1. Information we collect
- Account data: your email address, authentication identifier, and session data when you register, sign in, or reset a password. Our authentication provider handles passwords; we cannot read your plaintext password.
- Room and timer data: room and cue names, timer type and duration, schedules, stage messages, room settings, control actions, and connection status.
- Device and local data: a random device identifier, browser language, time zone, basic browser information, and language, control tokens, display, and sound preferences stored locally in your browser.
- Usage analytics: a random visitor identifier stored locally on your first visit and associated with room actions, connection events, and confirmed usage duration to understand repeat use of the same browser, including use without signing in.
- Website analytics: Google Analytics 4 measures page visits, traffic sources, and basic browser information. Control tokens, authentication callbacks, and order parameters are removed from URLs before sending; room paths are grouped by page type without real room identifiers.
- Transaction data: plan, amount, order number, payment channel and status, and entitlement period. Payment providers handle card or WeChat payment credentials directly; we do not store complete card numbers.
- Feedback data: the message, optional contact details, page, and limited browser information you submit through feedback.
2. How we use information
- Create, synchronize, and recover timer rooms and transmit timer state between screens.
- Identify accounts, keep rooms associated with an account, secure sign-in, and reset passwords.
- Process orders, confirm payments, grant plan benefits, and prevent fraud or abuse.
- Respond to feedback, troubleshoot, protect the service, and improve the product.
- Measure usage counts, duration, and active days by anonymous visitor identifier to understand continued use, while retaining separate account attribution before and after sign-in.
- Meet legal obligations, enforce our Terms, and protect users, the public, and our legal rights.
3. Local storage and similar technologies
SyncTimer uses browser local storage and authentication sessions to keep you signed in and remember language, device identifiers, control tokens, and display preferences. These technologies support core functionality. We currently use no third-party advertising cookies, and we do not sell or rent personal information. Clearing browser data may sign you out, remove preferences, or make an unclaimed room's control link unrecoverable.
The random visitor identifier is reused on later visits in the same browser for usage analytics and does not authenticate you or grant access. Clearing local data or using another browser or device creates a new identifier; people sharing a browser may share one identifier. If local storage is unavailable, the identifier lasts only within the current page.
Google Analytics 4 uses analytics cookies to distinguish visitors and measure visits and engagement. Google signals and ad personalization are disabled. Browser settings or content blockers may restrict analytics cookies and requests.
4. Sharing and service providers
We disclose information only as needed to operate the service, including to Supabase for databases, realtime synchronization, and authentication, to Google Analytics 4 and Microsoft Clarity for website analytics, and to WeChat Pay/LTZF and Creem for payment processing. Providers process information under their own terms. We may also disclose necessary information when required by law, to protect rights and safety, or in a merger, reorganization, or asset transfer, with safeguards required by applicable law.
5. Room links and visibility
Anyone with a read-only room link may see that room's timer, rundown, and stage messages. Anyone with the control link can operate the room. Treat control links like passwords: do not publish them, and avoid putting unnecessary personal or sensitive information in room names or stage messages.
6. Retention and security
We retain information only as long as needed to provide the service, complete transactions, meet legal obligations, resolve disputes, and prevent abuse. We use reasonable safeguards such as access controls, random control tokens, and encryption in transit, but no online service can guarantee absolute security.
7. Your choices and rights
You can change or clear locally stored browser data. Use the feedback link below to request access to, correction of, or deletion of account-related personal information, or to exercise other rights under applicable law. We may verify your identity first, and may retain certain transaction records where legally required.
8. Children
The service is not directed to children below the age at which they can independently consent to digital services where they live. Minors should use it only with a guardian's permission and supervision. Contact us if you believe a child submitted personal information without appropriate consent.
9. International processing and policy changes
Our providers may process information outside your country or region. By using the service, information may be processed in other jurisdictions, subject to reasonable safeguards required by applicable law. We may update this policy; we will give appropriate notice of material changes and update the effective date above.