How tidekeeper treats your data
As published at /privacy, version 9b72dee61f81.
# How tidekeeper treats your data
This is about the people who use tidekeeper's own site: those who read its public pages, those who sign in, and those who write to us. What tidekeeper does with the visits to our customers' sites is in the data processing agreement at /dpa: there our customer decides, and we process for them.
Point Free ApS, Gunderupvej 16, 9260 Gistrup, Denmark, CVR 46560590, is the controller. Write to us at privacy@tidekeeper.eu.
## What we keep, and why
- Your email address, and your name and picture if you give them. To sign you in and to write to you about your account and tidekeeper. Basis: our contract with you, or, where you are in an account for your organisation, our legitimate interest in running tidekeeper for it.
- How you sign in. A hash of your password, your passkeys' public keys, the secret of your second step, and, if you sign in through another service such as Google, the address and name it gives us. Never your password itself. Basis: as above.
- Your sessions. When each began and which browser it was in, so you can see them and end them. Kept until they end, at most 14 days.
- What members of an account did. Who changed what, and when, for the account's owners to read. Kept as long as the account.
- Billing. The plan, the billing address and VAT number, the address invoices go to, and what was paid. Basis: our contract, and the Danish bookkeeping act, which has us keep invoices for five years after the end of the financial year.
- What you write to us. Through the contact form or by email: your address, your name if you give one, and your message. To answer you. Basis: our legitimate interest in answering.
- Visits to our public pages. We count them with tidekeeper itself, in easy mode: the page, the page or site you came from (with any campaign it names, such as utm_source), the country, the kind of device, the browser and the system, and the screen's width in one of four groups. Your address and your browser's line are used in memory to make a key that groups one day's views, which is thrown away at midnight; neither is stored, and nothing is put on your device. Making an account is counted the same way, as part of that day's visit, with whether it is for a business or for yourself and how you signed in. Basis: our legitimate interest in knowing which pages and which places that send people to us are useful. The counts are kept for 13 months, and say nothing about who anyone is.
- Your network address. Used in memory, for minutes, to slow down guessing at sign-in and floods of the contact form, and not stored. A web server error can name it, in a log kept for two days. Basis: our legitimate interest in keeping tidekeeper safe.
- The cookie. One cookie, the session's, set when you sign in, because signing in needs it. tidekeeper's public pages set none.
- Your choice of theme. If you change the colour theme, your own browser keeps that choice (in its local storage); it is never sent to us.
- Alerts on a device. If you add a device to be alerted on, an alert's title is sent to it through the push service of that device's browser (run by its maker: Google, Mozilla or Apple), encrypted so that only your device can read it.
We do not sell what we hold about you, and we do not use it for advertising.
## Who else sees it
Those who help us run tidekeeper, named at /subprocessors with where they are and what they do: our hosting, the mail we send and receive, the payment provider, and the service you sign in through, if you choose one. tidekeeper is hosted in the EU. Some of these providers can reach data from outside the EEA; where they do, it is under the safeguards the GDPR asks for, such as the EU's standard contractual clauses or the EU–US Data Privacy Framework.
Where a plan is sold through Stripe Managed Payments ("Sold through Link"), Sold through Link, LLC, a Stripe company, is the merchant of record and decides itself about the data of that payment, as a controller of its own, under Link's privacy policy.
We also give data to an authority where the law makes us, and to our advisers, who are bound to confidentiality.
## How long
As long as your account exists, unless it says otherwise above. When an account is deleted, what is in it is deleted the same day, and from our backups as they expire, within 30 days. What the bookkeeping act has us keep, we keep for as long as it says.
## Your rights
You can ask to see, correct, export or delete what we hold about you, or to have us limit what we do with it, and much of it you can do yourself on the account's pages. You can object to what we do on the basis of our legitimate interest. Write to privacy@tidekeeper.eu. If you think we treat your data wrongly, you can complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.
