time-tracker is a tool for tracking your own work hours. This page explains what information the app collects, why, and what you can do about it. It covers the app as built; it is a first draft and has not yet had a legal review.
What we collect
When you create an account, we store:
- Your email address.
- Either a password (as a salted, one-way hash - we never store or can see the plain text) or, if you sign in with Google, an opaque identifier for your Google account. Not both.
When you use the app, we store the data you enter:
- The projects and tasks you create, including their names and colours.
- The time blocks you record: date, start and end time, which project/task, and any notes you write.
- Your preferences (time zone, time increment, week start day, theme, export template, and similar settings).
We also briefly keep technical data needed to run the service securely: your IP address (to detect abuse and enforce rate limits), and security-relevant events like failed sign-in attempts. We do not use advertising or analytics trackers.
Who else sees it
We do not sell your data or share it with other users - every account's data is private to that account. To run the service, a small number of infrastructure providers process data on our behalf, under their own security commitments:
- Our database and application hosting providers, to store and serve your data.
- Our email provider, to send you account emails (verification, password reset, security notices) - never marketing.
- Google, only if you choose to sign in with Google.
- Our backup storage provider, to hold encrypted nightly backups of the database.
- An error-tracking service, to help us find and fix bugs when the app crashes.
Cookies
We use a small number of strictly necessary cookies to keep you signed in and to protect the app from cross-site request forgery. We do not use advertising or tracking cookies.
How long we keep it
- Your account data is kept for as long as your account is active.
- Deleting your account starts a 30-day grace period (so a mistaken deletion can be undone by signing back in); after that, every row belonging to your account is permanently removed.
- Nightly encrypted database backups are kept on a rolling schedule and age out automatically, so a very recent deletion may still exist in a backup for a short time after it is removed from the live database.
- A record of email delivery events (bounces and complaints) is kept for 90 days, independent of account status, to keep our sending reputation healthy.
Your choices
- Download a copy of your data at any time from Settings → Your data.
- Delete your account at any time from Settings → Your data (30-day grace window, cancellable by signing back in).
- Change or correct your data directly in the app at any time.
Changes to this policy
If this policy changes in a meaningful way, we will update the date at the top of this page.
Contact
Questions about this policy: [contact email to be added before launch].