This page in other languages: Deutsch · Français · Español · Português (Brasil) · Polski · Italiano
Privacy Policy
Last updated: October 11, 2026. This policy explains what personal data Clockhund (clockhund.com) processes, why, who helps us, how long we keep it and what you can ask us to do. Short version: the calculators work in your browser and the hours you type there never reach us; with an account we store only what the service needs; we never sell data, show ads or use advertising or cross-site trackers.
1. Who is responsible
Clockhund is operated by Dibsido.com s.r.o., Hlinky 995/70, Staré Brno, 603 00 Brno, Czech Republic, company ID 04779568, VAT ID CZ04779568 ("we", "us"). We are the controller of the personal data described here under the EU General Data Protection Regulation (GDPR), except for the hours of the people you add to your account, which we process on your behalf (section 5).
Contact for anything about your data: hello@clockhund.com or the form on our support page. We have not appointed a data protection officer because the GDPR does not require one for our processing; the address above reaches the people responsible. For Brazil, see section 14.
2. The calculators without an account
Times, breaks, names and settings you type into the calculators are stored only in your browser (local storage) so they are still there when you come back. They are not sent to us. PDF and CSV files are created in your browser too. You can remove them with the Clear button or by clearing your browser's site data.
3. What we process, why and on what legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Your email address and language when you request a login link or create an account | Creating your account, sending login links and service emails (for example about your subscription or a change to our terms or this policy) | Contract, Art. 6(1)(b) |
| What you keep in your account: the names of the people you add, their working days (start, end, breaks or hours), notes, hourly rates, contract hours, your rule and display settings and shift templates | Providing the account: saving hours, calculating totals, overtime and balances, creating timesheets and payroll files | Your own data: contract, Art. 6(1)(b). Other people's data: we process it for you, see section 5 |
| A week from the free calculator you choose to keep in an account | It travels with your login link and is saved to your account when you open the link | Contract, Art. 6(1)(b) |
| Subscription records: email, plan, status, currency and amount, renewal and cancellation dates, Paddle reference numbers | Unlocking the team plan, showing your billing status, renewal reminders | Contract, Art. 6(1)(b) |
| Cancellations sent through our cancellation page: name, email, type and date of the cancellation, reason if given, time of receipt | Carrying out the cancellation, confirming it and proving that we received it | Legal obligation, Art. 6(1)(c) (for German consumers § 312k BGB); legitimate interest in proof, Art. 6(1)(f) |
| Messages to us (email or support form): your name, email and what you write | Answering you and keeping track of the conversation | Contract, Art. 6(1)(b), where it concerns your account; otherwise legitimate interest in answering, Art. 6(1)(f) |
| Waitlist for employees logging their own hours: email, number of employees, country, how you collect hours today | Telling you if and when we build it, deciding what to build first | Consent, Art. 6(1)(a); you can withdraw it at any time |
| Usage events, for example "calculator used", "PDF downloaded", "account created", with the page, the language, and a visitor code (see below) or, when you are logged in, your account ID. Never the hours or names you enter | Understanding which calculators and steps are used, improving the product, counting AI readings for the daily limit | Legitimate interest, Art. 6(1)(f) |
| Technical data: IP address, browser, the country derived from the IP address, request logs | Running the service securely, preventing abuse (rate limits), fixing errors, and starting the calculators with your country's clock, currency and rules | Legitimate interest, Art. 6(1)(f) |
The visitor code in usage events is calculated on our server from your IP address and browser with a secret key that changes every day, then shortened. It lets us count how many visitors use a calculator on one day without storing anything on your device. It cannot be traced back to your IP address and the same visitor gets a different code the next day.
Our legitimate interests are running a secure, working service, improving it based on how it is used in aggregate, and answering people who write to us. We have weighed them against your interests: the data is minimal, pseudonymous where possible and never used for advertising or profiling.
Do you have to give us data? You can use the calculators without giving us anything. An account needs an email address; without it we cannot send login links. Joining the waitlist is voluntary. We do not make decisions about you based solely on automated processing, including profiling.
