Privacy policy
Last updated: 2 October 2026
Who we are
Clock Loom (“we”, “us”) runs the Clock Loom service at clockloom.com and is responsible for the personal data described here. Contact us about privacy at [email protected].
What we collect
Account details: your name, email address and a salted hash of your password (we never store the password itself).
Your content: what you put on your dashboard — time entries, projects, tasks, meetings, notes, links and settings — and any files you attach to projects.
Sign-in and security records: your active sessions with the browser and device type, when you last signed in, and short-lived counters of sign-in and sign-up attempts by IP address, used to block password guessing.
If you sign in with Google or Apple: the name and email address they share with us (with Apple this may be a private relay address that forwards to you) and their permanent id for your account, so the same Google or Apple account always opens the same Clock Loom account. We never see your Google or Apple password, and we don't get access to anything else in those accounts. You can disconnect them any time from Account → Sign-in methods.
Subscription details: if you subscribe to Pro, your plan, billing period, subscription status, renewal date and a Paddle customer reference, and the subscription messages Paddle sends us. We never receive your card details.
How we use it
Only to run the service: to sign you in, save your board and sync it across your devices, keep the service secure, open the features of your plan, and send the emails described below. We don't sell your data, show ads or use tracking.
We process your data because we need to in order to provide the service you signed up for (our contract with you), and, for security records, because we have a legitimate interest in keeping accounts safe.
Emails
We send emails you ask for (password resets and invitations) and a few short emails near the end of your Pro trial. Every trial email has a link to stop them.
Payments
Payments for Pro are handled by Paddle.com, our reseller and Merchant of Record. Your card and billing details go straight to Paddle and are covered by Paddle's privacy policy.
Who processes data for us
Cloudflare hosts the site, the database and attached files. Paddle handles payments. Google and Apple confirm who you are when you choose to sign in with them. Resend delivers our emails. They process data only on our instructions to provide these services. Your data may be processed in countries outside your own; where that happens, it's protected by these providers' standard contractual safeguards.
Cookies and local storage
One essential, HTTP-only session cookie keeps you signed in. A copy of your board is kept in your browser's local storage so the dashboard works offline; it's removed when you sign out. No tracking or advertising cookies.
How long we keep it
We keep your account and content until you delete your account. When you do, your account, board, files and sessions are removed from our database straight away. Sign-in attempt counters and expired sessions are kept only briefly and cleared during regular housekeeping. Records of payments are kept by Paddle as required by tax law, and short administrative and billing records may be kept for accounting and security.
Your rights
You can download a full copy of your data from your account page at any time, correct your name, and delete your account and its data. You can also ask us at [email protected] to access, correct, delete or export your personal data, or object to how we use it. If you're unhappy with our answer, you can complain to the data protection authority where you live.
Children
Clock Loom is not intended for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a significant way, we'll tell you by email or in the dashboard. The date at the top shows when it last changed.
Contact
Clock Loom · [email protected]