Privacy policy
This policy explains what information WrapClock collects when you use the website wrapclock.com, why we collect it, who processes it for us, and what you can ask us to do with it. If anything here is unclear, write to us at [email protected].
What we collect
Your account
To open an account we ask for your email address and a password. The password is never stored as you typed it: we keep only a one-way hash of it (scrypt), so nobody at WrapClock can see it.
What you enter in your events
The names of your events, the schedule (speaker names or topics and their length), messages you send to the speaker screen and the event settings. We store these so the event works and is there when you come back. Please do not enter sensitive personal information about speakers or anyone else.
Technical information
- Cookies. We use two cookies of our own: one that keeps you logged in, for up to 30 days, and one that remembers the language you chose, for up to a year. We do not use advertising or analytics cookies. Cloudflare, which delivers the site, may set a technical cookie that protects the site from abuse.
- Server logs. Like most websites, our servers record requests: the IP address, the time, the page requested and the type of browser. We use them to keep the site secure and to fix problems, and our hosting provider keeps them for a limited time.
- Visit statistics. On the public pages of the site (the home page, the guides and the legal pages) we count visits with Cloudflare Web Analytics, to know how many people come and which pages help them. It uses no cookies, does not follow you from site to site and does not identify you. It does not run on your list of events, the control room, the speaker screen or the account page.
- Protection against abuse. To limit repeated login and password reset attempts, we count recent attempts by IP address and by email address. These counts are kept in memory only, for up to an hour.
Password reset
When you ask to reset your password, we email you a link. We store only a hash of the link, it works once, and it expires after an hour.
Changing your account email
When the email of an account changes, we also send a notice to the old address, so you will know if someone else made the change.
What we use it for
- To provide the service: your account, your events and the speaker screens.
- To send you emails you asked for, such as a password reset link, and important notices about your account, such as a change of its email.
- To keep the site secure and working, and to answer you when you write to us.
We do not sell your information, we do not show advertising, and we do not send marketing emails.
Who processes the information for us
We use a few service providers to run WrapClock. Each of them processes information only to provide its service to us:
- Railway hosts the website and its database, on servers in the Netherlands.
- Cloudflare manages the domain, delivers and protects the site, and counts visits to the public pages. Traffic to the site passes through its global network.
- Resend sends the emails the site sends, such as password reset links, from servers in Ireland.
- Messages you send to [email protected] are forwarded to our mailbox at Google (Gmail).
The speaker screen link
Anyone who has the speaker screen link of an event can see what that screen shows: the current speaker, the time left, who is up next if you chose to show it, and messages you send. The rest of the schedule is never sent to the screen. If a link reaches someone it should not, you can create a new link in the event settings, and the old one stops working at once.
How long we keep it
- Your account and your events are kept for as long as your account exists. You can delete an event at any time from your list of events.
- You can delete your account at any time on the My account page. It is deleted at once, together with all its events. You can also ask us to delete it.
- Login sessions end after 30 days, and password reset links after an hour.
Your rights
Under Israel's Privacy Protection Law, you may ask to see the information we hold about you, to correct it, or to delete it. You can do most of this yourself on the My account page: download all your information in one file, change your email and delete your account. For anything else, write to us at [email protected] from the email address of your account, and we will take care of it.
Security
The site is served only over an encrypted connection (HTTPS). Passwords are stored as hashes, login attempts are limited, and each event can be seen and controlled only from its own account. No system is completely secure, but we work to protect the information you give us.
Children
WrapClock is meant for people who organize and run events, and is not directed at children.
Changes to this policy
If we change this policy, we will update the date at the top of the page. If a change is significant, we will also let account holders know by email.