## Changes
We change this page when what we do changes. Last changed: 21 October 2026.This is about the people who use tidekeeper's own site: those who read its public pages, those who sign in, and those who write to us. What tidekeeper does with the visits to our customers' sites is in the data processing agreement at /dpa: there our customer decides, and we process for them.
Point Free ApS, Gunderupvej 16, 9260 Gistrup, Denmark, CVR 46560590, is the controller. Write to us at privacy@tidekeeper.eu.
What we keep, and why
- Your email address, and your name and picture if you give them. To sign you in and to write to you about your account and tidekeeper. Basis: our contract with you, or, where you are in an account for your organisation, our legitimate interest in running tidekeeper for it.
- How you sign in. A hash of your password, your passkeys' public keys, the secret of your second step, and, if you sign in through another service such as Google, the address and name it gives us. Never your password itself. Basis: as above.
- Your sessions. When each began and which browser it was in, so you can see them and end them. Kept until they end, at most 14 days.
- What members of an account did. Who changed what, and when, for the account's owners to read. Kept as long as the account.
- Billing. The plan, the billing address and VAT number, the address invoices go to, and what was paid. Basis: our contract, and the Danish bookkeeping act, which has us keep invoices for five years after the end of the financial year.
- What you write to us. Through the contact form or by email: your address, your name if you give one, and your message. To answer you. Basis: our legitimate interest in answering.
- Visits to our public pages. We count them with tidekeeper itself, in easy mode: the page, the page or site you came from (with any campaign it names, such as utm_source), the country, the kind of device, the browser and the system, and the screen's width in one of four groups. Your address and your browser's line are used in memory to make a key that groups one day's views, which is thrown away at midnight; neither is stored, and nothing is put on your device. Making an account is counted the same way, as part of that day's visit, with whether it is for a business or for yourself and how you signed in. Basis: our legitimate interest in knowing which pages and which places that send people to us are useful. The counts are kept for 13 months, and say nothing about who anyone is.
- Your network address. Used in memory, for minutes, to slow down guessing at sign-in and floods of the contact form, and not stored. A web server error can name it, in a log kept for two days. Basis: our legitimate interest in keeping tidekeeper safe.
- The cookie. One cookie, the session's, set when you sign in, because signing in needs it. tidekeeper's public pages set none.
- Your choice of theme. If you change the colour theme, your own browser keeps that choice (in its local storage); it is never sent to us.
- Alerts on a device. If you add a device to be alerted on, an alert's title is sent to it through the push service of that device's browser (run by its maker: Google, Mozilla or Apple), encrypted so that only your device can read it.
We do not sell what we hold about you, and we do not use it for advertising.
Who else sees it
Those who help us run tidekeeper, named at /subprocessors with where they are and what they do: our hosting, the mail we send and receive, the payment provider, and the service you sign in through, if you choose one. tidekeeper is hosted in the EU. Some of these providers can reach data from outside the EEA; where they do, it is under the safeguards the GDPR asks for, such as the EU's standard contractual clauses or the EU–US Data Privacy Framework.
Where a plan is sold through Stripe Managed Payments ("Sold through Link"), Sold through Link, LLC, a Stripe company, is the merchant of record and decides itself about the data of that payment, as a controller of its own, under Link's privacy policy.
We also give data to an authority where the law makes us, and to our advisers, who are bound to confidentiality.
How long
As long as your account exists, unless it says otherwise above. When an account is deleted, what is in it is deleted the same day, and from our backups as they expire, within 30 days. What the bookkeeping act has us keep, we keep for as long as it says.
Your rights
You can ask to see, correct, export or delete what we hold about you, or to have us limit what we do with it, and much of it you can do yourself on the account's pages. You can object to what we do on the basis of our legitimate interest. Write to privacy@tidekeeper.eu. If you think we treat your data wrongly, you can complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.
Changes
We change this page when what we do changes. Last changed: 21 October 2026.