Privacy
Last updated October 3, 2026
Count.do is a countdown tracker made by Orkestra Studios. This page says what we keep, why, where it lives and for how long. We keep as little as we can: no ads, no trackers, no third-party cookies.
Who we are
Orkestra Studios runs Count.do and is responsible for the data described here. Write to berkcan@orkestra.co about anything on this page.
What we keep
- Without an account, your countdowns stay in your browser, not on our servers.
- With an account, we keep your email address, the countdowns you save and the categories you file them under, which only you see (an admin sees them only while editing or restoring that countdown), the order and sizes you give them and your List/Board choice, the reminder emails you switch on for a countdown, and your sign-in sessions with the IP address and browser they came from.
- To stop abuse, we keep short-lived counters, keyed by IP address, account or email address, that limit how often something can be done.
- When something breaks, we keep the error, the kind of page it happened on and the app version. We never keep a countdown's link there, and we mask email addresses.
Why we keep it
To run Count.do for you (your account and countdowns) and to keep it safe (limits, sessions, error records). We do not sell data, show ads or build profiles. The legal grounds are providing the service you asked for and our legitimate interest in keeping it safe.
Cookies and storage
One cookie keeps you signed in, and a small hint cookie says whether this browser keeps countdowns. Everything else stays in your own browser.
| Name | Kept in | What for | How long |
|---|---|---|---|
| __Secure-better-auth.session_token | Cookie | Keeps you signed in | About 7 days, renewed as you use it |
| count-do.guest-has | Cookie | Tells our server that this browser keeps countdowns on the device, so the first page it sends fits you | Up to 1 year (Safari keeps it 7 days at most; we write it again on every visit), removed when the device has none |
| count-do.guest.v1 | Local storage | Your countdowns, their categories, order and sizes, and the List/Board choice, before you sign in | Until you clear it |
| count-do.guest-import-reported | Local storage | Remembers countdowns that could not be moved into your account, so we tell you about them once | Until you clear it |
| count-do.guest-import-tried | Cookie | Moves your countdowns into your account once per visit | Until you close the browser |
- __Secure-better-auth.session_tokenKeeps you signed inCookie · About 7 days, renewed as you use it
- count-do.guest-hasTells our server that this browser keeps countdowns on the device, so the first page it sends fits youCookie · Up to 1 year (Safari keeps it 7 days at most; we write it again on every visit), removed when the device has none
- count-do.guest.v1Your countdowns, their categories, order and sizes, and the List/Board choice, before you sign inLocal storage · Until you clear it
- count-do.guest-import-reportedRemembers countdowns that could not be moved into your account, so we tell you about them onceLocal storage · Until you clear it
- count-do.guest-import-triedMoves your countdowns into your account once per visitCookie · Until you close the browser
Where it lives
Vercel hosts the site and keeps request logs for about an hour. Neon keeps the database in Frankfurt, Germany. Resend delivers sign-in emails and the reminder emails you switch on. Upstash QStash, in the European Union, keeps the times those emails are due; it receives only a countdown's id and a time, never your email address or a countdown's title. Each handles data only to run Count.do for us; some of them process data in the European Union and the United States.
How long we keep it
We clean up once a day, so each limit below can run over by about a day.
- Your account and countdowns: until you delete them or your account, on the Account page.
- Sign-in sessions: a session ends about 7 days after its last use. We delete its record, with its IP address and browser, 30 days after that.
- Sign-in codes: they expire after 5 minutes; the next cleanup deletes them.
- Abuse counters (keyed by IP address, account or email address): deleted once unused for 48 hours.
- Error records: capped in number; the oldest go first.
- Internal event records: 30 days after they are handled.
- Database backups: anything deleted can stay in a backup for up to 30 days.
Your rights
Under Türkiye's Personal Data Protection Law (KVKK) and the EU's GDPR, you can ask to see, correct, export or delete your data, and object to how we use it. With an account, you can download your data or delete your account yourself on the Account page. For anything else, write to berkcan@orkestra.co; we answer within 30 days. You can also complain to Türkiye's Personal Data Protection Authority or to the data protection authority where you live.
Children
Count.do is not for anyone under 16.
Changes
When this page changes, we update the date above. See also the Terms of use.