Privacy Policy

Controller

Responsible for the processing of personal data:

Contact form

If you use the contact form, we process your name, email address, and message to answer your request. Resend transmits the message to us by email. Article 6(1)(b) GDPR applies to contract-related requests and steps taken at your request before entering into a contract. For other requests, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is responding to incoming requests.

To prevent automated abuse, we convert the IP address into a pseudonymous HMAC verification value. Convex stores this value, a counter, and the end of the one-minute rate-limit window. The data is deleted automatically after the window expires. The legal basis is Article 6(1)(f) GDPR.

Services used for operation and sign-in

We use the following processing and sign-in services. They process only the data needed for their stated purpose.

• Vercel: Vercel hosts the website and processes technical connection data to deliver requests, investigate errors, and prevent attacks. The legal basis is Article 6(1)(f) GDPR.

  Privacy information

• Convex: Convex provides the database, backend, and authentication. It processes account, team, calendar, availability, notification, and settings data for the features you use. The legal basis is Article 6(1)(b) GDPR.

  Privacy information

• Battle.net: When you start sign-in, you are redirected to Blizzard. Blizzard sends us the account ID, BattleTag, and profile data provided for sign-in. Battle.net avatars may then be loaded directly from Blizzard. The legal basis is Article 6(1)(b) GDPR.

  Privacy information

• Resend: Resend transmits contact requests to us by email. It processes the name, email address, message, and technical delivery data.

  Privacy information

Cookies and local storage

We use only technically necessary cookies and browser storage to provide features you explicitly request. Section 25(2)(2) TDDDG applies to these storage and access operations. We do not use them for advertising, audience measurement, or cross-site tracking.

• timeinator-locale (cookie): stores your selected language for up to 365 days.
• timeinator-landing-theme (local storage): stores your selected appearance until you change it or clear your browser data.
• Convex Auth: necessary authentication cookies and local status data maintain your sign-in. Authentication cookies remain valid for no more than 30 days; short-lived helper values for Battle.net sign-in are removed when the sign-in flow expires.

You can delete cookies and local-storage data in your browser settings. This removes saved settings and may require you to sign in again. Because we do not use storage or access operations that require consent, we do not display a consent banner.

Analytics, advertising, and external media

We currently do not use analytics, marketing, or advertising services and do not automatically load externally hosted entertainment media.

External links

The website contains links to external services. If you follow them, the respective provider's privacy information applies.

Data security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. No one can guarantee complete protection when data is transmitted over the Internet.

Data subject rights

In particular, you have rights of access, rectification, erasure, restriction, data portability, and objection under Articles 15 to 21 GDPR. You can exercise these rights at info@timeinator.app.

Supervisory authority

You may lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

Changes to this privacy policy

We update this privacy policy when the actual data processing changes. The date above shows the status of the published version.