What data we store

When you create an account or use MyTimeTomb, we store:

• Account data
• Email address
• Password (stored as a secure hash, never in plain text)
• Content you create
• Timelines, events, descriptions, and categories
• Optional social connections (friends)

We do not collect sensitive personal data, and we do not track you across other websites.

Cookies

MyTimeTomb does not use tracking or advertising cookies. Essential cookies may be used only to keep you logged in and to make the service work. If this changes, this notice will be updated before additional cookies are used.

Why we store this data

We only process personal data when it is necessary to:

• Provide core functionality (accounts, timelines, Flashback game)
• Secure the service and prevent abuse
• Communicate with you when needed (for example, support or data requests)

We do not use your data for advertising, profiling, or resale.

Analytics and internal dashboards

We may use aggregated statistics (such as counts or averages) to understand how the application is used.

• Raw personal data is not exposed in dashboards
• Internal tools use IDs or pseudonyms where possible
• Email addresses are not shown unless strictly necessary

How long we keep your data

We keep your data as long as your account exists.

If you request account deletion by email, we remove your personal data unless we are legally required to retain certain information for a limited period (for example, for security or abuse prevention).

Data ownership

All content you create remains yours. We do not claim ownership over your timelines or events.

Data protection

While not explicitly covered by GDPR, we recognize that personal collections of historical interest can be sensitive.

For this reason, timelines and collections are private by default. Only accepted connections can view your collection.

In development and testing environments, we aim to use dummy data where possible and restrict database access to the application itself.

Your rights

Under the GDPR, you have the right to:

• Access your data
• Correct your data
• Request deletion of your data
• Ask how your data is used

Contact

For any privacy-related questions or data requests, contact:

Requests are handled manually. We aim to respond as quickly and reasonably as possible.