Privacy Policy

Last updated: July 14, 2026

CountdownMail lets you create countdown timers for your emails. This policy explains what data we collect when you use our website and service, why, and what choices you have. If you don't agree with it, please don't use CountdownMail.

What we collect

We keep data collection deliberately small. In practice, it comes down to four things:

Account data: the name and email address you give us when you sign up, plus your timers and account settings.
Billing: payments are handled by Paddle, our Merchant of Record. Paddle processes your payment details. We never see or store your full card information.
Website analytics: we use Google Analytics to understand how our website is used (pages visited, approximate location, device and browser, referring site). This is our only analytics tool. Google Analytics sets cookies and processes this data on our behalf.
Server logs: like any web service, our servers keep standard access logs (IP address, user agent, timestamp, requested URL), including requests to load timer images. We use these to operate the service and prevent abuse.

What we do not collect

This is worth stating plainly, because it's the most common question we get:

We do not receive your email recipients' names, email addresses, or contact lists. Timers are images embedded in emails you send. When a recipient opens your email, their client loads the image and we count that view. Nothing else reaches us.
We don't profile recipients. In most cases the image request we see comes from the mail provider's image proxy (such as Gmail's, Apple's, or Outlook's), not from the recipient's device. Where a client loads the image directly, the IP address is used only transiently to count the view and prevent abuse. Server logs are deleted within 10 days, and this data is never linked to an identity or used to build a profile.
For Evergreen timers, our Terms of Use require customers to pass a random, non-identifying value as the identifier, not an email address or other personal data. Any value we receive is treated as an opaque key used only to keep the countdown consistent.
We don't store your card details. Those stay with Paddle.
We don't sell your data to anyone, and we don't use it for advertising.

How we use it

We use the data above to run your account and provide the service, process your payments (via Paddle), respond to support requests, understand and improve how our website works, and keep the service secure and free of abuse. We may also send you account and service notifications by email.

Cookies

We use cookies to keep you signed in and to run Google Analytics. Most browsers accept cookies by default, but you can set yours to reject them, though some features may stop working. You can also opt out of Google Analytics specifically using Google's browser opt-out add-on.

Who we share data with

We don't sell your data. We share it only with the service providers we need to operate CountdownMail, under contracts that require them to protect it. Right now that means Google Analytics for website analytics, Paddle for payments, and our hosting and email providers. The current, named list is published in our Data Processing Terms. We may also disclose data if required by law.

Our role in your data

CountdownMail is the controller of your own account data (name, email, billing). For the personal data of your email recipients, CountdownMail is not a processor: we don't receive or store it, as described above. Our Data Processing Terms explain this in full and apply automatically to every customer.

International transfers

Our infrastructure is hosted in the United States, and our providers (including Google and Paddle) may process data in the US and other countries. Where data is transferred out of the European Economic Area, it's done under the safeguards required by applicable law.

How long we keep it

Account data is retained while your subscription is active and for up to 2 years after cancellation, unless a longer period is required by law. You can delete all data in your account yourself at any time from your profile page. Aggregated view counts contain no recipient identifiers, and server logs are kept for no more than 10 days, for operational and security purposes only.

Your rights (GDPR)

If you're in the EEA or UK, you can ask us to give you a copy of your data, correct it, delete it, or restrict or object to how we use it, and you can ask for it in a portable format. You can do most of this yourself from your profile page, or contact us at [email protected]. Because we don't hold your recipients' personal data, any requests about recipients are handled by you as the controller of that data.

Your rights (California)

If you're a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising these rights. We do not sell personal information. To make a request, contact us at [email protected].

Children

CountdownMail isn't intended for anyone under 16, and we don't knowingly collect data from children. If you believe a child has given us personal information, contact us at [email protected] and we'll delete it.

Security

We protect data with industry-standard practices: encryption in transit and at rest, and access limited to authorized personnel on a least-privilege basis. Because timers are images embedded in emails you send, we don't receive, store, or have access to your systems, your contact lists, or your recipients' names and email addresses.

Data breaches

If a breach affects your account data, we'll notify affected users without undue delay, and within 72 hours where required by law.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date above and, for significant changes, notify you by email or on the website. Continuing to use CountdownMail after a change means you accept the updated policy.

Contact

Questions about your privacy or this policy? Email us at [email protected].