Last updated · May 2026

Privacy Policy

This policy explains how Monolith ("we", "us") processes personal data when you visit monolithtime.com. It is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the ePrivacy Directive.

Your current choice

You have not made a choice yet. The consent banner will be shown.

1. Data controller

The data controller responsible for personal data processed on this website is the operator of Monolith. You can reach us via our contact page for any privacy-related question, including requests to exercise the rights described below.

2. What we collect and why

Local preferences (strictly necessary). We store small entries in your browser's localStorage to remember your theme, accent colour, clock style and your cookie-consent choice. This data never leaves your device and is not shared with us.

Contact form data. If you submit the contact form, we receive the name, email address and message you provide so we can reply. Submissions are kept only as long as needed to handle your request.

Server logs. Our hosting provider may keep short-lived technical logs (IP address, user-agent, request path) for security and abuse prevention. These logs are deleted on a rolling basis and are not used for analytics or profiling.

Advertising data (only with consent). If you click Accept on the cookie banner, we load Google AdSense. Google then receives your IP address, user-agent, the page you are viewing, and may set cookies and similar identifiers to deliver and measure personalised ads.

3. Legal bases (GDPR Art. 6)

  • Consent (Art. 6(1)(a)) — for advertising cookies and any non-essential processing tied to ads. Withdraw at any time using the controls above or the "Cookie settings" link in the footer.
  • Legitimate interests (Art. 6(1)(f)) — for short-lived security logs and spam-protection on the contact form (e.g. honeypot, rate limiting). You can object via the contact page.
  • Performance of a request (Art. 6(1)(b)) — when you send us a message, to reply to it.

4. Cookies and similar technologies

The site itself sets no cookies. We use browser localStorage only for the items above; these are strictly necessary and exempt from consent under the ePrivacy Directive (Art. 5(3)).

Google AdSense, once you consent, may set the following categories of cookies/identifiers in your browser, controlled by Google: ad personalisation and measurement (e.g. IDE, ANID, __gads, __gpi), fraud prevention, and frequency capping. The full and current list is published by Google here.

5. Sharing and recipients

We do not sell personal data. The only third-party recipient is Google LLC / Google Ireland Ltd. via AdSense, and only after you give consent. Our hosting provider processes requests on our behalf as a processor under GDPR Art. 28.

6. International transfers

Google AdSense involves transfers of personal data to the United States and other countries outside the EEA / UK. Google relies on the EU–US Data Privacy Framework and on Standard Contractual Clauses adopted by the European Commission as the legal mechanism for these transfers. Details are available in Google's framework notice.

7. Retention

  • Local preferences: stored on your device until you clear them or change your choice.
  • Consent record: stored on your device only.
  • Contact-form messages: kept only as long as necessary to handle the conversation, then deleted.
  • Server logs: short rolling window (typically up to 30 days) for security purposes.
  • AdSense data: governed by Google's retention policies.

8. Your rights

Under the GDPR you have the right to: access your data (Art. 15), rectify it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interests (Art. 21), and withdraw consent at any time (Art. 7(3)) without affecting the lawfulness of past processing.

To exercise any of these rights, contact us via our contact page. We will respond within one month (GDPR Art. 12(3)).

You also have the right to lodge a complaint with a supervisory authority (GDPR Art. 77), in particular in the EU/EEA member state of your residence, place of work, or place of the alleged infringement. A list of national authorities is available on the European Data Protection Board website.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you (GDPR Art. 22).

10. Children

The service is not directed at children under 16. We do not knowingly process personal data of children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Security

Traffic is served over HTTPS. We apply reasonable technical and organisational measures to protect personal data, but no internet-based service can be guaranteed 100% secure.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on the site.

13. Contact

For any privacy-related question or to exercise your rights, please use our contact page.