Privacy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Email: hallo@nymot.com

2. The essentials

• You do not need an account, and the only form is the optional contact form. Its message text is transmitted to an AI service in the USA while you type (section 10).
• Camera, microphone, keyboard and mouse input is processed only locally in your browser. None of it is recorded or uploaded.
• Fonts, sounds and the tools’ scripts come from this site’s own server. For advertising, every page also loads a script from Google (AdSense), which transmits your IP address to Google (section 8). I do not use analytics tools.
• Google only sets advertising cookies and identifiers, in particular for personalised ads, with your consent, which you give or refuse in Google’s consent dialog (section 7).

3. Hosting

This website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. When you open a page, the data listed in section 4 is processed on the hosting provider’s servers.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely, reliably and efficiently.

4. Server log files

Each time a page is requested, your browser automatically transmits information that is stored in server log files:

• IP address of the requesting device
• date and time of access
• requested address (URL) and amount of data transferred
• HTTP status code
• referrer URL (the page visited before), if transmitted
• browser type and version and operating system (user agent)

This data is processed to deliver the site, to ensure its stability and security and to find errors. I do not combine it with other data sources. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in these purposes. Log files are kept only as long as necessary for these purposes and then deleted.

5. Camera, microphone, keyboard and mouse

For the webcam and microphone tests, your browser asks for permission before the page can access the device. Image and sound are processed only in your browser to display them or to calculate the level. The five-second test recording of the microphone test is held only in the memory of the open tab and is gone when you leave the page.

Key presses and mouse clicks in the keyboard and mouse tests are likewise only shown on the page. None of this is stored or transmitted to me or to third parties, so I do not receive any of this data. You can revoke camera and microphone permission at any time in your browser settings.

6. Local storage (localStorage)

Timerbench stores two entries in your browser’s local storage: “tb-prefs” holds your settings (for example countdown length, alarm sound, inverted colours, mirroring, keyboard layout), and “tb-consent” only if the site’s former own consent banner is active instead of Google’s solution (see section 7). These entries stay on your device and are not transmitted to the server.

Storing them is strictly necessary to provide the functions you have explicitly requested. The legal basis for storing and reading this information on your device is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); where personal data is processed, Art. 6(1)(f) GDPR. You can delete the entries at any time by removing the site data for timerbench.com in your browser.

7. Consent management

For advertising and cookies I use Google’s certified consent solution “Privacy & messaging” (consent management platform). On your first visit it shows a dialog in which you can consent, not consent or choose individual purposes and vendors. The consent solution is delivered by Google via the AdSense script (section 8) and stores your decision in a cookie or in your browser’s storage.

Until you decide, everything on the page is set to “denied” by default (Google Consent Mode: ad and analytics storage, user data for advertising and personalisation denied). You can change your decision or withdraw consent with effect for the future at any time via the “Cookie settings” link in the footer.

The legal basis for storing your decision is § 25(2) no. 2 TDDDG, otherwise Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Art. 6(1)(f) GDPR (legitimate interest in respecting your decision).

8. Advertising with Google AdSense

This website is funded by Google AdSense, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). On every page, your browser loads the AdSense script from Google’s servers (pagead2.googlesyndication.com and other Google domains). For technical reasons this transmits your IP address to Google, along with information about your browser, device and the page visited.

Google only uses cookies and similar identifiers on your device and personalised ads, based on interests Google infers from your behaviour on this and other websites, after you have consented via the consent solution (section 7). The legal basis is then § 25(1) TDDDG and Art. 6(1)(a) GDPR. If you do not consent, non-personalised or limited ads may be shown, based on the page content and coarse information such as your approximate location.

Loading the script and transmitting the IP address when a page is opened is based on Art. 6(1)(f) GDPR; my legitimate interest lies in funding this free service through advertising and in displaying the consent solution. Google also processes data in the USA, a third country. For transfers to Google LLC, the European Commission’s adequacy decision for the EU-US Data Privacy Framework applies, insofar as Google is certified under it.

You can withdraw your consent at any time via “Cookie settings” in the footer. This does not affect the lawfulness of processing carried out before the withdrawal.

More information: Google privacy policy, How Google uses information from sites or apps that use its services, How Google uses cookies in advertising, Google ad personalisation settings.

9. Contact by email

If you email me, I process your address and the content of your message to respond to your request. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in answering your enquiry. I delete the message once it has been dealt with, unless statutory retention obligations apply.

The mailbox hallo@nymot.com is forwarded via the Cloudflare Email Routing service of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) to a Google Gmail mailbox of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Both act as processors or recipients. Data may be transferred to the USA in the process; the transfer is based on the EU-US Data Privacy Framework, insofar as the providers are certified under it. This applies both to emails you send me directly and to messages sent through the contact form.

10. Contact form

You can send me a message through the contact form. Only the message is required. Your name and email address are optional; the email address only becomes required if your message suggests that you expect a reply (see below). Business offers require further details (see below). A hidden field that people leave empty, the time between opening the page and sending, and simple rules (for example against a flood of links) help to recognise automated submissions; such submissions are discarded and not stored.

Automatic field control with AI. While you are writing your message, that is, before you send it, the form sends the text to this website’s server, which transmits it to the AI service Ollama (Ollama Inc., USA, ollama.com). The service recognises whether you expect a reply, for example when you ask a question, and the form then makes the email address required. When you send the form, the text is checked once more in the same way. Only the text from the message field is transmitted; I do not pass on your name, your email address or your IP address. Please only write what is needed for your request. The AI does not make any decision about your message itself, for example as spam.

According to Ollama, the text is only processed briefly to produce the answer, is not stored afterwards and is not used to train AI models. Data is processed in the USA, and therefore in a third country. The transfer is based on appropriate safeguards provided by the provider, insofar as these exist. I myself only store the result of this step (for example “reply expected”) in a technical log, not your text. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in a lean form that only asks for the information your request really needs. If you prefer not to have this, simply email me directly at hallo@nymot.com.

If the check classifies your message as an unsolicited business offer (for example advertising, SEO or agency offers) or as automatically generated, the form additionally requires your name, email address, company, phone number, website, VAT ID and address. This helps to curb unwanted mass offers and to identify reputable providers. These details are forwarded to me together with your message as described below; they are not sent to the AI service. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in protection against unwanted advertising.

When you send the form, the message is sent as an email with the sender address service@nymot.com directly via my own mail server (with a DKIM signature) and delivered to my mailbox hallo@nymot.com. See also section 9 on delivery to this mailbox. I keep the message there until your request has been dealt with, unless statutory retention obligations apply. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in handling your message.

To prevent abuse, your IP address is held in the server’s working memory for at most one hour to limit the number of requests per sender; it is not written to any log. The server’s technical log records only the time and the result (for example “reply expected”, “forwarded” or “discarded”), not your name, address or message.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). An informal email to hallo@nymot.com is enough.

12. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for Timerbench is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, www.lda.brandenburg.de.

13. Other

I do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The AI-assisted field control of the contact form (section 10) only determines whether the email address is requested. You are not obliged to provide personal data; without the technically necessary connection data, however, the website cannot be delivered.

Last updated: October 2026