Privacy

Who we are

Roundtoe is a small independent software business based in the United Kingdom. We run a small portfolio of web tools, listed on our home page, and this notice covers every one of them. You can reach a person at hello@roundtoe.com.

What we collect from you

• Your email address and password. Passwords are stored only as a salted hash — we cannot read yours, and neither can anyone who obtains a copy of our database.
• Your sign-in method. If you sign in with GitHub, we store the identifier they give us so we can recognise you next time. We do not receive your GitHub password.
• The timers you create — the words, colours and dates you enter.
• How much you have used. Daily counts per timer, so we can show you your usage and bill the right amount.

What we collect when a timer is displayed

This is the part worth reading carefully, because it concerns people who have never heard of us. When a timer you put in an email is displayed, the recipient's email software asks our server for the image. We record the time, which timer was asked for, and the requesting address and software identifier — the same information any web server receives when it is asked for an image.

We use it to keep the service working and to detect abuse. We do not use it to build a profile of anyone, we do not combine it with anything else, and we never sell it or share it for advertising.

If you are a customer sending those emails, you decide who receives them, so in law you are the controller of that information and we handle it on your behalf. Please make sure your own privacy notice covers the fact that your emails contain remote images. Note that a countdown image, like any remote image in an email, can reveal that a message was opened.

QR codes you send us on purpose

The QR teardown reads your code in your browser and the picture does not reach us. There is one exception and you control it: when we manage to read a code but cannot map it square by square, we say so and offer a button to send us that picture. Nothing is sent unless you press it.

A picture you send goes to one mailbox, is used to work out why the diagram failed, and is stored nowhere else. A QR code can hold a WiFi password or the details on a contact card, so look at what you are sending before you send it. Ask us and we will delete it.

Payments

Payments are handled by Stripe. We never see or store your card details. We keep the customer and subscription identifiers Stripe gives us, which plan you are on, and whether it is active — enough to know what you are entitled to and nothing more.

Cookies

Two, both strictly necessary: one that keeps you signed in, and one that protects forms against being submitted from another site. There is no analytics, no advertising and no third-party tracking on this site.

Who else touches your information

Only those needed to run the service:

• DigitalOcean — the server, in New York, USA.
• Stripe — payments.
• Resend — sending our email to you.
• Zoho — receiving email you send us.
• jsDelivr — hosting the small script that draws a timer on a website.

We do not sell your information, and we never will.

Where it is kept

On a server in the United States. We are in the United Kingdom, so information about UK and European users is transferred to the US. Our suppliers above are covered by the standard safeguards for such transfers.

How long we keep it

• Your account and timers: until you delete them.
• Records of when timers were displayed: 30 days.
• Billing records: as long as tax law requires, currently seven years.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it — there are buttons for the last two under your account, and deleting your account deletes your timers with it. Email hello@roundtoe.com and a person will answer.

If you think we have handled your information badly, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would rather you told us first.

Changes

If we change this in a way that matters, we will email you before it takes effect.