We do not sell your data, we do not show ads, and we do not use the hours or names you enter for anything but providing Clockhund to you.
4. Your right to object
Where we process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation (Art. 21 GDPR). We then stop unless we can show compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims. Write to hello@clockhund.com.
5. Hours of the people you add (we process them for you)
When you keep other people's hours in your account, for example your employees', you decide what is entered and why, so you are the controller of that data and we process it on your behalf. Our data processing agreement applies to that processing and is part of our terms. You are responsible for having a legal basis for that processing and for informing those people. If one of them asks us about their data, we pass the request on to you.
6. Reading hours with AI
Text and files you import (pasted notes, Excel or CSV) are read in your browser. Only if you choose "Read with AI" is the text or photo sent to Anthropic (Claude) to read the hours from it. We don't store the text or the photo; we only record that a reading took place, with your account ID or a shortened one-way hash of your IP address, to apply the daily limit. Anthropic processes the content as our processor, does not use it to train its models and deletes it within 30 days, unless it is needed to enforce Anthropic's usage policy or the law requires otherwise. Check what you send: the text or photo may include names and hours of other people. This feature is available only where we have switched it on.
7. Cookies and browser storage
We only use cookies and browser storage that are strictly necessary to provide the service you ask for. That is why we don't show a cookie banner (Art. 5(3) of the ePrivacy Directive; in Germany § 25(2) TDDDG).
| Name | What it does | How long |
|---|---|---|
sid (cookie) | Keeps you logged in. Contains a random session key. | 180 days after you log in, or until you log out |
hc_in (cookie) | Tells our pages to show "Open app" instead of "Log in". Contains only "1", no ID. | Same as sid |
hc_cc (cookie) | The two-letter country code derived from your IP address, so the calculators start with your country's clock, currency and rules. | 24 hours |
| Calculator drafts (local storage) | What you typed into a calculator, one draft per language, so it's still there when you come back. Never sent to us. | Until you clear it |
When you start a payment, Paddle's checkout opens on our page and may use its own strictly necessary cookies under Paddle's privacy policy. We use no advertising, analytics or cross-site tracking cookies. Earlier versions of the site kept a random statistics ID in local storage; the site now deletes it on your next visit.
8. Who receives data
Service providers (processors). They process data only on our instructions and under a data processing agreement:
- Vercel Inc. (USA): hosting of the website and the app; the app and its functions run in Frankfurt, Germany, and pages are delivered through Vercel's worldwide network. Also anonymous visitor statistics (Vercel Web Analytics: page views counted without cookies and without storing anything on your device).
- Neon Inc. (USA): database hosting for accounts, saved hours and usage events; the database is in Frankfurt, Germany.
- Resend (USA): sending login links and service emails, from Dublin, Ireland.
- Anthropic PBC (USA): reading imported text and photos with AI, only when you choose "Read with AI".
- Our email provider, for the hello@clockhund.com mailbox and support messages.
Paddle as a separate controller. When you subscribe to the team plan, Paddle.com Market Ltd (United Kingdom) sells it to you as our reseller (merchant of record). Paddle collects your payment and billing details, handles invoices, taxes, refunds and fraud checks as an independent controller under its own privacy policy. Paddle tells us your email address, the plan and its status, the currency and the amount so we can activate the plan. We never see or store your card details.
Others. Authorities, courts or our professional advisers (for example accountants or lawyers, who are bound by confidentiality) when the law requires it or it is necessary to establish or defend legal claims. If our business is sold or merged, the buyer would take over this policy's commitments.
9. International transfers
Your account, the saved hours and the emails we send are stored and processed in the EU. Vercel, Neon, Resend and Anthropic are US companies, so access from the USA (for example by their support) cannot be ruled out, and Anthropic processes AI readings in the USA. Where data is processed or accessed outside the European Economic Area, the transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Transfers to Paddle in the United Kingdom rely on the Commission's adequacy decision for the UK. You can ask us for a copy of the safeguards.
10. How long we keep data
- Login links work once and expire after 30 minutes; we delete them, including any calculator week attached to them, within a day after that. Sessions end after 180 days or when you log out and are then deleted.
