This privacy policy explains which personal data is processed when you visit FinalTimer.com, for what purposes, on which legal basis and which rights you have. We keep data processing to the minimum required to offer a free online timer: you do not need an account, and your timer settings stay on your own device.
Last updated: October 2026
1. Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Anna Sosnowski
c/o IP-Management #17839
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany
E-mail: info at finaltimer dot com
Further details can be found in our imprint.
2. Hosting
This website is hosted by ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. All data is processed on servers in Germany. We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR, which obliges the provider to process the data only on our instructions and in compliance with the GDPR.
3. Server Log Files
Every time you access our website, the web server automatically records information that your browser transmits. This includes:
- IP address of the requesting device
- date and time of the request
- requested page or file and the HTTP status code
- amount of data transferred
- referrer URL (the page you came from)
- browser type and version, operating system
This data is required to deliver the website, to ensure its stability and security and to detect and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log data is not merged with other data sources, is stored only for a limited period and is then deleted or anonymised.
4. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the lock symbol in your browser.
5. Data Stored in Your Browser (Local Storage)
FinalTimer does not require an account. To provide the functions you use, the timer stores the following information in the local storage of your browser:
- your selected interface language and color theme (dark/light),
- the state of a running timer, so that you can resume it after reloading the page.
This data never leaves your device and is not transmitted to us. Storing it is strictly necessary to provide the service you have explicitly requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time via your browser settings. Timer settings you export are saved as a JSON file on your own device only; shared links with timer settings contain the settings in the part of the address after “#”, which browsers do not send to the server.
6. Usage Counters
The public counters on our home page (“Timers used”, “Settings exported”) are anonymous totals. When you start a timer or export settings, only the type of event is counted. No IP addresses, identifiers or other personal data are stored for these counters.
The OBS timer overlay (/obs-overlay/), which streamers add to their streaming software as a browser source, loads no advertising, no analytics and sets no cookies. It only increases an anonymous total of loaded overlays, at most once every six hours per overlay link (the time of the last count is kept in the local storage of the browser source). The overlay settings are part of the link itself and are not stored by us beyond the usual server log files described above.
The timer search on our use cases page runs in your browser. Only if a search finds no matching timer, only part of what you searched for or only a page in another language, or if you request a missing timer with the button, the search text is sent to our server together with the language of the page. There it is stored as an anonymous total: search text, page language, number of identical searches and the date of the first and last search. No IP address, identifier or cookie is stored with it. We use this list to decide which timers to add next. To limit misuse, at most 40 searches per visitor and day are stored. For this count, your IP address is combined with the current date and converted into a keyed hash that cannot be traced back to the IP address; these hashes are only valid for the current day and are overwritten by the first search stored on a following day. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to improve our offering and to protect it against misuse. Please do not enter personal data into the search field.
7. Contact Form and E-mail
If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, message) in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is the efficient handling of the requests addressed to us. Your data is not passed on to third parties. It is deleted as soon as your request has been completely answered, unless statutory retention obligations require longer storage.
To protect the form against spam, it contains a hidden field and a time check. No additional data is collected for this purpose.
8. Consent Management
On our website we use the consent management platform (CMP) of Google (“Privacy & messaging”), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the website for the first time, a banner asks for your consent to the use of cookies and similar technologies for analytics and advertising. Your decision is stored in a cookie so that the banner does not appear on every visit. The legal basis for this is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (obligation to document consent).
You can change or withdraw your consent at any time with effect for the future via the link “Privacy Settings” at the bottom of every page.
9. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how visitors use our website, for example which pages are viewed and how long a visit lasts. We use this information to improve our website. Google Analytics 4 does not log or store IP addresses.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Until you consent, Google Analytics only runs in a restricted mode without cookies (Google Consent Mode). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. Further information: Google Privacy Policy and How Google uses information from sites that use its services. You can also prevent the collection by Google Analytics with the Google Analytics opt-out browser add-on.
10. Google AdSense
To finance this free service, we display advertisements via Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google uses cookies and similar technologies to deliver ads, to limit how often an ad is shown and to measure the effectiveness of ads. Personalised ads based on your interests are only shown if you have consented to this. Without consent, Google may show non-personalised ads that are based on the content of the page.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Data may be transferred to Google LLC in the USA (EU-U.S. Data Privacy Framework, see above). More information about how Google uses data for advertising: policies.google.com/technologies/ads. You can manage personalised advertising at adssettings.google.com.
11. Links to Social Networks and Share Buttons
Our website contains simple links to our profiles on X, Instagram, TikTok and YouTube, as well as share buttons for several networks. These are plain links: no data is transmitted to the respective network when you load our pages. Data is only transmitted when you click a link and are redirected to the provider’s website, where the provider’s privacy policy applies.
12. No Externally Loaded Fonts
All fonts, icons, sounds and scripts of the timer are delivered from our own server. No connection to font or CDN providers is established.
13. Your Rights
Regarding your personal data, you have the following rights:
- Access to the data we store about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
- Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, simply contact us at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
14. California Residents (CCPA)
We do not sell personal information. California residents have the right to request information about the categories of personal information collected, to request deletion and to opt out of the sale or sharing of personal information. Please contact us to exercise these rights.
15. Children
Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will delete it.
16. Changes to This Privacy Policy
We adapt this privacy policy when our website or the legal requirements change. The current version is always available on this page.