Privacy Policy

Last updated: April 5, 2026

1. Introduction

Loftimer ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our countdown timer service.

2. Information We Collect

Account Information

When you register, we collect your email address and encrypted password (or Google account identifier if you sign in with Google).

Timer Data

We store your timer configurations: names, dates, colors, sizes, and labels.

Usage Data

We collect view counts for each timer (how many times the timer image was requested). We collect basic server logs including IP addresses, timestamps, and user agent strings for security and analytics purposes.

Payment Information

Payment processing is handled by our third-party payment provider. We do not store your credit card numbers or payment details on our servers. We only receive confirmation of payment status and subscription details.

3. How We Use Your Information

• To provide and maintain the Service
• To manage your account and subscriptions
• To display view analytics for your timers
• To communicate service updates and important notices
• To prevent abuse and enforce our Terms of Service

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Payment processors (to process subscriptions)
• When required by law or legal process
• To protect our rights or prevent fraud
• In connection with a business transfer (merger, acquisition)

5. Cookies

We use a session cookie to keep you logged in. This is a functional cookie essential for the Service to work. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Timer images (/timer.gif) do not set any cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Server logs are retained for up to 90 days for security purposes.

7. Data Security

We protect your data using:

• Encrypted connections (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Rate limiting to prevent brute-force attacks
• Security headers (HSTS, X-Content-Type-Options, etc.)

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent at any time

To exercise these rights, contact support@loftimer.com.

9. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect information from children under 16. If we become aware of such data, we will delete it promptly.

10. International Data Transfers

Your data may be stored and processed on servers located outside your country of residence. By using the Service, you consent to the transfer of your data to these locations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the latest revision.

12. Contact

For privacy-related questions, contact us at support@loftimer.com.