Privacy notice

The legal name and the postal address of who runs Timesifier are not on this page yet. Until they are, this notice is incomplete. To ask who that is, write to privacy@timesifier.com.

Timesifier stores what it needs to sign you in and to know which organisation you belong to.

Your account

Your name, your email address, and whether a sign-in code has proved the address is yours.

Your sessions

For each browser you are signed in on: a session token, when it expires, and the internet address and the browser description the session was started from.

Sign-in codes

A keyed hash of each code sent to you, never the code itself, with a count of the attempts made on it. A count of the codes sent to your address in the last hour, kept under a keyed hash of the address.

Your organisations

The name and the address of each organisation, who belongs to it, and each person's role.

Invitations

The email address invited, the role offered, who sent the invitation, when it expires and what became of it.

Limits on requests

A count of the requests each internet address makes to sign in and to manage an organisation, minute by minute. Each count is deleted about a minute after it is made.

Time entries, projects and reports are not stored yet. This notice will say what they hold before they are.

In one database, Cloudflare D1, restricted to the European Union: it runs and stores its data only inside the EU.

The application runs on Cloudflare Workers, in the data centre nearest to you, which may be outside the EU; your request is handled there and the database is read from there.

Cloudflare’s log of requests, its record of each email sent, and what Turnstile and Web Analytics collect are not restricted to the EU.

Cloudflare, for everything the application does. Every service Timesifier runs on is Cloudflare’s. Cloudflare, Inc. is a company in the United States.

Mail you send to privacy@timesifier.com is received by Microsoft, which hosts that mailbox.

Hosting and the database

Cloudflare Workers answers every request and Cloudflare D1 holds the database.

Email

Sign-in codes and invitations are sent through Cloudflare's email service, from no-reply@mail.timesifier.com. The email with a code holds no link, no image and no tracking.

The check that you are a person

Before a sign-in code is sent, the page that asks for it runs Cloudflare Turnstile, which loads from challenges.cloudflare.com. No other page loads it. Turnstile receives your internet address and details of your browser, and Cloudflare also uses them to improve Turnstile.

Analytics

Cloudflare adds its Web Analytics script to each page. It loads from static.cloudflareinsights.com and sends what it measures of the page to Cloudflare.

Logs

Cloudflare keeps a log of each request the application answers. A line holds the address of the page asked for and details of the request, and Cloudflare keeps it for at most seven days. The lines Timesifier itself writes never hold an email address, a sign-in code, a cookie or a session token.

Reports of failed connections

Cloudflare asks your browser to tell it when the browser cannot reach timesifier.com. Such a report goes from your browser to a.nel.cloudflare.com, with your internet address.

Timesifier carries no advertising.

Timesifier sets four cookies and no others. Each is sent only to timesifier.com, and only over HTTPS. None is for advertising or for following you from site to site.

__Host-timesifier.session_token

Keeps you signed in. It is set when you sign in and lasts seven days, renewed while you use Timesifier. Script on the page cannot read it.

__Host-timesifier.sign_in_code

Shows that this browser asked for the sign-in code you are about to type. It holds no email address and is kept for one hour.

__Host-timesifier.known_browser

Shows that this browser has signed in as your address before, so that somebody else asking for codes for your address cannot use up yours. It holds a keyed hash of up to five addresses, never an address, and is kept for one year. Signing out does not remove it. Script on the page cannot read it.

__Host-color-scheme

The word light, dark or system, once you choose a colour scheme in Settings. It is kept for one year. Until you choose, it is not set and the pages are light.

Two things are kept in your browser that are not cookies, both in the tab you are using and nowhere else. The first is how far down each page you had scrolled, so that going back returns you to the same place. The second is kept when you ask for a sign-in code: your email address and the time, for 5 minutes, so that you can leave for your mail, come back and type the code. Neither is sent to timesifier.com or anywhere else. The second is removed when you sign in, and when the 5 minutes have passed.

Your account, your organisations and your memberships

Until you ask for them to be deleted, or, for an organisation, until an owner deletes it. Deleting an organisation deletes its memberships and its invitations with it. Cloudflare keeps the means to restore the database to any minute of the last 30 days, so what is deleted is gone for good 30 days later.

A session

It works for seven days from when it was last renewed, and ends at once when you sign out or end all your sessions. The record of an expired session, with its internet address and browser description, is removed the next time that browser visits; until then it is kept.

A sign-in code

A code works for five minutes, and its hash is deleted soon after. The email that carried it stays in your mailbox, and Cloudflare keeps its record of sending it for up to 30 days. The counts of codes sent to an address stop counting after one hour.

An invitation

It can be accepted for seven days. Its record stays with the organisation.

Where the General Data Protection Regulation of the European Union or of the United Kingdom applies to you, you may ask for a copy of what is stored about you, have it corrected or deleted, ask for its use to be limited or object to it, and receive it in a form another service can read.

To use any of them, write to the address below. You may also complain to the data protection authority of the country you live in.

The controls to export your data and to delete your account are not in the product yet. Until they are, write to privacy@timesifier.com from the address of your account, and say what you want: a copy of your data, a correction, or your account deleted.

The terms say what Timesifier is today and what using it involves.