Privacy Policy

1. Our Commitment to Privacy

BuckleTime is built with privacy at its core. We believe you should be able to focus alongside others without sacrificing your personal data. We collect only what is necessary to provide the service, we do not sell or share your data with third parties for advertising or profiling, and we choose privacy-respecting tools wherever possible.

2. Who We Are

Liberateweb Ltd ("we", "us", "our") is the data controller for BuckleTime. Our registered address is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

3. Information We Collect

We collect the following types of information:

• Account information: email address when you sign in via magic link, or email and basic profile data (name, profile picture) if you choose to sign in with Google
• Profile information: display name, avatar, and preferences you choose to provide
• Usage data: focus session activity, room participation, achievements, and interactions with the platform
• Technical data: IP address, browser type, and device information collected automatically

4. How We Use Your Information

We use your information to:

• Provide and maintain the BuckleTime service
• Track your focus sessions, streaks, and achievements
• Display your presence and activity to other users in shared rooms
• Send you service-related communications (e.g. magic link sign-in emails)
• Improve and develop new features

5. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Contract: processing necessary to provide the service you signed up for
• Legitimate interests: improving our service, preventing fraud, and ensuring security
• Consent: where you have given consent for specific processing, such as marketing emails

6. Data Sharing

We do not sell, trade, or rent your personal data to anyone. Your data is never shared with third parties for advertising or marketing purposes. We may share limited information only with:

• Infrastructure providers: hosting and email delivery services that process data on our behalf under strict data processing agreements
• Law enforcement: only if required by law or valid legal process

7. Analytics

We use Plausible Analytics, a privacy-friendly analytics tool. Plausible does not use cookies, does not collect personal data, and does not track you across websites. All analytics data is aggregated and anonymous — we can see how the site is used overall, but we cannot identify individual visitors. Plausible is fully compliant with GDPR, CCPA, and PECR. For more information, see Plausible's data policy.

8. Cookies

We only use strictly essential cookies required for the service to function. Specifically, we use a single session cookie to keep you signed in after authentication. This cookie is necessary for the core functionality of the platform and cannot be opted out of while using the service.

We do not use any advertising cookies, tracking cookies, or third-party cookies. No cookie consent banner is needed because we only use cookies that are strictly necessary for the service.

9. Google Sign-In (Optional)

You may optionally choose to sign in using your Google account. If you do, Google will share your name, email address, and profile picture with us to create or link your BuckleTime account. This is governed by Google's Privacy Policy. You are never required to use Google sign-in — you can always sign in with a magic link sent to your email instead.

10. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

11. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected].

12. Security

We take reasonable measures to protect your personal data, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the site.

14. Contact & Complaints

For any privacy-related questions, contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.