- Your account, the people in it and their hours: until you delete your account (in the app: Delete account) or ask us to. People you archive in the app stay stored with the account so past timesheets stay complete. When you delete the account, everything in it, your subscription records with us and the usage events linked to your account ID are deleted at once; copies in our database provider's backups expire within 30 days.
- Usage events (including the record of AI readings): 24 months.
- Waitlist entries: until we have launched the feature and told you, until you withdraw your consent, and at most 24 months.
- Cancellations and messages to us: 3 years after the end of the year in which the matter was closed, so we can prove what was said within the limitation period, unless a longer period is needed for a pending claim.
- Paddle keeps the order, invoice and payment records it needs for tax and accounting law under its own policy.
- Request logs at our hosting provider: up to 30 days.
11. Your rights
Under the GDPR you have the right to:
- get a copy of your data and information about how we use it (access, Art. 15);
- have incorrect data corrected (Art. 16);
- have your data deleted (Art. 17);
- restrict processing (Art. 18);
- receive the data you gave us in a machine-readable format and have it transmitted to someone else (portability, Art. 20);
- object to processing based on legitimate interest (Art. 21, see section 4);
- withdraw consent at any time, without affecting the processing before you withdrew it (Art. 7(3)).
You can download the hours in your account at any time as PDF and CSV and delete your account yourself in the app. For anything else email hello@clockhund.com, ideally from your account's address so we can check it's you. We reply within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, work or think your rights were infringed. Ours is the Czech Office for Personal Data Protection (uoou.gov.cz); in Germany you can contact the authority of your federal state.
12. Security
All connections use HTTPS. Data is encrypted at rest at our database provider. Login links and sessions are stored only as one-way hashes, login links work once and expire after 30 minutes, and access to production systems is limited to the people who need it. Dibsido.com s.r.o. is certified to ISO/IEC 27001.
13. Children
Clockhund is a tool for work and payroll and is not directed at children. You must be at least 16 to create an account.
14. Users in Brazil (LGPD)
If you are in Brazil, the Lei Geral de Proteção de Dados (Law 13,709/2018) applies as well. We process your data on the legal bases matching those in section 3: performance of a contract (Art. 7 V), compliance with a legal obligation (Art. 7 II), legitimate interest (Art. 7 IX) and consent (Art. 7 I). You have the rights in Art. 18 LGPD: confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary or excessive data, portability, information about who we share data with, information about the consequences of refusing consent, and withdrawal of consent. International transfers (section 9) rely on the mechanisms in Art. 33 LGPD, in particular contractual clauses. Our contact for data subjects and the Autoridade Nacional de Proteção de Dados (encarregado) is hello@clockhund.com. You can also complain to the ANPD (gov.br/anpd).
15. Users in Mexico (aviso de privacidad)
If you are in Mexico, this policy is our privacy notice under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. The data controller (responsable) is Dibsido.com s.r.o., Hlinky 995/70, Staré Brno, 603 00 Brno, Czech Republic. We process the data in section 3 for these primary purposes, which are necessary for the service: creating and running your account, saving and calculating hours, the subscription, cancellations and answering you. Secondary purposes, which are not necessary for the service, are the usage statistics and the waitlist; you can refuse them at any time by writing to hello@clockhund.com, without affecting the service. Our providers (section 8) process data only on our behalf (remisiones). Paddle receives the data needed for payment as a separate controller (transferencia); this transfer is necessary to provide the service you ordered and needs no consent. You can exercise your rights of access, rectification, cancellation and opposition (ARCO rights), withdraw consent and limit the use or disclosure of your data by writing to hello@clockhund.com with your name, the right you want to exercise and the data concerned; we reply within 20 business days. Changes to this notice are published on this page.
16. Users elsewhere
We do not sell personal information and do not share it for cross-context behavioural advertising. Wherever you are, you can use the rights in section 11 by writing to us.
17. Changes
If we change this policy, we update the date at the top. For significant changes we tell account holders by email before they take effect.