Privacy policy

Hourvane is operated by Quantum ITech Pavlo Ilynych, Pulawska 186, 02-670 Warsaw, Poland (registration 8133722073). For anything in this policy, including exercising your rights, contact rolopaw@gmail.com.

You can use the entire calculator without signing up. When you do, your dates, hours, notes and preferences are stored only in your own browser (local storage) and are never transmitted to us. Clearing your browser data deletes them permanently — we hold no copy.

Public holiday dates are fetched from the third-party service Nager.Date. That request contains the country and year you selected, and — as with any web request — your IP address is visible to that service. We send nothing else.

An approximate country lookup by IP address runs once to preselect your holiday region. The result is cached in your browser and never stored on our servers.

We process the following, and nothing more:

• Your email address — to identify your account and send confirmation or password-reset messages.
• Your calculator data — daily hours, clock in/out segments, notes, saved reports and preferences, so they follow you between devices.
• Authentication metadata — sign-in timestamps and session tokens, kept by our authentication provider.

If you sign in with Google, we receive only your email address and account identifier. We never receive your Google password and we do not read your Google data.

Legal basis: performance of a contract (Article 6(1)(b) GDPR) — you asked us to store your data so it syncs across your devices. Where you have consented to something optional, that consent is the basis and you may withdraw it at any time.

The list of processors is deliberately short. Each is bound by a data processing agreement:

• Supabase — account authentication and database hosting.
• Vercel — application hosting and content delivery.
• Nager.Date — public holiday data (no personal data is sent).

We do not sell your data, we do not share it with advertisers, and there is no advertising or third-party tracking on this site.

Account data is kept until you delete your account, after which it is removed from our live systems within 30 days and from backups within 90 days. Data held only in your browser lasts until you clear it.

Under the GDPR you may request access to your data, correction of it, erasure, restriction of or objection to processing, and portability in a machine-readable format. You may also withdraw consent at any time.

Email rolopaw@gmail.com and we will respond within one month. You can export your own data at any time using the CSV export in the app.

If you believe we have handled your data improperly you have the right to complain to your supervisory authority — in Croatia, the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

Traffic is encrypted in transit (HTTPS) and access to account data is enforced at the database level, so one account can never read another's rows. Data is hosted within the EU where our providers offer it; where a transfer outside the EEA occurs it relies on Standard Contractual Clauses.

No system is perfectly secure. Please use a strong, unique password and tell us promptly if you suspect a problem with your account.

This service is not directed at children under 16 and we do not knowingly collect their data.

If this policy changes materially we will update the date above and, for account holders, notify you by email before the change takes effect.