Privacy Policy

Effective date: July 17, 2026

This Privacy Policy describes how Timezone Explorer ("we," "us," "the Service") collects, uses, and protects information when you use timezoneexplorer.com. The free exploration experience works without an account. An account is required only when you choose to save a workspace or use account features.

Short version

We use essential account data when you sign in, save the workspace you ask us to save, and count a small set of product actions only as anonymous daily totals. We do not store individual analytics histories, advertising identifiers, or device fingerprints.

1. Information We Collect

Timezone Explorer is designed to minimize data collection. Much of the Service operates within your browser. We process the following categories of information:

Category Method Purpose Storage
Browser timezone JavaScript Intl API Display local time; suggest relevant cities Client-side only
Account identity Email-code sign-in Create your account, authenticate you, secure your session, and respond to account requests Email address, verification state, role, and login timestamps in Cloudflare D1; short-lived codes and sessions in Cloudflare KV
Workspace & preferences Browser storage and, for signed-in accounts, workspace sync Restore the cities, pins, meeting settings, and display preferences you save On your device; signed-in workspace data is also stored in Cloudflare D1
Aggregate product events Small same-origin event requests Measure whether visitors reach useful product outcomes, return, share, or start checkout Daily counters by event, page context, and environment in a separate Cloudflare D1 database
Subscription status Lemon Squeezy Process Pro purchases and activate access Lemon Squeezy stores billing details; we store the customer reference, plan, status, and current period end, but never card details
Selected coordinates Lookup requests initiated by product use Resolve a selected place to its timezone and location label May be included in your saved workspace; not stored in the aggregate analytics database

2. Information We Do Not Collect

We want to be explicit about what we do not do:

3. Shared Links

The Service allows you to generate shareable comparison URLs. These URLs encode city or pin references, timezone information, and optional meeting parameters. They are designed not to include your account email. By sharing a link, you acknowledge that its encoded places and meeting details become accessible to anyone who receives the URL.

4. Local Storage

Temporary and local preferences may be stored in sessionStorage or localStorage. When you sign in and save a workspace, the workspace is also transmitted to and stored by our account service so it can be restored on another session. You can clear browser storage through your browser settings and delete server-side account data through the in-product account deletion flow.

5. Aggregate Product Analytics

We count a fixed, documented set of product events such as opening the app, adding a first or second city, seeing a meeting result, choosing a time, sharing a board, exporting a calendar event, starting an account flow, opening pricing, clicking checkout, and activating a subscription.

Before storage, each accepted event is reduced to a daily counter containing only the UTC day, deployment environment, event name, broad context, and count. The analytics store does not contain raw event rows or fields for email, account ID, IP address, session ID, user agent, city, timezone, or device identity. Automated browsers, common bots, signed-in owner activity, Global Privacy Control, and Do Not Track are excluded where detectable.

6. Third-Party Services

The Service relies on the following third-party providers, each subject to their own privacy policies:

7. Data Retention

Email verification codes expire after approximately 10 minutes. Authentication sessions expire after approximately 30 days unless ended earlier. Account, subscription, and saved workspace records are retained while the account remains active and are removed through the account deletion flow, subject to limited security, legal, fraud-prevention, or transaction-record obligations. Anonymous aggregate counters may be retained for historical product comparison because they cannot be connected back to an individual. Lemon Squeezy retains transaction records under its own policy and applicable financial requirements.

8. Data Security

We use TLS encryption in transit, secure HttpOnly session cookies, short-lived email codes, rate limiting, same-origin checks for mutations, server-verified roles, and restricted owner-only access to aggregate reports. No internet service can guarantee absolute security.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data. Specifically:

10. International Data Transfers

Our service providers operate internationally. Information may be processed outside your country subject to the safeguards and transfer mechanisms maintained by those providers and applicable law.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy as the Service changes. Material changes will be communicated appropriately. The effective date at the top identifies the latest revision.

13. Contact

For privacy-related inquiries or to exercise your data rights, please contact us at hello@timezoneexplorer.com.