Privacy

You can use every clock, countdown and timer on NetClock without an account, and we keep nothing about you when you do. We only store something about you if you sign in to create timers or get notifications. Effective November 7, 2026.

NetClock is a Glenbeam product, and Glenbeam is responsible for the data described here. We don’t sell or share your data for advertising.

Without an account

• No cookies. Your theme and time zone choice stay in your own browser’s storage, and we never see them unless you’re signed in (below).
• The clock asks our server for the exact time. That request sends nothing about you, and we don’t log it.
• Visit counts come from Cloudflare Web Analytics, which sets no cookies and doesn’t follow you across sites.

When you sign in

There are three ways to sign in. Each one gives us as little as it can.

• Email link: we store your email address so you get the same account next time. We use it to send you sign-in links, and the notifications you ask for.
• Discord: we ask for the identify and email permissions. We store your Discord user ID, and your email address if Discord says it’s verified. We don’t store your username, and we never get your servers or messages.
• Google: we ask for the openid and email permissions. We store the ID Google gives us, and your email address if Google says it’s verified. We don’t get your name or anything else from your Google account.

We use an address from Discord or Google only to send the notifications you ask for. It never joins accounts together: signing in with Google and with an email link gives two separate accounts, even with the same address.

To keep you signed in, we set one cookie, which lasts 30 days or until you sign out. While a Discord or Google sign-in is in progress, a second cookie lasts up to 10 minutes to protect the sign-in from forgery, and a third may hold the page to bring you back to. We also record when you accepted the terms.

You can choose a username, shown on your timers in place of anything that identifies you. We keep it, and when you last changed it, until you change it again or delete your account.

If you change the theme while signed in, we store that choice (light, dark or automatic) with your account so it follows you to your other devices.

So you can see where you’re signed in, each sign-in records when it started, when it was last used (to the hour), and your browser and system name, such as “Chrome on Windows”. We don’t keep the full browser details or your IP address. A sign-in’s record is deleted when you sign out, sign it out from your account page, or after 30 days.

Your timers

We store each timer’s title, description, end time, tags and link.

• Public timers show in the feed and search.
• Unlisted timers can be seen by anyone who has the link.

Both show when the timer was added and your username, if you’ve chosen one. They never show your email address or your Discord or Google account. Timer pages are kept out of search engines.

Notifications

When you choose Notify me on a timer, game or market, we store what you follow, the times you chose (such as 1 hour before), and your time zone, so emails show the time where you are.

• Browser notifications: if you turn them on, your browser gives us a push address and keys for that browser. We store them so we can send to it. The message is encrypted so only your browser can read it, and it travels through your browser maker’s push service (Google for Chrome, Mozilla for Firefox, Apple for Safari).
• Email: sent to your verified address through Resend. Each email has a link that stops it without signing in, and you can turn email off on your account page.
• On this device, the site remembers in your browser’s storage that you’re signed in, so pages know whether to ask the server what you follow.

Preventing abuse

• Limits: to enforce the timer limits, we keep the date and time of each timer you create, even after you delete it.
• Reports: when someone reports a timer, we store a one-way, keyed hash of their IP address, so one person counts once. We never store the IP address itself.
• Rate limits: these keep similar hashes for up to a day.

How long we keep it

• Sign-in links are deleted when used or after 15 minutes, along with the email address stored with them.
• A deleted timer’s title, description, link, tags and reports are erased right away. Only its times remain, for the limits. Anyone following it stops getting notifications.
• What you follow is deleted when you stop it, and a timer you follow is removed after its last notification.
• A browser’s push address is deleted when you turn notifications off there, sign out on it, or when the push service tells us it no longer works.
• When you delete your account, we erase your email address or Discord or Google ID, your sessions, what you follow, your browsers’ push addresses, your theme choice, your username, and everything you wrote. What remains is an anonymous record of when timers were created, with nothing that links it to you.
• Database backups let us restore the database for up to 30 days, so deleted data is fully gone after that.

Who else handles it

• Cloudflare hosts the site and the database. Like any host, it sees your IP address when you visit.
• Resend sends sign-in and notification emails, so it receives your email address and what each email says.
• Your browser’s push service (Google, Mozilla or Apple) delivers browser notifications. It sees when one is sent to your browser, but not what it says.
• Discord or Google confirm who you are if you choose to sign in with them.

Cloudflare and Resend may process data in other countries, including the United States. They do so under their own data protection terms.

Why we use it

• To run your account, show your timers and send your notifications: you asked us to.
• To prevent abuse and count visits: it’s in everyone’s interest that the site stays safe and working.
• Never for advertising, profiling or selling.

Keeping it safe

• Encryption: everything travels over HTTPS.
• Hashing: sign-in links and sessions are stored only as hashes, so a copy of the database couldn’t be used to sign in as you.
• No passwords: there are none to store.

Children

You must be 13 or older to create an account. Anyone can view timers without one. If we learn that someone under 13 has an account, we delete it. If you’re a parent and think your child has signed up, email us and we’ll remove the account.

Your rights

Depending on where you live, you may have the right to:

• see the data we hold about you
• correct, delete or export that data
• object to how we use it

You can see and delete your timers and what you follow, turn notifications off, sign out, or delete your account yourself on your account page. For anything else, email [email protected], and we’ll reply within 30 days. You can also complain to your local data protection authority.

Changes

If what we collect changes, for example if ads are added, we’ll update this page and its date before the change takes effect.

Contact

For any privacy question, email [email protected].