Privacy policy

Last updated 11 November 2026

Timesake is built so that I learn as little about you as possible. The time it records, and the names of your clients, files and web pages, never leave your own devices. This policy explains the small amount of information that does reach me, why, and what you can do about it.

Who is responsible for your information

Timesake is made and sold by Daniel Burdett (known as Craig Burdett), a sole proprietor based in New York, United States, trading as Timesake. I’m responsible for the information described here, which data protection law calls the controller. When you buy a licence, you’re buying it from Paddle, which acts as the Merchant of Record and is responsible for the payment information it collects, as explained below. You can reach me about anything in this policy at [email protected].

What the apps record, and where it stays

The Timesake app for Mac records which app is in front, its window title, the file and folder it has open, and the address of your browser’s current tab, together with when and for how long. It never records what you type and never takes screenshots. The iPhone, iPad and Apple Watch apps record the timers you start and the time you enter.

All of this is stored on your own devices. When your devices share it with each other, they do so through your own iCloud account, which Apple encrypts and which I can’t read. I have no copy of it and no way to see it.

Update checks

Once a day, the Mac app asks timesake.app whether there’s a newer version. Like any request on the internet, this shows my web server your IP address and which version of Timesake and macOS you’re using. It sends nothing else, and I don’t use it to identify you. The iPhone, iPad and Apple Watch apps update through the App Store and don’t contact me at all.

Feedback you choose to send

Send feedback in the app opens an email for you to read and send yourself. You can include a summary of counts and percentages, such as how many projects and rules you have, which never contains names, titles, file paths or web addresses, and you can read it before it goes. If a crash report exists, you choose whether to attach it. I use what you send only to fix problems and improve Timesake.

Signing up for the beta

The beta sign-up form on timesake.app asks for your name, your email address and a few answers about how you work. Formspree receives the form and emails it to me. I use it only to choose testers, to send the beta emails and weekly surveys, and to send your free licence if you earn one. You can ask me to stop at any time, and I’ll delete your answers.

Buying a licence

Paddle runs the checkout and processes your payment, so your card or bank details go to Paddle and never to me. Paddle’s privacy policy explains how it handles them. Paddle shares with me what I need to provide your licence and support you, which is your name, your email address, your country, what you bought and when. I use this to send and look after your licence, to answer your questions, to tell you about important updates to the version you own, and to keep the records the law requires. I won’t send you marketing unless you’ve asked for it.

This website

timesake.app sets no cookies, uses no analytics or advertising, and loads nothing from other sites. It runs through Cloudflare, which protects and speeds up the site, and is served from my own web server. Both keep standard technical logs, such as IP addresses, pages requested and browser types, to keep the site secure and working. I don’t use these logs to identify visitors, and my server deletes them after a few weeks.

Email to timesake.app addresses passes through Cloudflare’s email routing before it reaches my inbox.

The services I rely on

To run Timesake I use Paddle for sales and payments, Formspree for the beta sign-up form, Cloudflare for the website, its update feed and email routing, and Apple for iCloud and the App Store. Each handles information only to provide its service. I don’t sell or rent anyone’s information, and I don’t share it with anyone else unless the law requires it.

Legal basis

If you’re in the United Kingdom or the European Economic Area, I handle your information because it’s needed to provide what you’ve bought or asked for, such as a licence, a beta place or a reply to your email, because I have a legitimate interest in keeping Timesake secure and working, or because the law requires me to keep sales records. Where I rely on your consent, such as for the beta emails, you can withdraw it at any time.

Where information is kept, and for how long

I’m based in the United States, and the services above may store information in the United States and elsewhere, under the safeguards they each provide for international transfers. I keep beta sign-ups until the beta ends or you ask me to delete them, and licence records for as long as your licence is in use and for as long as tax and accounting law requires after that.

Your rights

Wherever you live, you can ask me what information I hold about you, ask me to correct it or delete it, or ask for a copy. If you’re in the United Kingdom, the European Economic Area, California or anywhere else with similar laws, you have these rights by law, along with the right to object to how I use your information and to complain to your data protection authority. Email [email protected] and I’ll reply within a month. I may need to keep some sales records that the law requires, even if you ask me to delete them.

Children

Timesake is made for working adults and isn’t directed at children under 16. I don’t knowingly collect information from them.

Changes to this policy

If Timesake ever needs to handle information in a new way, I’ll update this policy and the date at the top before it happens, and I’ll tell licence holders by email about any important change.