Privacy policy

Effective October 16, 2026 · Version 2026-10-v2

This policy explains what information the Timehint website and the Timehint browser extension collect, why, where it is kept, and how you can have it deleted. We've kept it short and specific. If something is unclear, email us at hello.kailashsr@gmail.com.

Who we are

Timehint is operated by the Timehint team. In this policy, "we", "us" and "our" mean the Timehint team. You can reach us at hello.kailashsr@gmail.com, and we reply within one business day.

What this policy covers

This policy covers two things:

• This website, including the waitlist and contact forms and the pages that account emails link to.
• The Timehint extension for Chrome and Brave on desktop, including what it does in the side panel, in Gmail and in Google Calendar on the web, and the optional Timehint account.

It doesn't cover Gmail, Google Calendar, Google Chrome or any other service you use alongside Timehint. Those services have their own privacy policies.

The website

You can read this website without giving us any personal information.

Hosting and server logs. The site is hosted by Vercel. When your browser requests a page, Vercel receives the technical information any web server receives, such as your IP address, browser type and the page you asked for. Vercel uses this to deliver the site, keep request logs and protect against abuse. This is described in Vercel's privacy notice.

Analytics. We use Vercel Web Analytics to count page views and to see which pages and links bring people to this site. It doesn't use cookies. For each page view it records the time, the page address (with only some query parameters kept, such as campaign tags), the referring page, your approximate location (country, region and city), and your device type, operating system and browser with their versions. Vercel tells visits apart using a hash of the request that it discards after 24 hours, and the data isn't tied to your IP address or to you. We see only aggregated numbers. This is described in Vercel's Web Analytics privacy documentation. The two pages that account emails link to, for setting a new password and confirming an email address, don't load analytics.

No advertising or cookies. We don't run advertising or third-party tracking scripts on this site, and we don't set cookies.

Fonts. This site's fonts are hosted on this website, so reading a page doesn't contact a font service.

The waitlist

Timehint isn't on the Chrome Web Store yet. The install buttons on this site open a form where you can join the waitlist.

What we store

When you join, we store one record with:

We don't store your name, your IP address or your browser details with your signup. Your country is looked up by our hosting provider from your connection and passed to our server as a two-letter code. Only that code is saved with your signup.

To stop automated signups, the waitlist briefly keeps a one-way, keyed hash of your IP address. We never store the IP address itself, the hash can't be turned back into it, and it is deleted within 24 hours.

Each email address is stored once. If you sign up again with the same address, we keep the original record and don't create a new one.

Why we store it

We use your email address for two things only:

1. To send you an early-access link before public launch, if one becomes available.
2. To send you one email when Timehint launches on the Chrome Web Store.

We use the button, page, referrer, campaign tags and country only in aggregate, to understand which pages and links lead people to the waitlist. The privacy notice version records which version of this policy was shown to you when you signed up. We don't send marketing email beyond the two messages above.

Where it is kept

Waitlist records are stored in a database hosted by Supabase. The form sends your details to a small server function on this website, and that function writes them to the database. For more on Supabase's role as a service provider, see Supabase's privacy policy.

Who we share it with

We don't sell your information, and we don't share it with anyone for their own marketing. The only companies that handle it are the two service providers named above, Vercel (hosting) and Supabase (database), and only to run this website and the waitlist for us. These providers may process data on servers outside your country.

We would disclose information only if required by law.

How long we keep it

We keep your waitlist record until you ask us to delete it, or until the waitlist is no longer needed after launch, whichever comes first. If a signup fails, the server function may write a short error message to Vercel's logs. Vercel keeps its request logs according to its own retention periods.

The contact form

The form on the contact page sends your message to us by email and keeps a copy, so a message isn't lost if the email fails.

What we store

When you send a message, we store one record with your name (if you give one), your email address, the topic you chose, your message, the page you sent it from, whether the email reached us, the version of this policy shown to you, and the date and time. The form uses the same short-lived, keyed hash of your IP address as the waitlist to stop automated messages, and deletes it within 24 hours.

Why we store it

To read your message and reply to you. We don't add your address to the waitlist or send you anything else unless you ask.

Where it is kept, and who handles it

The record is stored in the same Supabase database as the waitlist. The email is delivered to our inbox by Resend, an email delivery service, which handles the message only to deliver it. Our inbox is a Google (Gmail) account. As with the waitlist, Vercel hosts the server function that receives the form.

