that belongs to it is deleted at once, and the deletion is final.

Your rights

You can exercise all of these yourself, from the app, without asking anyone.

• Access and portability. Settings, then Download my data. Everything you have recorded, as one JSON file.
• Erasure. Settings, then Delete my account. See account deletion for the steps and for what to do if you cannot sign in.
• Correction. Notes and tasks can be rewritten from the app as they are recorded. For anything else, write to us.
• Objection and restriction. Untimer processes your data to provide the service you asked for, on the basis of that agreement. It also processes it to keep the service secure, on the basis of legitimate interest. If you object to either, deleting your account ends both.

If you are in the European Union or the United Kingdom you also have the right to complain to your data protection authority. We would rather hear from you first, and we will answer.

Children

Untimer is built for adults and is not directed at children under sixteen, and it knowingly keeps no account for one. If you believe a child has created one, write to us and it will be removed.

Changes

If this page changes, the date at the top changes with it, and anything material is said here in plain words. Untimer keeps no mailing list, so this page is where changes are announced.

Contact

privacy@untimer.com. A person replies.