Legal
Privacy Policy
This Privacy Policy describes how CrowdTimer ("we", "us", or "our") collects, uses, and discloses information when you use our Zoom App.
1. Information We Collect
We prioritize user privacy and collect the minimum amount of data required to provide synchronized timers for Zoom breakout rooms.
1.1 Meeting Metadata (Ephemeral)
To synchronize the timer across participants in a meeting, we process:
- Zoom Meeting UUID: a unique identifier for the meeting session.
- Zoom User ID: a unique identifier used to distinguish the host from participants.
1.2 User Content
- Timer settings, including duration and start time.
- Extension requests made by participants.
- Feedback or support submissions, which may include an optional email address and diagnostic context when you choose to send a report.
1.3 What We Do Not Collect
- CrowdTimer does not access, record, process, or store meeting audio or video.
- We do not collect your phone number or physical address as part of normal app operation.
- We do not access meeting chat logs.
1.4 Website Analytics
Our public website (crowdtimer.app) uses Umami, a privacy-friendly analytics tool that we self-host on our own infrastructure. It records aggregate, anonymous usage statistics such as page views, referring sites, and general device or browser type. Umami is cookieless, does not track you across other websites, and does not collect personal information. This analytics runs only on the public website, not inside the Zoom App, and the data is not sold or shared with third parties.
2. How We Use Information
- Synchronization: to show the same time remaining to meeting participants.
- Functionality: to let hosts control timers and participants follow them.
- Security: to verify requests related to the Zoom App.
3. Data Storage and Retention
- Data is stored in a secure database hosted in the United States.
- Data is encrypted in transit using TLS.
- CrowdTimer is designed around short-lived meeting data. Meeting-scoped operational records, including presence, timer actions, extension requests, done requests, room participants, meeting room coverage, and stale stopped timers, are normally deleted roughly 24 hours after meeting activity ceases.
- Feedback and support submissions are retained separately because they may include optional contact details or diagnostic context needed to investigate an issue.
4. Third-Party Sharing
We do not sell, trade, or rent personal identification information. We may use trusted service providers, such as Cloudflare or hosting providers, solely to host and operate the App.
5. Your Data Subject Rights and Choices
This page includes language informing users of their data subject rights and how to exercise them. Depending on your location, you may have:
- Right to Access: you may request a copy of personal data we hold about you.
- Right to Deletion: you may request deletion of your personal data.
- Right to Rectification: you may request correction of inaccurate data.
- Right to Object: you may object to processing for certain purposes.
- Deauthorization: you may uninstall CrowdTimer in Zoom to revoke future access. Already-created meeting records continue to follow the retention policy unless you request earlier deletion through support.
To exercise any of these rights, contact support@crowdtimer.app. We aim to respond within 30 days.
6. Contact Us
Email support@crowdtimer.app with questions about this Privacy Policy.