Privacy Policy

Who runs this site

SimpleCronTab is run by SABOPS as a personal project. There is no company, no employees, and no shared infrastructure with other services beyond the third-party providers named below. The contact address for all privacy, legal, and editorial matters is tech@serviceproviderskenya.com.

What information we collect

We collect information in four narrow contexts. Each is described below in plain language.

1. Google Analytics 4 (GA4)

The Service uses Google Analytics 4, loaded through the nuxt-gtag module. GA4 records standard web analytics events such as page views, click events on the visual cron builder, tab switches between Visual / Expression / Plain English modes, share-link copies, and calendar/timeline toggles. GA4 receives device and browser information (operating system, browser version, screen size, language), referrer information, and a truncated (anonymised) IP address per GA4's default configuration. GA4 does not receive your full IP and we do not attempt to re-identify you. We use the data in aggregate to understand which features are used and which schedules are most often built.

2. Google Tag Manager (GTM)

GTM is loaded as a container that may, in turn, load additional measurement tags configured by the operator. At the time of writing, the only meaningful tags loaded through GTM are the Google Analytics 4 measurement tag described above and the Google AdSense ad serving scripts. GTM itself sets a small number of session and consent cookies needed to coordinate tag loading.

3. Google AdSense

The Service displays advertising provided by Google AdSense. AdSense sets cookies (most notably __gads and __gpi) used for ad measurement, frequency capping, and personalised or non-personalised ad selection depending on your consent and region. Google may use information about your visits to this and other websites to provide advertisements about goods and services that may interest you. For visitors in the European Economic Area, the United Kingdom, and Switzerland, Google's consent management framework presents a consent prompt before any personalised advertising data is processed. You can review and change Google's ad personalisation settings at adssettings.google.com.

4. Server-side rate limiting

The free public API exposed under /api is protected by an in-memory rate limiter that records the requesting IP address for the duration of a rolling sixty-second window (currently capped at one hundred requests per minute per IP). The IP address is held in process memory only, is not written to disk, is not transmitted to any third party, and is discarded as soon as the rolling window expires. No HTTP request body is logged.

5. Cron expressions you enter

Cron expressions you type into the visual builder or expression editor stay in your browser. They are encoded into URL query parameters so that share links work, but the URL is constructed on your device and is only transmitted to a server if you choose to send the link to someone else. We do not log, store, or analyse the expressions themselves.

Cookies and local storage

The Service uses cookies and browser local storage set by third parties (Google) and by the site itself. Names and purposes are listed in the Cookie Policy. In summary, you should expect to see:

• _ga, _ga_* — Google Analytics 4 client identifier and session state.
• Google Tag Manager container cookies — used to coordinate tag loading.
• __gads, __gpi — Google AdSense cookies for ad measurement.
• color-mode — a localStorage entry that remembers your light or dark theme preference. This value is set in your browser and is never transmitted to any server.

Legal basis (GDPR / UK GDPR)

Where you are in the European Economic Area, the United Kingdom, or Switzerland, processing of your personal data on this Service is based on the following legal grounds:

• Legitimate interest for aggregate, anonymised analytics used to understand which features are used and to debug performance regressions.
• Consent, captured through Google's consent management framework, for personalised advertising. If you refuse personalised ads you will continue to see ads, but selected on the basis of context (the page you are on) rather than your behavioural profile.
• Legitimate interest for short-lived server-side rate limiting to prevent automated abuse of the free public API.

Who we share data with

We share information only with the third parties strictly required to operate the Service: Google (for Analytics, Tag Manager, and AdSense) and Cloudflare (the static hosting and CDN provider that serves this site). We do not sell, rent, or trade first-party data to anyone. We do not maintain any first-party advertising or behavioural profile of our visitors.

Your rights

Depending on your jurisdiction you may have the right to access, correct, or delete personal data held about you, to object to certain kinds of processing, or to withdraw consent. Because this Service does not maintain user accounts and does not store first-party personal data beyond the short-lived rate-limiter window described above, most rights are exercised against the third parties listed below rather than against us directly:

• To opt out of Google Analytics tracking on any site, install the Google Analytics opt-out browser add-on.
• To manage Google's use of advertising cookies, visit adssettings.google.com.
• To clear cookies set by the Service, use your browser's cookie management tools.

For privacy queries that cannot be resolved through the controls above, contact the operator at tech@serviceproviderskenya.com. We respond to verifiable requests within thirty days.

Children

The Service is a developer-focused utility and is not directed at children under sixteen. We do not knowingly collect personal information from children. If you believe a child has used the Service in a way that resulted in personal information being collected, please contact the operator and we will take appropriate action.

International transfers

The Service is delivered through Cloudflare's global edge network and uses Google services operated from data centres around the world. By using the Service you accept that personal data may be processed in jurisdictions outside your country of residence, including the United States. The relevant providers have published their own safeguards (Standard Contractual Clauses and equivalent mechanisms) that govern these transfers.

Retention

GA4 retains event-level data for the period configured in our Google Analytics property (default 14 months). Aggregate reports are retained indefinitely. AdSense data is retained according to Google's own policies. The server-side rate-limiter window flushes every sixty seconds and retains nothing on disk.

Changes to this policy

When this policy changes, the “Last updated” date at the top of the page changes too. Material changes — for example adding a new analytics provider or a new cookie — will additionally be summarised in a short notice at the top of the page for at least thirty days. Continuing to use the Service after a change indicates acceptance of the revised policy.

Contact

Privacy queries, data-subject requests, and complaints can be sent to tech@serviceproviderskenya.com. You may also contact the relevant supervisory authority in your country of residence directly.