Privacy Policy
Timepool has no accounts, so there is genuinely less to disclose here than most sites need. What there is, is accurate.
Last updated September 5, 2026
In short
- · No accounts, no passwords, no email addresses, no profiles.
- · We set no cookies of our own — only browser local storage, which never leaves your device except on the one request that needs it.
- · Polls and every response in them are deleted 60 days after the poll's last date.
- · We don't sell or share your personal information, and never have.
Who we are
Timepool is operated by Big Dawg software, LLC, 152 SE 4th Street, Battle Ground, WA, 98604. For the purposes of the UK and EU GDPR, we are the data controller for the information described below. Contact us at privacy@timepool.app.
What we collect
Three things, and nothing else.
1. What you type into a poll
| Field | Who provides it |
|---|---|
| Event title, and the optional note and location | The organizer |
| Candidate dates, hours, slot length and time zone | The organizer |
| A display name | Each respondent |
| Which time slots were marked free or "if needed" | Each respondent |
The display name is whatever you choose to type. It is not verified, not checked against anything, and does not need to be your real name. We have no way to connect two polls to the same person.
2. Values stored in your own browser
See Cookies and local storage below. These stay on your device.
3. Technical information from your requests
Like any web server, ours receives your IP address, the page requested, a timestamp and your browser's user-agent string. We use this to keep the site running and to rate-limit abuse — poll creation is capped at 20 per hour and responses at 120 per hour, per IP address. IP addresses used for rate limiting are held in memory only, for at most one hour, and are never written to the database or joined to poll content.
What we don't collect
- No accounts, usernames or passwords — there is nothing to sign up for.
- No email addresses or phone numbers. We cannot contact you, by design.
- No analytics that follow you between websites.
- No device fingerprinting.
- No location data beyond the time zone your browser reports, which is used to draw the grid in your local time and is not stored against you.
- No special category data as defined by GDPR Article 9.
Legal bases for processing
If you are in the UK or EEA, we rely on the following bases under GDPR Article 6:
| Purpose | Legal basis |
|---|---|
| Storing and displaying poll content to people holding the link | Contract (Art. 6(1)(b)) — it is the service you asked for |
| Rate limiting, abuse prevention, keeping the site up | Legitimate interests (Art. 6(1)(f)) |
| Personalized advertising | Consent (Art. 6(1)(a)), collected before any ad is served |
Cookies and local storage
Timepool sets no cookies of its own. Instead we keep a few values in your browser's local storage, which is not transmitted automatically the way a cookie is:
| Key | Purpose |
|---|---|
timepool:edit:<poll> | A random key proving a response is yours, so you can edit it later |
timepool:admin:<poll> | A random key proving you created a poll, so you can lock in a time or delete it |
timepool:mine:<poll> | Which response on a poll is yours, so a reload finds it again |
timepool:name | The display name you last used, so you needn't retype it |
These are random values, not identifiers we can look you up by, and they are sent to us only on the specific request that needs them. Clearing your site data erases them; nothing breaks, but you lose the ability to edit past responses and to manage polls you created.
Our advertising partner does set cookies — see the next section.
Advertising
Timepool is free and paid for by advertising. We use Google AdSense to serve ads on the site's public pages.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and other sites.
- You can opt out of personalized advertising at Google Ads Settings, or opt out of a third-party vendor's use of cookies at aboutads.info/choices.
Consent, if you're in the EEA, UK or Switzerland
Before any advertising cookie is set, we ask for your consent through Google's certified consent management platform. Until you answer, Google's tags run with advertising storage, advertising user data and ad personalization all set to denied — that default is applied before any Google script loads, not after.
You can change or withdraw your answer at any time using the “Privacy choices” link in the footer of every page, which reopens the same dialog. Withdrawing is exactly as easy as consenting. Outside those regions, ads are personalized by default and you can opt out through the Google and industry links above.
Poll content is never shared with advertisers. Titles, names and availability are not passed to the ad code, are not used for targeting, and no ads are served based on what a poll says.
Who else touches the data
| Party | Role |
|---|---|
| Fly.io, Inc. | Hosting and database storage, in Chicago, Illinois, USA |
| Google Ireland Ltd. / Google LLC | Advertising delivery and measurement (AdSense) |
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law. We have never done so.
International transfers
Our servers are located in Chicago, Illinois, USA. If you access Timepool from elsewhere, your information is transferred there. Where that involves moving personal data out of the UK or EEA, the transfer is covered by the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, as applicable.
How long we keep things
A poll and every response in it are deleted automatically 60 days after the last date in the poll. This runs on a timer, not on request, and deletion is permanent — we keep no archive copy and no backup of deleted polls beyond the ordinary rotation of our infrastructure backups.
An organizer can delete a poll sooner from its own page, and anyone can remove their own response at any time. Rate-limiting records expire within an hour.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive a portable copy, and to withdraw consent you previously gave. If you are in the UK or EEA you also have the right to complain to your data protection supervisory authority.
If you are a California resident, you have the right to know, delete and correct personal information, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. As stated above, we do not sell or share personal information, so there is no opt-out to offer.
In practice, most of these rights are satisfied by the poll page itself: everything we hold about you is visible on it, you can edit your response in place, and you can delete it with one click.
How to exercise your rights
Email privacy@timepool.app. We respond within 30 days.
Please include the link to the poll in question. Because there are no accounts, a poll link is the only way we can locate a record — we cannot search by name, and a name alone is not enough for us to identify anyone. This is a direct consequence of collecting so little, and it means that for a poll whose link you no longer have, we genuinely cannot find your data to act on it. It will still delete itself on schedule.
Security
Traffic is served over HTTPS. The keys that authorize editing a response or managing a poll are random 256-bit values stored only as SHA-256 hashes, so a copy of our database would not let anyone take over your poll — and if you lose your organizer link, we cannot recover it for you, because we never had it.
Poll addresses are derived through a salted permutation rather than counting upward, so there is no sequence for a stranger to walk, and poll pages are excluded from search engines. That said, anyone holding a poll's link can see everything in it. Treat the link as the access control it is.
No system is perfectly secure, and we make no guarantee that ours is. Please don't put sensitive information into a poll title.
Children
Timepool is not directed at children under 13 and we do not knowingly collect personal information from them. We collect no identifying information from anyone, so there is little for a child to give us beyond a display name they choose to type. If you believe a child has provided information you would like removed, email us with the poll link and we will delete it.
Changes to this policy
We may update this policy. The date at the top of the page tells you when it last changed. If a change materially reduces your privacy, we will say so prominently on the site rather than quietly editing the page.
Contact
Big Dawg software, LLC
152 SE 4th Street, Battle Ground, WA, 98604
privacy@timepool.app