Privacy Policy
Last updated: 4 November 2026
This privacy policy explains who we are, what personal data we collect when you use thetime.com, why we collect it, who we share it with, and the rights you have over your data. We follow the EU General Data Protection Regulation (GDPR) as our highest standard, and apply the same protections globally.
Who we are
TheTime.com is run from Norway. “We” in this policy means TheTime, the data controller for the personal data described here. Please send any privacy question to privacy@thetime.com.
What we collect
We collect only what we need to run the service: • Polls (Find a time) — the title, any description and place, the proposed times, the time zone and the organizer’s name. For each participant: the name they enter and their answers (yes / maybe / no, and later coming / maybe / can’t come). No account or email is needed. • Secret links — the organizer gets an admin link and each participant a personal link to change their answer. We store only a cryptographic fingerprint (hash) of the keys in these links, never the keys themselves. • Notifications (optional) — the organizer can be told when someone answers: in the browser (we then store the browser’s push address and encryption keys) and/or in a Slack or Discord channel (we store the webhook link). The notification contains the name of the person who answered and the poll title. • Home city (optional) — if you enter a home city in a poll, it is stored with your answer to estimate travel time and cost. • Approximate location — we infer your city from Cloudflare’s standard request metadata so the site can show local times. This happens entirely on our own infrastructure; your IP address is never sent to a third-party geolocation service. You can change the detected city manually at any time. • Robot check — when you create or answer a poll, Cloudflare Turnstile may check that you are a person. Turnstile uses technical details such as your IP address and browser data for this, without tracking cookies or advertising. • Abuse protection — to stop spam we count how many polls and answers each visitor sends. The IP address is not stored; we keep only a code that changes every day and is deleted after one day. • Functional storage — small preferences kept in your browser (chosen city, alarms, calculator inputs), and the keys and names for polls you have created or answered. This stays on your device and is not sent to us, except a key when you use it. • Technical logs — Cloudflare records standard request metadata (IP, user agent, timestamp) as our hosting provider. We don’t use third-party analytics or ad tracking. For you uses local browsing history to show shortcuts: the identity of public tool, calendar and city pages, visit counts and the most recent visit time. Search text, calculator values and polls are excluded. This history stays on your device and is not sent to us. Navigation also remembers the last tools or calendar catalogue, query and category in the current browser tab’s session storage so you can return to the same selection. This state is not sent to us and is cleared when the browser session ends.
Why we are allowed to process the data
Under the GDPR we need a legal basis for each use: • Poll data and home city — legitimate interest (Art. 6(1)(f)) in providing a scheduling service to organizers and participants. You decide what you enter; a first name or nickname is enough. • Robot check and abuse protection — legitimate interest in keeping the service safe and free of spam. • Location detection — legitimate interest in showing you the right local times. The lookup uses geodata Cloudflare already attaches to every request; no extra data is collected and nothing is shared with third parties. Please don’t put sensitive information, such as health details, in titles or descriptions: anyone with a poll’s link can read them.
Who we share data with
We use a small number of processors that handle data on our behalf under data processing agreements (GDPR Art. 28): • Cloudflare, Inc. — hosting, D1 database, CDN and the Turnstile robot check. Our database is stored in the EU region. Other recipients, only when the organizer turns on notifications: • Browser push services (Google, Apple, Mozilla, Microsoft) — deliver notifications to organizers who turned them on. The content is encrypted so only the organizer’s browser can read it. • Slack or Discord — only when the organizer connects a channel. The name of the person who answered and the poll title are then sent there. Polls are visible to anyone who has their link. We don’t sell your data and we don’t share it with advertisers.
International data transfers
TheTime.com runs on Cloudflare’s global edge network. Requests may pass through edge locations outside the EU/EEA, but personal data (polls and answers) is stored in our D1 database in the EU region. Cloudflare is a US company; transfers are covered by the EU Standard Contractual Clauses (SCCs).
How long we keep data
We keep data only as long as we need it: • Account data — until you ask us to delete it. • Poll data — 90 days after the last proposed time, then everything is deleted automatically, including participants’ names and answers. • Notifications — push addresses and webhook links are deleted together with the poll. • Abuse protection — the code that replaces the IP address is deleted after one day. • Session cookies — 1 hour. • Functional browser storage — until you clear it yourself. Shortcut history contains at most 50 entries. Entries older than 90 days are removed the next time you use the site. You can also delete this history by clearing the site’s local storage.
Your rights
Wherever you live, you can ask us to: • Show you a copy of your data (right of access). • Correct mistakes (right to rectification). • Delete your data (right to erasure / to be forgotten). • Move your data to another service (right to data portability). • Stop or limit processing (right to restriction / objection). You can change your own poll answers through your personal link, and the organizer can remove them. Because we don’t know who you are, please send the poll’s link and the name you answered with to privacy@thetime.com; we reply within one month. If you live in the EU/EEA you can also complain to your local data protection authority (in Norway: Datatilsynet, datatilsynet.no). UK users can complain to the ICO (ico.org.uk).
California residents (CCPA / CPRA)
If you live in California, you have additional rights under the CCPA / CPRA: • The right to know what categories of personal information we collect and why. • The right to delete personal information we hold about you. • The right not to be discriminated against for exercising your rights. We do not sell personal information and we do not share it for cross-context behavioural advertising. To exercise any of these rights, email privacy@thetime.com.
Children's privacy
TheTime.com is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, email privacy@thetime.com and we will delete it.
Security
We use HTTPS/TLS for all traffic and store data in Cloudflare’s EU region. The keys in admin and personal links are stored only as cryptographic fingerprints, and the keys sit in the link’s # part, which browsers never send to the server. We don’t log names, answers or IP addresses in our application logs. No system is perfectly secure, but if we discover a personal data breach that affects you, we notify the Norwegian Data Protection Authority within 72 hours and notify you where required and possible.
Changes and contact
We may update this policy as the service evolves; the date at the top shows the latest version. Significant changes will be announced on the site. For privacy questions, email privacy@thetime.com.