Privacy notice

Datenschutzerklärung nach Art. 13 DSGVO.

1. Controller

Eike Niehs
Hagenring 87, 38106 Braunschweig, Germany
E-Mail: e.niehs@googlemail.com

2. What this app does

Timer shows shared countdown timers. Anyone with a timer link can view it without an account. Administrators (invited users) can create and control timers.

3. Data processed when you view a timer

• Server logs. Like every website, our web server records your IP address, the requested URL, time, browser type and referrer. Purpose: operating the service and preventing abuse. Legal basis: Art. 6 (1) (f) GDPR. Retention: up to 90 days (log rotation).
• Device identifier. Your browser stores a random identifier in its local storage (no cookie). It is sent to the server when you open a timer so that optional features (e.g. group assignment) can recognise your device. It is not linked to your name or account. Legal basis: Art. 6 (1) (f) GDPR. You can delete it by clearing your browser's site data.
• Group assignment (only if the timer has the Groups feature enabled). The device identifier is stored together with the assigned group number for that timer. Deleted when the timer is deleted or an admin resets the groups.
• Push notifications (only if you tap "Notify me" and grant permission). Your browser creates a push subscription (an endpoint URL and encryption keys) that we store together with the timer and your device identifier. Notifications are delivered through your browser vendor's push service (e.g. Apple, Google, Mozilla), which receives the encrypted message. Legal basis: your consent, Art. 6 (1) (a) GDPR; withdraw at any time by disabling notifications in the app or in your browser settings, which deletes the subscription. Subscriptions are also deleted when the timer is deleted or when the push service reports them as expired.
• Sound and screen settings are stored only in your browser's local storage and never sent to us.

4. Data processed for administrators

Administrators register via an invitation link with name, e-mail address and a password (stored as a salted hash). A session cookie (session, HttpOnly, valid 30 days) keeps you logged in. Legal basis: Art. 6 (1) (b) GDPR. Accounts are deleted on request to the controller.

5. Hosting

The app runs on a server operated by us and hosted at Realtoxmedia, Felix Gassan, Talweg 4s, 21149 Hamburg. No data is shared with third parties beyond the push services mentioned above and the hosting provider as a processor.

6. No tracking

This app uses no analytics, no advertising and no third-party scripts or fonts.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR), and to lodge a complaint with a supervisory authority. Contact: e.niehs@googlemail.com.

Last updated: 12.09.2026