Privacy statement
What we know about you, why we know it, and how to get rid of it. Without an account we keep nothing about you.
Last updated on 12 September 2026
The short answer
The tools work without an account. Used that way, we store no data about you. What you set — the time on the timer, the sound, the language — stays in your own browser.
Create an account and we keep your name, your email address and whatever you save yourself: your groups and your favourite tools. Nothing more.
We sell no data and we send no marketing email.
Who is responsible
Reppilo, , Chamber of Commerce , is the controller for the data set out below.
Questions about your data or about this statement go to hallo@reppilo.nl.
What we process
With an account:
- Your name and email address, so you can log in and we can reach you about your account.
- Your password, stored hashed. We cannot read it.
- Your language, so the site opens in the same one on every device.
- Your groups: the names you put in a list yourself.
- Your favourite tools: which tools you starred.
- If you use two-factor authentication or a passkey, what is needed to check it.
- Your session: a technical identifier, your IP address and your browser type, so you stay logged in and we can spot abuse.
Without an account too
Our server keeps technical logs of every visit: the address requested, the time, an error if something goes wrong, and the IP address. We need those to fix outages and stop abuse. We keep them briefly.
What you set in a tool stays in your browser and never reaches us. The cookie statement lists exactly what is stored.
Statistics are only measured if you agree to them in the cookie notice. Say no and they stay off.
Why we are allowed to
To perform our agreement with you: your account, your groups and your favourites are what you created an account for.
On a legitimate interest: securing the site and keeping technical logs, so the site keeps working and abuse shows up.
On your consent: cookies for statistics. You can withdraw that consent at any time.
To meet a legal duty: any payment we may offer later has to be kept in our books.
Pupils' names
A name list usually holds children's names. That is personal data about someone other than you, and we treat it carefully.
Put in no more than you need. A first name is enough to split a class; a surname, a register number or a note about a pupil does not belong in it. Sensitive details never do.
We do not read those lists, use them for nothing else and share them with nobody. They sit under your account alone, and they are gone the moment you delete the group or your account.
If you use the site on behalf of a school, the school is usually the controller and we are the processor. If your school needs a data processing agreement for that, email hallo@reppilo.nl.
How long we keep it
Your account and everything under it stays as long as you keep the account. Delete it and your details, your groups and your favourites are removed straight away and for good.
An account unused for three years is deleted. We send an email before that happens.
Technical logs are kept for at most fourteen days. Sessions expire on their own once you are idle.
Who else sees it
We use a few providers to keep the site running. Each of them is bound to use the data for us alone.
- Our hosting provider, which runs the servers and the database.
- The provider that sends our email: confirmation messages and password resets.
- If you consent to statistics, their provider joins that list. The cookie statement says which.
Outside Europe
Our servers are in the European Union and we would rather keep the data there.
A statistics provider may process data outside the EU. That only happens under the safeguards European rules require, and only once you have given consent.
How we secure it
All traffic with the site runs over an encrypted connection. Passwords are stored hashed and cannot be read back.
You can add two-factor authentication or a passkey to your account. We recommend it if you keep groups with pupils' names.
If something does go wrong with your data, we tell you when the law requires it.
Your rights
You may see your data, correct it, take it with you and have it deleted. Two of those you do yourself, right now:
- See it and take it: your profile settings download all of your data in one file.
- Delete it: your profile settings delete your account and everything under it.
- Correct it: your name and email address you change yourself; for anything else, email hallo@reppilo.nl.
- Object to processing or have it restricted: email hallo@reppilo.nl.
A complaint
If you think we are not handling your data properly, tell us first at hallo@reppilo.nl. Then we fix it.
If we cannot settle it together, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the supervisory authority in your own country.
Changes
When something about the site changes, we update this statement. The top of the page says when that last happened.
For an important change we say so on the site or by email.