Privacy Policy

This policy explains how information is handled by the CuckooTimer website, the direct-download purchase and update service, and the CuckooTimer Mac App Store application. The Mac App Store app stores timer preferences locally and does not require an account or in-app purchase after downloading it from the Store.

ThoughtBubble Development, LLC is the data controller and operator of the CuckooTimer website, the direct-download service, and the CuckooTimer Mac App Store application. The same legal entity is named in the Terms and in the App Store listing, and it must be kept consistent in all three places. For questions, correction requests, or deletion requests, contact support@thoughtbubble.dev.

Information handled by the Mac App Store app

The Store app keeps timer preferences, working-hours settings, and first-launch state in its local app container. The Store app does not require an account and does not contain advertising or Stripe checkout. App version 1.0.1 and later includes best-effort product analytics using a random installation identifier scoped to CuckooTimer and coarse timer outcomes. The analytics service also derives approximate location from network connection information. These events exclude content and settings values; they are not required for reminders to work. Earlier app versions do not include these product analytics. The app may open the website when you choose About or Privacy Policy from its menu.

App Store Connect privacy answers describe the Store binary only. Website analytics and direct-download purchase processing are separate services and are described below.

Website analytics and technical data

The website uses Umami to understand aggregate page visits, demo use, and App Store link clicks. Analytics sends page categories and product events, with version and release context, rather than raw page URLs, query strings, referring URLs, or page titles. Purchase-success, recovery, administration, and API routes are excluded, including navigation within the website. Analytics requests may still expose technical connection information such as IP address to the service. An App Store link click is not a verified purchase.

Hosting, security, and diagnostic systems may process request metadata, IP addresses, timestamps, error information, and database telemetry. Access is limited to operating and securing the service. Retention depends on the relevant provider and operational need; contact us if you need a specific retention or deletion request reviewed.

Purchases and downloads

Direct website purchases are processed by Stripe. Stripe collects payment and checkout information under its own privacy policy. To fulfill a purchase and support re-downloads, the service stores a customer email address, Stripe identifiers, purchase amount/currency, status, product metadata, and purchase timestamp in a PostgreSQL database. Download links are time-limited presigned URLs.

Cloudflare Turnstile may be used to reduce automated abuse on recovery forms. If you request a direct-download recovery, a transactional email provider may send a short-lived ownership link to the purchase email address. Service providers process information only to provide hosting, payment, security, email, analytics, storage, or support services and must protect it according to their own terms and applicable law.

How information is used

• To operate, secure, troubleshoot, and improve the website and download service.
• To process payments, fulfill purchases, provide downloads, and handle refunds or support requests.
• To measure aggregate website usage and detect abuse, fraud, or service errors.
• To respond to questions, deletion requests, and other communications you initiate.

Retention, deletion, and consent

Purchase and accounting records may be retained as needed for fulfillment, fraud prevention, refunds, tax, legal compliance, and dispute resolution. Analytics and operational logs are retained only as long as needed for the stated purpose and provider controls. You may request access, correction, deletion, or information about available analytics controls by emailing support. We may need to retain information required by law or necessary to establish, exercise, or defend legal claims.

Security and children

Reasonable administrative, technical, and organizational safeguards are used, but no method of transmission or storage is completely secure. CuckooTimer is not directed to children under 13, and we do not knowingly collect information from children under 13.

Changes and contact

We may update this policy when the service or legal requirements change. The effective date above will be updated when material changes are published.

Privacy questions and requests: support@thoughtbubble.dev