Privacy.

01Summary

This Privacy Policy explains how Time Tax handles personal data. Time Tax is a manifesto, framework and attention meter naming the undisclosed transfer of human attention extracted by ad-funded platforms.

The short version: we collect as little as possible, we do not sell your data, we run no advertising and no tracking, and — wherever the design allows — we keep your information on your own device or delete it when it is no longer needed. The sections below give the detail UK data protection law requires.

02Who is responsible for your data

The data controller for Time Tax is Jon Horvath, an independent product designer and sole trader based in London, United Kingdom. You can reach the operator about any privacy matter at jonhorvathwriter@gmail.com.

We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

03What data we collect

Depending on how you use the Service, we may collect:

• Meter inputs — the attention-meter tools are designed to run calculations in your browser; inputs are not collected on a server unless you explicitly submit something.
• Contact details — if you sign up for the quarterly or early access, the email address you provide.
• Usage and technical data — diagnostic and usage information, plus basic technical logs (for example browser type and approximate region) needed to keep the Service secure and working.

04Why we use your data and our legal bases

We use personal data only to run and improve the Service:

• to provide the Service and the features you ask for — on the basis of performing our agreement with you;
• to keep the Service secure, prevent abuse and fix problems — on the basis of our legitimate interest in a safe, working product;
• to understand usage through aggregated analytics — on the basis of consent or legitimate interest, depending on the analytics used;
• to contact you about important changes, and — only if you opt in — about news and updates, which you can stop at any time;
• to meet legal, tax and accounting obligations.

05Who we share data with

We do not sell your personal data and we do not share it for anyone else's advertising. At this stage the only personal data we actually process is what you submit through the contact form on the site; the active sub-processors are:

If the Service launches as a real product the list of sub-processors will grow (typically to include authentication, payment processing, analytics, and AI providers); this page will be updated before that happens. We may also disclose data if the law requires it.

06Cookies and analytics

The Service uses only the cookies and similar storage it needs to function, and, where used, privacy-respecting analytics to count visits and feature use. Where the law requires consent for non-essential cookies, we ask for it before they are set. You can also control cookies through your browser.

07How long we keep data

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires. Contact emails are kept for up to 24 months and then deleted. Anonymised, aggregated statistics that cannot identify you may be kept longer.

08Your rights

Under UK data protection law you have the right to:

• access — ask for a copy of the personal data we hold about you;
• rectification — ask us to correct data that is inaccurate or incomplete;
• erasure — ask us to delete your personal data where there is no overriding reason to keep it;
• restriction and objection — ask us to pause or stop certain processing;
• portability — ask for your data in a structured, machine-readable form;
• withdraw consent — where processing relies on consent, withdraw it at any time.

To exercise any of these rights, email jonhorvathwriter@gmail.com. We will respond within one month. If you believe your data has been handled improperly you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve any concern first.

09International transfers

Some of our providers may process data outside the United Kingdom. Where that happens, we rely on appropriate safeguards — such as UK adequacy regulations or standard contractual clauses — so that your data keeps an equivalent level of protection.

10Children

The Service is not directed at children and is intended for use by adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11Changes to this policy

We may update this policy as the Service develops. The effective date at the top of the page shows when it last changed, and significant changes will be flagged on the site where practical.