Privacy Policy

This policy explains what personal data CubeClock ("we", "us") collects when you use CubeClock, what we do with it, and the choices you have. We have tried to keep it plain and specific. If anything is unclear, get in touch and we will explain.

What we collect

• Account details. Your name and email address, and your password. Your password is stored only as a one-way hash, so we cannot read it.
• Your cubing data. The cubes you add (name, puzzle type, brand, colour and any notes) and every solve you record: the time, any +2 or DNF penalty, the scramble, any notes, and when it happened.
• Timer data. For each CubeClock timer you link: its name and model, the cube it records to, when it last connected and the IP address it connected from. We also receive the solves it sends. The timer's access token is stored only as a hash.
• Technical data. When you are logged in we keep a session, which records your IP address and browser details (user agent). Our servers also keep ordinary logs of requests, which include IP addresses. We use your IP address and email to limit repeated login attempts.
• Order details. If you buy a timer, checkout happens on a page run by our payment provider. We do not receive or store your card number. We receive the details needed to fulfil your order, such as your name, delivery address and what you bought.

How we use it

• To run CubeClock: to store your solves, calculate your averages and personal bests, draw your charts and sync your timers.
• To keep your account secure, for example by keeping you logged in, protecting forms, and limiting repeated login attempts.
• To email you about your account. At the moment that means password reset links.
• To fulfil and support timer orders.

We do not sell your personal data, we do not use it for advertising, and we do not run analytics or advertising trackers.

Cookies

CubeClock uses only the cookies it needs to work, and loads no third-party scripts, fonts or trackers.

Cookie	What it does	How long it lasts
Session	Keeps you logged in as you move between pages.	About two hours after your last visit, or until you log out.
XSRF-TOKEN	Protects forms and requests from being forged by other sites.	About two hours after your last visit.
Remember me	Keeps you logged in on this device. Only set if you tick "Keep me logged in".	Up to five years, or until you log out.

Who we share it with

We share personal data only with service providers who help us run the service, and only as needed for that. This includes our hosting provider, our email delivery provider, and the payment provider that runs checkout for timer orders. They may only use the data on our instructions.

We may also disclose data where the law requires it, or to protect the rights, safety or security of our users or the service. If CubeClock is ever sold or merged with another business, your data may move with it, and we will tell you first if your rights would change.

How long we keep it

• Your account data and cubing data are kept until you delete them or your account.
• Deleting a solve removes it. Deleting a cube removes the cube and all of its solves. Unlinking a timer stops it syncing, and its solves stay in your account unless you delete them.
• Deleting your account, from Settings, immediately removes your profile, cubes, solves and linked timers.
• Password reset links expire after an hour. Timer pairing codes expire after ten minutes and are then cleared out.
• Server logs and backups may keep copies of data for a limited time after deletion before they are overwritten.

Your choices and rights

You can see and change your name, email and password in Settings, edit or delete any solve, cube or timer, and delete your whole account at any time.

CubeClock does not yet have a download-your-data button. If you would like a copy of your data, ask us and we will send it to you.

Depending on where you live, you may also have the right to access, correct, delete or move your personal data, to object to or restrict how we use it, and to complain to your local data protection authority. To use any of these rights, get in touch.

Security

Passwords and timer access tokens are stored only as one-way hashes. We take reasonable technical and organisational steps to protect your data, but no online service can promise perfect security, so please choose a strong, unique password.

Children

CubeClock is not intended for children under 13, and we do not knowingly collect their data. If you are under 13, please do not create an account. If you believe a child has given us personal data, contact us and we will delete it.

Where your data is processed

Our service providers may process data in countries other than your own. Where that happens we rely on appropriate safeguards for the transfer.

Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you in the service or by email if the change is significant.