WorldClockTools.

Privacy Policy

Last updated: 2026-11-05

Pending counsel review. This document is an initial good-faith template prepared by the operator and has not yet been reviewed by external counsel. Legal entity, address, and contact details are accurate; specific obligations and remedies may be revised after legal review.

This Privacy Policy describes how Horizonfold Labs LLP ("we", "us") processes personal data in connection with WorldClockTools at worldclocktools.com (the "Service"). It is written to satisfy the EU General Data Protection Regulation (GDPR), the UK GDPR / Data Protection Act 2018, the California Consumer Privacy Act / CPRA, the Digital Personal Data Protection Act, 2023 (India), Brazil's LGPD, and the ePrivacy Directive 2002/58/EC.

1. Who is the controller

Controller: Horizonfold Labs LLP, No 427/7 Balaji Arcade, 2nd & 3rd Floor, AVS Compound, 20th L Cross, Bangalore 560095, India. Email: privacy@worldclocktools.com.

EU representative under GDPR Art. 27: Not currently appointed. We do not actively target EEA residents; users from the EEA are welcome to contact privacy@worldclocktools.com directly.. UK representative: Not currently appointed. UK residents may contact privacy@worldclocktools.com directly.. India Grievance Officer (DPDP Act §13): Harsh Bishnoi, grievance@worldclocktools.com.

2. What data we process

Most of the Service works without telling us who you are. We process:

  • Connection data (IP address, user-agent, referer). Logged at the edge for security and abuse prevention. Retained for up to 30 days.
  • Analytics events (page URL, referrer, viewport, approximate country, and the named product events listed in our Cookie Policy) via Google Analytics 4 and PostHog. Where consent is required (including the EEA, the UK, and wherever we cannot determine your region), these load only after you consent; elsewhere they load by default and you can opt out at any time. Some of our server endpoints (for example, newsletter sign-up and push subscription) also record a usage event in PostHog keyed by a one-way hash rather than your email address. We do not run advertising or social-media pixels.
  • Local preferences (theme, watchlist, meeting-planner state, cookie-consent record). Stored in your browser's localStorage and never transmitted to us.
  • Country/region inference from your IP at the edge, used solely to decide whether to show an opt-in or opt-out cookie banner. Not retained.
  • Newsletter subscription (only if you sign up): your email address, the categories and frequency you choose, a confirmation token, and sign-up, confirmation and unsubscribe timestamps. Used to send the emails you asked for.
  • Push-notification subscription (only if you turn on a reminder): the push endpoint and encryption keys your browser gives us, the countdown you asked about, and the reminder lead time. These identify your browser's push channel, not you by name.

3. Purposes and legal bases

  • Operating the Service — legitimate interest (GDPR Art. 6(1)(f)). Without minimal connection logs we cannot run a public website safely.
  • Analytics — your consent (GDPR Art. 6(1)(a) / ePrivacy Art. 5(3)). Withdrawable at any time via the link in the footer.
  • Newsletter and push reminders — your consent, given when you sign up and confirm, or when you allow notifications in your browser. Withdrawable at any time via the unsubscribe link in every email, or by turning the reminder off.
  • Compliance with law — GDPR Art. 6(1)(c).

4. Recipients and processors

  • Google LLC (Google Analytics 4) — analytics processor, US, with EU-US Data Privacy Framework certification and Standard Contractual Clauses.
  • PostHog Inc. — product-analytics processor, US, under SCCs.
  • Amazon Web Services — hosting and CDN, storage of newsletter and push subscriptions, and sending of newsletter email (Amazon SES).
  • Your browser vendor's push service (for example Google, Mozilla or Apple) — delivers push reminders if you turn them on.

5. International transfers

Some processors are based in the United States. Transfers rely on Standard Contractual Clauses and, where available, the EU-US Data Privacy Framework. For India, we rely on contractual commitments equivalent to those required under DPDP Act §16 pending publication of the negative list.

6. Retention

  • Edge connection logs: up to 30 days.
  • Google Analytics: up to 14 months (the property's data-retention setting).
  • Newsletter subscription records: while you are subscribed; after you unsubscribe we keep your email address and unsubscribe date so that we do not email you again. Ask us to delete it entirely at any time.
  • Push subscriptions: used while active; when you turn a reminder off or the push service reports the subscription as expired, it is marked inactive and no longer used. Ask us to delete it entirely at any time.
  • PostHog event data: 12 months for raw events; aggregated data may be retained longer.
  • Local preferences: until you clear them in your browser.
  • Consent records: 12 months from the date of consent (then re-prompted).

7. Your rights

Depending on your jurisdiction, you may have rights to:

  • Access your personal data (Art. 15).
  • Have inaccurate data corrected (Art. 16).
  • Have data erased (Art. 17).
  • Restrict processing (Art. 18).
  • Receive your data in a portable form (Art. 20).
  • Object to processing based on legitimate interest (Art. 21).
  • Withdraw consent at any time (Art. 7(3)).
  • Lodge a complaint with a supervisory authority — for example, your national DPA in the EEA, the ICO in the UK, the CNIL in France, the Garante in Italy.

Under CCPA/CPRA (California), applicable rights can include access, deletion, correction, opt-out of "sale" or "sharing", limiting use of sensitive personal information, and non-discrimination for exercising those rights. We do not sell personal information or process sensitive personal information for advertising. We honour the Global Privacy Control (GPC) signal as an opt-out signal where it applies.

Under the DPDP Act (India) you may: access information about your personal data, request correction or erasure, nominate another person in case of death/incapacity, and file a grievance with our Grievance Officer (above). We will respond within a reasonable time.

To exercise any of these rights, see our Contact page.

8. Cookies and similar technologies

See our Cookie Policy for the full list of cookies and what they do.

9. Children

The Service is not directed to children under 13 (United States), 16 (European Economic Area), or 18 (India under DPDP). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Automated decision-making

We do not perform automated decision-making or profiling that produces legal or similarly significant effects on you (GDPR Art. 22).

11. Security

We use TLS in transit, reputable hosting, and minimum-privilege access for our processors. We will notify the relevant supervisory authority and affected users of any personal-data breach within 72 hours where required (GDPR Art. 33–34).

12. Changes

We may update this policy. Material changes will be highlighted on this page and reflected in the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

Privacy enquiries: privacy@worldclocktools.com. Postal: No 427/7 Balaji Arcade, 2nd & 3rd Floor, AVS Compound, 20th L Cross, Bangalore 560095.