This Privacy Policy describes how The Time Owner ("we," "us," "our") collects, uses, discloses, and protects information about you when you visit thetimeowner.com or interact with the registry. By using the site, you agree to the practices described here.

1. Who we are

The Time Owner is operated by Hungry Passport Media, Inc., 4225 Solano Ave., Ste. 631, Napa, CA 94558, United States. For purposes of GDPR, Hungry Passport Media, Inc. is the data controller. For questions about this policy or your data, contact us at [email protected] or through the contact form.

2. Information we collect

2.1 Pre-launch reservations and waitlist

While the registry is in pre-launch, we collect: your email address, an optional name to associate with a reserved date, an optional brief note, the date you reserved (if any), the source of the signup, and a timestamp of your consent. Reservations are non-binding and create no purchase obligation.

2.2 Ownership records (when claims open)

When you claim a day, we collect: the name to display, an optional biography, an optional photograph, an optional email address, an optional website URL, and the timestamp of the claim. The name, bio, photograph, and website are displayed publicly on the day's record page. Email addresses are not displayed publicly.

2.3 Contact form

When you submit the contact form, we collect: your name, email address, and the message you send. This is used solely to respond to you.

2.4 Payment information (when claims open)

When you purchase a claim or upgrade, payment is processed by Stripe. We receive a transaction reference and amount, but never see, store, or process your full card number, CVC, or banking credentials.

2.5 Automatic information

Like most sites, our hosting provider logs basic request metadata such as IP address, user agent, and referrer for security and abuse prevention. We do not use cookies for tracking. We do not use any third-party advertising networks.

3. How we use your information

• To create and display registry entries that you have submitted.
• To send you launch updates and reservation confirmations after you opt in.
• To respond to your contact-form messages.
• To process payments for claims and upgrades.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

4. Legal basis (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing your information are: (a) your consent (for email signups and optional fields); (b) performance of a contract (for claims and payments); (c) our legitimate interests in operating, securing, and improving the registry; and (d) compliance with legal obligations.

5. Service providers (subprocessors)

We rely on the following service providers to operate the site. Each handles your information only to provide its service to us.

• Cloudflare — hosting, DNS, content delivery, and request logging (United States; EU and global edge).
• Cloudflare D1 / R2 — database and asset storage for registry entries and reservations (United States).
• beehiiv — email delivery and list management for waitlist and reservation updates (United States).
• Web3Forms — relay of contact-form submissions to our inbox (United States).
• Stripe — payment processing (United States; global).
• Fathom Analytics — privacy-respecting, cookie-free aggregate site analytics (Canada).

6. International data transfers

Our service providers may process information in the United States and other jurisdictions. Where required, transfers from the EEA, UK, or Switzerland rely on Standard Contractual Clauses or equivalent safeguards.

7. Data retention

• Ownership records are retained indefinitely. Permanence is part of the product.
• Pre-launch reservations are retained until launch, plus up to 24 months for audit, after which non-converted reservations are deleted on request or on a rolling basis.
• Waitlist email addresses are retained until you unsubscribe.
• Contact-form submissions are retained for up to 12 months.
• Payment records are retained as required by tax and accounting law (typically 7 years).

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your reservation, waitlist subscription, contact-form submission, or non-published account information.
• Object to or restrict certain processing.
• Receive your information in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data protection authority.

Note: a published ownership record's name and date are part of the permanent registry. You can request that we remove your bio, photograph, email, or website at any time, and we will do so promptly. Requests for removal of the name or date itself will be considered on a case-by-case basis and may not always be possible.

To exercise any right, email [email protected] from the address associated with your record. We respond within 30 days.

9. California (CCPA / CPRA) disclosures

California residents have the right to know what categories of personal information we collect (see Section 2), the purposes for which we use it (Section 3), the categories of recipients (Section 5), and to request access, correction, or deletion. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for any purpose beyond what is described in this policy.

10. Children

The Time Owner is not directed to children under the age of 13 (or under 16 in the EEA), and we do not knowingly collect their personal information. If you believe a child has submitted information, contact us and we will delete it.

11. Security

We use industry-standard technical and organizational safeguards (TLS in transit, restricted access, access logs). No system is perfectly secure. If a security incident affects your information, we will notify you as required by law.

12. Changes to this policy

We may update this policy. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by notifying you by email. Continued use of the site after the change constitutes acceptance.

13. Contact

Privacy questions and requests: [email protected]. General questions: contact form.