Privacy Policy

We collect only what Timeroll needs to work, show publicly only what you choose to share, and never sell your data or use it for ads.

Who we are

Timeroll is run from Istanbul, Türkiye. We are the data controller for your personal data under Türkiye's KVKK and the EU GDPR. Contact us at hello@timeroll.com.

What we collect

• Your account: name, email address, username and password (stored only as a secure hash).
• Your profile, if you add it: photo, short bio, place, website and time zone.
• Security settings: two-factor authentication and passkeys, if you turn them on (stored encrypted).
• What you do on Timeroll: the timerolls you add and when, the people you follow, the date reports you send, and your settings (such as keeping your timerolls private).
• If you're an editor: your editor picks and a log of the changes you make to timerolls.
• Activity: the days you use Timeroll and when you were last active, so we can see whether it is useful to people.
• Technical data: IP address, browser and the pages requested, in our server logs, for security and fixing problems.

To count visits we use Cloudflare Web Analytics, which sets no cookies, doesn't follow you across sites and doesn't identify you: it counts page views, where visitors come from, their country, device and browser, and how fast pages load. We don't use advertising, tracking pixels or any other analytics, and we never sell your data.

Why we use it

• To run your account and Timeroll's features: countdowns, adds, follows, your profile (our contract with you).
• To keep Timeroll safe: preventing spam and abuse, and securing accounts (our legitimate interest).
• To understand usage: in totals, never to profile you (our legitimate interest).
• To email you: account emails such as verification and password resets; anything else only if you opt in, and you can withdraw at any time (your consent).

What is public

Your name, username, photo, bio, place, website, when you joined, who you follow and who follows you, and your recent follows. The timerolls you add, when you added them, and the categories you add most are public too, and you can appear in a timeroll's "Added by" list, unless you make your timerolls private in your settings.

Who we share it with

Only the providers that run Timeroll for us, under contracts that protect your data:

• Laravel (Forge): runs and manages our servers, on DigitalOcean infrastructure in Frankfurt, Germany.
• Cloudflare: delivers the site quickly and securely around the world, counts visits without cookies (Web Analytics), and keeps our backups in the EU.
• Our email provider: sends account emails.

Our servers are in Germany, so if you use Timeroll from Türkiye, your data is transferred abroad. We do this with the safeguards KVKK article 9 requires (standard contracts). Where a provider processes data outside the EU, the EU Standard Contractual Clauses apply. We share data with authorities only when the law requires it.

How long we keep it

As long as your account exists. When you delete your account in settings, your profile and adds disappear at once, and your personal data is erased permanently 30 days later; copies in our backups expire within about 15 more days. Server logs are kept only for a short time. If you were an editor, the changes you made to timerolls stay, without your name.

Your rights

You can see, correct, download or delete your data, object to or restrict how we use it, and withdraw your consent at any time. These are your rights under KVKK article 11 and the GDPR. You can edit or delete your data in your settings; for anything else, including a copy of your data, email us and we will answer within 30 days. You can also complain to the Personal Data Protection Authority in Türkiye (KVKK) or to your local data protection authority in the EU.

Age

Timeroll is for people aged 16 and over. We don't knowingly collect data from younger children; if you believe a child has an account, tell us and we will delete it.

Cookies

We use only the cookies Timeroll needs to work. See Cookies.

Changes

If we change this policy, we will post it here with a new date. If the change is significant, we will also tell you on the site or by email before it takes effect.