How long we keep it

We keep a message and our replies for as long as we need them to help you, and delete the stored record within 12 months of our last reply, or sooner if you ask.

The Timehint extension

Timehint works inside your browser, and you don't need an account to use it. Without one, nothing Timehint reads or stores is sent to us: it stays in your browser, apart from what Chrome's own sync copies, as described below. If you choose to create a free account, Timehint also copies your contacts, places and a few settings to our database, so they're backed up and in sync across the browsers where you sign in. Your optional account lists exactly what that includes.

Permissions it asks for

Timehint asks for access to Gmail and Google Calendar only. It doesn't run on other websites. The fonts in the side panel are packaged with the extension, so opening the panel doesn't contact a font service.

What it reads, and where that happens

All of the reading below happens on your device, inside the browser.

• Messages you open in Gmail. Timehint reads the sender's name and email address, when the message was sent, and times written in the text (such as "5pm EST"). For senders you haven't saved, it also reads signature details, such as a location line or a phone country code, and phrases that name a time zone, so it can suggest one. You confirm any suggestion before it's saved.
• Messages you write in Gmail. When you type a time with a time zone, Timehint reads that time and your recipients' email addresses, so it can offer the time in a saved recipient's zone. It never changes your text unless you click.
• Events you open in Google Calendar. Timehint reads the event's start date and time, its guests' email addresses and the text of its description, so it can show each saved guest's local time and convert times written with a time zone. It doesn't change the event.
• Your computer's time zone setting. Timehint uses it to suggest where you're based and to notice when your computer's clock changes zone, for example when you travel. It doesn't ask for location access.

What it stores in your browser

Timehint uses the browser's extension storage (chrome.storage). It keeps two kinds of data.

Kept on this device only (Chrome's local extension storage):

• The people you save: name, email address and time zone. It also keeps your display choices for each person (pinned, hidden, order) and whether their zone was suggested from a message.
• Senders whose "Add timezone" prompt you dismissed, with the date, so it can offer again after 30 days.
• For saved contacts with a time zone, a count of the messages you've opened from them, the hour of their local day each was sent, and when you last opened one. This isn't shown anywhere in this version.
• Whether you've finished the first-run setup.
• If you're signed in: your sign-in session, and a short record of what was last synced and what you deleted, so changes made in different browsers merge correctly.

Chrome clears this data when you remove the extension. If you're signed in, your account keeps its synced copy. Either way, you can use Download your contacts in Settings first to keep a copy as a file on your computer.

Kept in Chrome's sync storage:

• Your settings: time format, working hours, display and Gmail options.
• Your home time zone and your answers to the travel prompt.
• The places (cities) you've added to the side panel.
• The default readings for abbreviations that mean more than one place, such as IST.
• A small counter per saved contact's email address, used by a compose feature in Gmail.

This data uses Chrome's built-in storage sync, so Chrome may copy it to other browsers where you're signed in to Chrome. If Chrome sync is off, it stays on this device. Chrome's sync is run by your browser and is separate from a Timehint account, which is described below.

What it sends

The extension has no analytics or tracking. It never sends the text of your emails, their subjects or your calendar events to us or to anyone else.

Without an account, it doesn't send any of the information above to us or to anyone else. If you sign in, it sends only what's listed under Your optional account, to our database.

Some links send you to other places, but only when you click them:

• Open Gmail opens Gmail in a new tab.
• Open guide opens the How to use page on this website, which is covered by the website section above.
• Contact us opens your email app with a new message to us. The message is prefilled with the extension's version number and your browser's user-agent string (the browser name and version) to help us fix problems. You can edit or delete that text before you send. If you send it, we receive whatever the email contains.

Use of Gmail information

Timehint uses information from Gmail pages only to provide the features you see in the extension. We don't transfer it to anyone, use it for advertising, or sell it. Without an account, it never leaves your browser. If you sign in, the only details from Gmail that leave it are the ones in the contacts you chose to save, such as a person's name and email address, which sync to your account as described below.

Your optional account

Every feature of Timehint works without an account. An account is free and optional. It backs up your contacts, places and a few settings, and keeps them in sync across the browsers where you sign in to Timehint.

