Privacy
Last updated 18 October 2026.
What we keep
Your email address, a salted hash of your password (never the password itself), your time zone and week start, and — once the planner arrives — the tasks, plans and notes you write.
Short-lived sign-in codes and links are stored only as hashes and expire within minutes to days.
What we use it for
Only to run Timeblock for you: signing you in, emailing you sign-in codes, confirmation and password-reset links, and showing you your plans. We don't sell it, share it for advertising, or train anything on it.
Who handles it
Timeblock runs on Fly.io in the United States. Account email is sent through Resend. Both process data on our behalf.
Server logs record requests (paths, status codes, timing) and account events, never the text of your tasks or plans.
Cookies
One signed session cookie keeps you signed in, and two short-lived ones carry a sign-in PIN's or a password reset's address between steps. There is no analytics or tracking.
How long we keep it
Until you delete your account. Deleting it in Settings removes your rows from the database at once; encrypted volume snapshots, kept for disaster recovery, age out within seven days.
Your choices
Settings lets you download your data as JSON and delete your account. Questions: hello@timeblockplanner.app.