Effective August 24, 2026
Account holders: your email address and, if you set one, a password hash. We never store the password itself, and accounts created with Google sign-in have none. Poll participants: the name you enter when responding and, if you ask for your edit link by email, that address. The polls themselves: titles, dates, availability answers. And if you join the Teams waitlist, the email you leave there, kept until Teams launches or you ask us to remove it. We also see your IP address on every request: it is what stops someone brute-forcing sign-ins, password resets, or the waitlist form. It stays in memory for the length of the rate-limit window, up to an hour, and lands in our server logs when a limit is hit.
Running the service: signing you in, showing who is available when, sending the emails a poll produces (links you request, invitations, reply notifications and deadline reminders on premium polls), and reaching you about your account. We don't sell your data or hand it to advertisers. Ads and analytics have their own sections below.
If you choose Continue with Google, Google sends us your verified email address plus your name and avatar. We keep only the email and use it to create or find your account. Signing in does not let us read your calendar or contacts, and Google's own privacy policy governs what Google records about the sign-in.
Connecting a calendar (Google, Outlook, or Apple) stores an access credential, encrypted at rest, plus the address of the connected account so you can tell your calendars apart. The credential is used only to read busy/free blocks when you press the fill-from-calendar button on a poll. We receive the time intervals marked busy. Event titles, attendees, and locations never reach us. Disconnecting a calendar in settings deletes both immediately.
Purchases go through Polar, our merchant of record. Polar processes your payment details. Card numbers never touch our servers. We keep your subscription status and a ledger of your credits.
Ours: a session cookie that keeps you signed in, a language cookie if you switch languages, and a small cookie remembering whether you last signed in with Google or a password (so the login page can point you the right way). Your theme choice stays in your browser's local storage, and analytics uses its session storage to keep from counting the same event twice. Analytics and advertising cookies are third-party and covered in their own sections below. We don't fingerprint browsers.
We measure how Timeheat is used (pages viewed, signups, polls created, purchases) with Google Analytics, loaded through Google Tag Manager. We never send it your email address or your account id. It does receive whether your account is free, paid, or Pro, so we can see how those groups use the product differently.
The page where people reply to a basic poll may show ads served by Google AdSense. Google and its partners may use cookies to measure and personalize those ads. Where the law requires it (the EEA and UK, for example) you will be asked for consent first, and you can decline. How Google uses data on partner sites is described here. Premium polls never show ads, and Pro subscribers see none anywhere while signed in.
Timeheat runs on rented servers, and the emails you request are delivered by Resend on our behalf. Polar handles payments, and Google provides sign-in, calendar free/busy, analytics, and advertising as described above. These providers process your data only to provide their service.
Your data stays as long as your account or poll exists. Deleting a poll deletes its responses. Deleting your account deletes your polls, their responses, and your account data, permanently and immediately. A reply you left on someone else's poll stays, because their poll is counted from it, but your name, email and edit link are stripped from it and it shows as deleted. We remove what we hold to the fullest extent we can. What other people already saw or remember is beyond our reach.
You can access everything we hold about you from your account, and delete it yourself at any time. For anything else (export, correction, questions) email support@timeheat.app and we'll sort it out.
If this policy changes materially, we'll announce it on this site.
