Privacy Policy
Effective October 2026. Last updated October 2026.
This Privacy Policy explains how Hourglass collects, uses and shares information when you visit the site, click a listing, sign in to your dashboard or pay for time. It sits alongside our Terms of Service.
Who is responsible
The controller for personal data processed through the Service is Lingapuram Srikanth, a sole proprietor based in Telangana, India.
What we collect
We keep the Service small. We collect what we need to run the board, take payment, stop abuse and understand traffic.
- Listing data. The website address, business name, category, tagline, description, offers, social links, logo and screenshots you give us, and the public icon and metadata we fetch from your website. This is shown publicly on the board.
- Your email address. Used for your receipt, your dashboard sign-in link, and notices about your own listing: that your time is ending soon, or that your rank has dropped.
- Payment data. Card details and billing identity are collected by Dodo Payments, not by us. Dodo Payments sends us a confirmation that you paid and an amount. We store a payment reference, the amount, the hours bought and the time.
- Visits. We count visits to the site. We keep a daily total and do not build a profile of you.
- Clicks. When you visit a listing from the board, we record the listing, the time and a one-way scrambled form of your IP address (a hash). The hash is used to count the same visitor once a day and to reduce fake clicks. It is not used to identify you.
- Technical data. Standard request data such as your IP address, browser and referrer is processed by our hosting provider to deliver and secure the site.
- Messages you send us. If you email us a notice, a category correction or a privacy request, we keep that correspondence as needed to respond and keep a legal record.
Cookies and local storage
We do not use advertising cookies. Your browser may store a theme preference (light or dark) on your device. When you sign in to the dashboard, a sign-in session is stored in your browser so you stay signed in. We use session storage to count your visit once per session.
Why we use this data
- Contract. To take payment, create or extend a listing, show rank, and provide the Service you asked for.
- Legitimate interests. To keep the board fair (rate limits, bot filtering), display public listing metadata, measure visits, debug outages and defend legal claims. You may object to processing based on legitimate interests as described below.
- Legal obligation. To keep tax, accounting and complaint records where the law requires it.
Public listings
Rank, time left, names, images, descriptions, offers and destination links on the board are public. Anyone can see them, including search engines. Do not list a destination if you do not want that information shown. We fetch public metadata from the site you submit so visitors can recognize the listing. That fetch may disclose to the destination that Hourglass requested the page. To show a listing's icon, a visitor's browser may also request the website's icon directly from the website or from a public icon service (such as Google's), which then sees the listing's domain and the visitor's IP address.
Who we share data with
- Dodo Payments: checkout and payment confirmation.
- Hosting, database, storage and edge infrastructure (our hosting and database providers), so the site can run, including storing listing data and uploaded images.
- An email sender, to deliver your sign-in link and your listing notices.
- Professional advisers, authorities, or a buyer of the Service if we must share data to comply with law, enforce the Terms, or transfer the project.
We do not sell your personal data. Some processors may be outside India. Where we rely on them, we use appropriate safeguards, such as standard contractual clauses or an equivalent mechanism they provide.
How long we keep it
- Public listing entries stay while the listing is on the board and may remain in backups or activity history after it is removed, for a limited time.
- Payment identifiers and amounts are kept as long as needed for accounting, tax, fraud and dispute handling.
- Click records and IP hashes are kept for a short period, only as long as useful for rate limiting, abuse prevention and totals.
- Your email address is kept while you have a listing and for as long as needed for the records above.
Your rights
Under applicable data-protection law (including India's Digital Personal Data Protection Act, 2023, and, where it applies, the GDPR), you may ask us to access, correct or delete personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You may also complain to your data-protection authority.
Email srikanthlingapuram04@gmail.com. We may need enough information to find your data. Public listing content that is also on your own website is not made private just by appearing on the board; you can ask us to remove the listing.
Children
The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.
Changes
We may update this policy when the Service or the law changes. The date at the top of this page is the current version. If a change is material, we will post the updated policy here.