Privacy Policy & Cookies

Last updated: 2026-10-14

Who we are

Timerbeam is operated by Pásztor Tibor Zoltán e.v. (egyéni vállalkozó, a sole proprietor), seat: 2131 Göd, Aulich u. 5., Hungary; tax number: 68185413-1-33. For any question about this policy or your data, contact hello@timerbeam.com.

What we collect

• Account data: your email address and a salted, hashed password (we never store your password itself).
• Billing data: if you subscribe to a paid plan, your email, a Stripe customer/subscription identifier, and what an invoice has to show — your name or company name, billing address and, if you buy as a business, your tax number. Card details are handled entirely by Stripe and never reach our servers.
• Timer content: the countdowns you create, including any free-text label you give them.
• Aggregate open counts: how many times each of your timers has been viewed, per day — this is a running total, not a per-visitor log; we never record who opened a timer or from where.
• Request logs: client IP addresses are hashed with a key that rotates every day before being written to our logs — this is pseudonymisation, not anonymisation (someone holding both the log and our signing key could in principle reverse it), which is why the hash changes daily and why we don't keep this data longer than necessary.

Why we process it

• Contract performance: running your account, rendering your timers, and billing your subscription.
• Legal obligation: issuing an invoice for every payment, reporting it to the Hungarian tax authority (NAV), and keeping it as Hungarian accounting law requires.
• Legitimate interest: keeping the service secure and reliable (rate-limiting abuse, backups, the hashed request logs above).
• Consent: analytics cookies (see the Cookies section below) — only loaded after you accept the cookie banner.

Who we share it with

Each of these acts as a data processor under a standard data processing agreement. Some may process data outside the European Economic Area under their own standard contractual clauses — see each provider's own privacy policy for details of their safeguards.

How long we keep it

Your account and timer data are kept for as long as your account exists. Invoices are the exception: Hungarian accounting law requires us to keep them, with the billing details on them, for 8 years — including after you delete your account. We keep rolling database backups for disaster recovery, automatically deleting older ones on a fixed schedule, so no backup is retained indefinitely. Hashed IP addresses in request logs are not retained by our own systems beyond the log stream itself.

Your rights

Under GDPR, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it, if it's wrong;
• delete your account and personal data — you can do this yourself at any time from your dashboard's account settings, without contacting us;
• export your data in a portable format;
• object to processing based on our legitimate interest.

Deleting your account removes your login and personal details. Timers you've already sent out keep working for anyone who already received them, since a countdown embedded in an email someone else received isn't something we can (or should) reach into their inbox to remove — but it's no longer tied to your account or billing.

You can also lodge a complaint with your local data protection supervisory authority at any time.

Cookies

The exact analytics cookies Google Tag Manager sets depend on what's configured inside our Tag Manager container at any given time; this table will be kept in step with that configuration.

You can change your cookie choice at any time by clearing your browser's cookies for this site, which brings the banner back.

Changes to this policy

If we make a material change to how we handle your data, we'll update the date at the top of this page.