Last updated: 5 October 2026
In short
HodlClock is operated by Joey s. r. o., Mudroňova 2388/25, 921 01 Piešťany, Slovak Republic, Company ID (IČO) 56564350, Tax ID (DIČ) 2122345665, registered in the Commercial Register of the District Court Trnava, Section Sro, Insert No. 57748/T (“we”). For any privacy question or request, write to hodlclock@gmail.com.
Everything you enter in HodlClock stays in your browser’s local storage on your device: your bitcoin amount, stacks and purchases, amount invested, currency, language, name or nickname, goal, start date and records, display settings and one small daily snapshot (date, BTC amount and BTC price) used for “My story”. It is not sent to us or anyone else.
You can delete it at any time in HodlClock (My stack → About HodlClock → Delete all data on this device) or by clearing the website data for hodlclock.com in your browser. If you uninstall the app or clear your browser, this data is gone, because we do not have a copy.
HodlClock does not use cookies. Local storage is used only to keep the data you entered and your settings, which is necessary for the app to work.
To work, HodlClock loads resources directly from these providers. Like any website, they receive technical data such as your IP address, browser type and the time of the request. They do not receive your holdings, your name or your settings.
| Provider | Why |
|---|---|
| Cloudflare (hosting) | Delivers the HodlClock website and app files. |
| Binance, Coinbase | Live and historical bitcoin prices. |
| Frankfurter (European Central Bank reference rates) | Exchange rates for currencies other than EUR and USD. |
| Google Fonts | The typefaces used in the app. |
| cdnjs (Cloudflare) | A small QR-code library, only when you open “Support with sats”. |
| Resend | Sends the one-time verification code when you use “Restore Pro”. |
Legal basis: our legitimate interest in providing a working app (Art. 6(1)(f) GDPR).
HodlClock does not currently send product-usage events from the app code to an analytics service, and it does not use analytics cookies, localStorage identifiers or fingerprinting. The site is delivered through Cloudflare, which may process standard technical request, security and performance data needed to operate and protect the service. Depending on the site configuration, Cloudflare may also provide privacy-first aggregate traffic and performance statistics. Your bitcoin amount, purchases, invested amount, nickname, goals and HodlClock settings are not intentionally sent as analytics data.
Legal basis: legitimate interest in operating, securing and improving the service (Art. 6(1)(f) GDPR).
Payments are processed by Stripe Managed Payments, which acts as merchant of record for eligible HodlClock Pro transactions. Stripe collects the checkout and billing information needed to process the purchase, including your email, billing country and payment details, under Stripe’s own privacy terms. HodlClock does not receive or store your card details.
After a successful purchase, our backend running on Cloudflare stores only the minimum entitlement data needed to provide Pro: a one-way SHA-256 hash of the purchase email, Stripe customer and subscription identifiers, the plan, subscription status and the current billing-period end. We do not store your plaintext purchase email in the HodlClock entitlement database.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations for accounting where applicable (Art. 6(1)(c) GDPR).
When Stripe returns you to HodlClock after checkout, your device sends the Stripe Checkout Session identifier to our Cloudflare Worker. The Worker verifies the purchase directly with Stripe before enabling Pro. A successful verification is then stored locally on your device until the end of the verified billing period.
If you use “Restore Pro”, the email address you enter is used to find the matching paid entitlement and to send you a one-time 6-digit verification code through Resend. We do not add the plaintext address to the HodlClock entitlement database. Instead, it is normalized and hashed for matching. A hash of the one-time code is stored temporarily in Cloudflare D1 and expires after 10 minutes; the code itself is not stored in plaintext. Resend receives the email address only as needed to deliver the verification message.
Share images are created on your device. If you post to Nostr from HodlClock, the post is signed by your own Nostr signer and published to public Nostr relays (for example relay.damus.io, nos.lol, relay.primal.net). Posts on Nostr are public and cannot be reliably deleted. Amounts and your name appear on share images only if you switch them on.
If you email us, we use your message and email address to answer and keep the conversation as long as needed for that purpose.
Some providers above (for example Cloudflare, Stripe, Coinbase and Google) may process data in the United States or other countries outside the EU. Where this happens, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing based on legitimate interest, and to data portability. Because your HodlClock data is only on your device, you can view and delete most of it yourself. For anything we hold (for example purchase or support emails), write to hodlclock@gmail.com.
You also have the right to lodge a complaint with a supervisory authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk).
HodlClock is not intended for children under 16.
If we change how HodlClock handles data, we will update this page and the date at the top.