Privacy
Last updated: 4 November 2026
In short: without an account, everything stays in your browser. With an account, your data is encrypted on your device before it is sent, and only your password can open it. There are no ads and no cookies, and visits are only counted as anonymous totals.
Without an account
Your solves and settings are stored only in this browser (IndexedDB and localStorage). They are not sent anywhere. Clearing the site's data in your browser deletes them, so save a backup file now and then: Settings → Data.
With an account
The cloud keeps:
- Your login, in readable form: it is how your account is found.
- An encrypted copy of your profile: solves, notes, sessions and your profile details. It is encrypted with AES-256-GCM on your device, with a key made from your password. The server can't read it.
- A hash of a check value derived from your password, used to confirm it's you, and the date of the last change and the size of the copy.
Your password never leaves your device. That also means nobody can recover it for you: if you forget it, the cloud copy can't be opened.
Technical data
- IP address. Used to limit abuse: briefly in the server's memory, and in counters that delete themselves within 2 hours, created after a wrong password or a new account.
- Google Fonts. The site's fonts load from Google, so your browser contacts Google and shares your IP address with it, under Google's privacy policy.
- Hosting. The site runs on Vercel and the cloud copy is stored with Upstash. Like any host, they may process technical request data such as IP addresses, under their own policies.
Anonymous totals
To know whether the site is useful and where people hear about it, it counts a few moments: a first visit, a visit on a given day, the first and the 50th solve, coming back after a week, opening the Academy, and sharing a result image. Each one only adds 1 to a total for that day and that source, such as "TikTok" or "direct". The totals hold no address, no login, no solve data and no identifier, so they can't be traced to you or link one day to another.
A short note in your browser's storage remembers what has been counted and the source, so nothing is counted twice; it stays on your device. If your browser sends Global Privacy Control or Do Not Track, nothing is counted.
What is not here
No cookies, no third-party analytics, no advertising, no selling or sharing of your data. Your browser also keeps a copy of the site's own files so it works offline; that contains none of your data.
Your control
- Get a copy: Settings → Data, as a file.
- Change your password: Profile → Account.
- Delete your account: Profile → Account → Delete account from the cloud. The account and its copy are removed straight away, and solves stay on your device. Your other devices keep their own copies until you remove those too.
- Can't sign in, or have a question? Write to us. We can remove an account, but we can't read or recover what's inside it.
Contact
Telegram: @wxwmv
Email: pbtimer@outlook.com
If this page changes, the date at the top will change too.