Signing up and signing in

You can create an account from the Timehint side panel in two ways:

• Email and password. You give your email address, a password and, if you like, your name. Accounts are run by Supabase Auth, the sign-in service of our database provider. Your password is stored only in hashed form, so neither Supabase nor we can read it.
• Continue with Google. Google asks whether to share your name, email address and profile picture (the openid email profile scopes). Google passes them to Supabase, which uses them to create or open your account. This sign-in doesn't give Timehint access to your Gmail, your calendar or anything else in your Google account.

Supabase also keeps a log of sign-ins and account changes for security, which can include the IP address used.

Emails about your account. Supabase sends the emails that confirm your address and reset a forgotten password. Their links open pages on this website. The password reset page sends your new password, together with the one-time code from the link, to a small server function on this website, which passes them straight to Supabase to make the change. The function doesn't store or log either of them. The confirmation page doesn't use the code in its link at all. Both pages remove the code from your browser's address bar as soon as they open.

What your account stores

When you're signed in, Timehint copies this to our database and keeps it in sync across the browsers where you sign in:

Not synced. These stay only in the browser where they were made: whether a contact is hidden, the signature text a suggested time zone came from, the counts of when saved contacts' messages arrive, senders whose prompt you dismissed, your answers to the travel prompt, and whether a place is pinned or muted. Your other settings stay in Chrome's storage as described above. Timehint never uploads email bodies, subjects or calendar events.

Where it is kept, and who can read it

Account data is stored in the same Supabase database as the waitlist. Each account has its own private workspace there, and the database's row-level security lets only you, signed in to your account, read or change its rows. The Timehint team can reach the database through the provider's administrator access, as for the waitlist, and uses it only to run the service, to act on your requests and when the law requires it. Supabase may process data on servers outside your country. See Supabase's privacy policy.

We don't sell your account data, share it with advertisers or use it for advertising. The extension has no analytics.

Signing out, deleting and how long we keep it

• Signing out stops syncing. The copy of your contacts, places and settings in that browser stays, and Timehint keeps working without an account.
• Removing a contact or place while you're signed in also removes it from your account at the next sync.
• Deleting your account: email hello.kailashsr@gmail.com from the address your account uses. We'll delete the account and all the data synced to it within 30 days, and tell you when it's done. The copy in your browser isn't affected; remove the extension to delete it.

We keep your account data for as long as your account exists.

Your choices and rights

Waitlist. You can ask us at any time to show you the record we hold about you, to correct it, or to delete it. Email hello.kailashsr@gmail.com from the address you signed up with, or tell us that address. We may ask you to confirm that the address is yours. We'll tell you when the deletion is done. Depending on where you live, you may have further rights under local law, such as the right to object to how we use your data, or to complain to a data protection authority.

Account. You can ask us in the same way to show you, correct or delete the data in your Timehint account. Email us from the address your account uses. Signing out stops syncing at any time.

Extension. Without an account, we don't hold your extension data, so you control it directly:

• Remove a person in the side panel to delete them.
• Turn off "Show when a message was sent" or "Offer to save a sender's timezone" in Settings to stop those features in Gmail.
• Remove the extension to clear its local storage. Data in Chrome's sync storage is managed by your browser's sync settings.

Children

Timehint and this website are made for adults who work with email. We don't knowingly collect personal information from children. If you believe a child has joined the waitlist or created an account, email us and we'll delete the record or the account.

Security

• The waitlist form doesn't write to the database directly. It sends your details to our server function, which holds the database credentials in server-side settings that aren't sent to your browser.
• The database only lets that credential add waitlist records. It can't read, change or delete them. Only the Timehint team can read the list, using separate access to the database provider's account.
• The server function refuses requests sent from other websites and rejects oversized requests.
• Account data is protected by row-level security: every request must carry your sign-in session, and the database returns only your own rows. Passwords are stored only in hashed form.
• The password reset function also refuses requests from other websites and oversized requests, and never stores or logs your password or the code from your reset link.
• Pages, form submissions and the extension's connection to our database use encrypted HTTPS connections.

Data in the extension is protected by your browser and device, like other extension data. No system is perfectly secure, so we collect as little as we can.

Changes to this policy

If we change how Timehint handles information, we'll update this page and change the effective date and version at the top. If the website starts to use a new service that receives your information, we'll name it here before we start using it.

Contact

Questions, requests or concerns about privacy: email hello.kailashsr@gmail.com. We reply within one business day.