Privacy Policy

This policy explains what personal data Hardout ("we", "the service") collects, why, and what rights you have. We keep data collection to the minimum needed to run the timer service.

1. Who we are (data controller)

2. What data we collect

• Email address — when you create an account (to identify you and let you sign in).
• Password — stored only as a secure one-way hash; we never see or store your actual password.
• Content you create — timers, titles, messages and rundowns/projects you set up. This is stored under your account.
• Technical logs — our hosting provider records standard web-server logs (e.g. IP address, browser type, timestamps) for security and troubleshooting.

We do not collect payment data, and we do not use tracking or advertising.

3. Why we use it and legal basis

• To provide the service (create your account, run your timer/rundown) — legal basis: performance of a contract, and your consent given at sign-up.
• Security and abuse prevention (server logs) — legal basis: our legitimate interest in keeping the service safe.

4. Cookies

We use a single, strictly necessary session cookie (CD_SESS) that keeps you signed in while you use the app. It is not used for tracking or analytics, so no cookie-consent banner is required. It is removed when you sign out or the session expires.

5. Who has access to your data

Your data is stored on our hosting provider's servers within the EU and is processed on our behalf by that provider (Websupport / the hosting used for hardout.online) as a data processor. We do not sell your data and do not share it with third parties for marketing.

6. How long we keep it

We keep your account data for as long as your account exists. When you delete your account, your email, timer and rundown data are removed. Technical server logs are rotated and deleted by the hosting provider on their standard schedule.

7. Your rights (GDPR)

Under the GDPR you have the right to: access your data, correct it, delete it ("right to be forgotten"), restrict or object to processing, data portability, and to withdraw consent at any time.

• Delete everything yourself: sign in and use Delete account in the app — this erases your account and all related data immediately.
• Any other request: email info@hardout.online and we'll respond without undue delay.

You also have the right to lodge a complaint with the Slovak supervisory authority, the Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).

8. Security

The site runs over HTTPS. Passwords are hashed, and account data files are not publicly accessible. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Changes

We may update this policy; the "last updated" date above will change. Significant changes affecting you will be communicated where reasonable.