Snowtime

Privacy policy

Last updated September 25, 2026

This policy explains what personal data Snowtime collects, why, and what you can do about it. Snowtime is a time tracker run by Snowhound OÜ at snowtime.snowhound.eu.

Who we are

Snowhound OÜ (registry code 12745389), Meistri tn 14, 13517 Tallinn, Estonia, is the controller of the personal data described here. For anything about this policy or your data, email info@snowhound.eu.

When an organization uses Snowtime for its members' work, the organization decides what its members record, and we process that data on its behalf. You can also ask the organization about its records. If your organization needs a data processing agreement with us, email us.

What we collect

  • Account: your name, email address, and profile picture link, which the sign-in provider (Google, GitHub, or Microsoft) sends us, and the provider's identifier for your account. We also keep the tokens the provider issues at sign-in; we don't use them to read anything else from your account.
  • Passkeys: the public key and device details of each passkey you add. The private key never leaves your device.
  • Sessions: for each signed-in device, its IP address, browser, and expiry time.
  • Settings: your time zone, week start, language, and appearance choices.
  • Organizations: the organizations, teams, and projects you belong to or create, your role in each, and invitations, including the invited person's email address.
  • Time entries: the descriptions, projects, and start and stop times you record.
  • Technical data: our hosting provider records requests, including IP addresses, in short-lived logs, and we count requests per IP address and account to limit abuse.

We don't use analytics, advertising, or any tracking, and we don't sell personal data.

Why we use it

  • To provide Snowtime: signing you in, storing your entries, and showing reports to the people your organization allows. Legal basis: our contract with you (GDPR Article 6(1)(b)).
  • To keep the service secure and stop abuse, with sessions, rate limits, and logs. Legal basis: our legitimate interest in running a safe service (Article 6(1)(f)).
  • To meet legal obligations, such as answering lawful requests from authorities (Article 6(1)(c)).

Who can see your data

  • Members of your organizations see your name, email address, and profile picture. Who sees your time entries depends on roles: team leads see their teams' entries, and admins and owners see and can change every entry in the organization.
  • Processors that run Snowtime for us under data processing terms:
    • Vercel hosts the application, which runs in Dublin, Ireland.
    • Turso stores the database in Ireland.
    • Upstash stores short-lived rate-limit counters in Ireland.
  • Sign-in providers: Google, GitHub, and Microsoft handle your sign-in under their own privacy policies. Your browser loads your profile picture from the provider's servers.
  • Authorities, when the law requires it.

Transfers outside the EU

We store data in the EU, in Ireland. Vercel, Turso, and Upstash are US companies, so data may be accessed from the US, for example for support. These transfers rely on the European Commission's standard contractual clauses or an adequacy decision, such as the EU–US Data Privacy Framework.

How long we keep it

  • Account, settings, organizations, and entries: while your account exists.
  • Sessions: until you sign out, or about a week after you last use them.
  • Rate-limit counters: a few minutes. Logs: a short period set by the hosting provider.
  • A deleted time entry or project disappears from the app at once but stays in the database marked as deleted, so the organization's history stays consistent. Email us if you need it erased.
  • Backups: Turso keeps database backups for a limited time, after which deleted data is gone from them too.

Deleting your account

Snowtime has no delete button yet. Email info@snowhound.eu from your account's email address, and we'll delete the account within one month. We replace your name, email address, and picture, and remove your sessions, passkeys, and sign-in connections. Time entries you recorded in an organization stay in its records but no longer identify you. Before you ask, you can export your entries from Reports as CSV or XLSX.

Cookies and browser storage

We use only what the service needs to work, so we don't ask for consent:

  • Sign-in cookies that keep you signed in.
  • A language cookie that remembers your language for about a year.
  • Browser storage that remembers, on this device, your appearance choices (theme, app icon, and scenery), whether you've seen the intro, and whether you've dismissed the offer to add a passkey.

Your rights

Under the GDPR, you can ask to access, correct, delete, restrict, or port your data, and object to processing based on our legitimate interest. Email info@snowhound.eu; we reply within one month. You can change your name in Settings and export your entries from Reports yourself.

You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the data protection authority in your country.

Children

Snowtime is a work tool and isn't meant for children under 13.

Changes

When our practices change, we update this page and its date. We announce significant changes in the app before they apply.