Privacy Policy

HourTrace stores what you choose to put in the app: places, organizations or clients, projects, activities, time entries, notes, goals, milestones, settings, feedback, and imported records. That can include personal context about your work, schedule, location, clients, and habits, so HourTrace treats it as private account content. When you use Google sign-in, HourTrace receives the account details needed to identify your account and maintain your session, such as your email address and profile name when available.

HourTrace may receive basic technical information such as request details, browser information, device information, and error context. This information is used to keep the service reliable, secure, and understandable when something goes wrong.

HourTrace uses Vercel Analytics and Speed Insights to understand aggregate product usage, page performance, and reliability. That helps us see whether pages are slow, broken, or actually useful. HourTrace does not use advertising pixels, cross-site tracking, session replay, or sell personal data.

HourTrace uses strictly necessary cookies and browser storage for your session, security, saved preferences, active tracking state, and app reliability. Vercel Analytics does not use cookies. HourTrace does not use advertising cookies or tracking pixels.

HourTrace uses your information to provide the product, sync your timeline across sessions, generate reports, preserve settings, respond to feedback, prevent abuse, protect the service, and improve the private beta.

HourTrace keeps account content while your account is active or as needed to provide the service, troubleshoot issues, prevent abuse, comply with law, or protect rights. You can export data from Settings, use available tracker cleanup controls, and schedule full account deletion in Settings. Account deletion has a 7-day cancel window; during that time, HourTrace limits the account to export and cancel actions. After the window, HourTrace deletes the Supabase Auth account and HourTrace account content. Deleted data and backups may take a limited time to disappear from all systems.

HourTrace uses a small set of providers to run the service: Vercel for hosting, analytics, and performance telemetry; Supabase for authentication, database, realtime, and storage of HourTrace records; Google for OAuth sign-in; Resend for feedback email delivery; and Namecheap for the domain and support email forwarding. They are used to operate HourTrace, not to advertise to you or sell your data.

HourTrace does not sell your personal data or share it for advertising. That includes your notes, timeline history, track names, project names, organization names, activity records, feedback, and reports.

HourTrace is not directed to children under 13. If you believe a child under 13 has provided personal information to HourTrace, contact support so the account can be reviewed.

Access to user content is limited to what is needed to operate, secure, support, or legally protect HourTrace, or to complete an action you request. The product is built around the expectation that your timeline and notes are private to your account.

You can export your data from Settings. You can also ask to access, correct, delete, or receive a copy of personal data by contacting support. Account deletion is self-service in Settings when you can sign in. Some requests may require identity verification before HourTrace can act on them.

When this policy changes, HourTrace will update the version and effective date. If a change materially affects how your data is used, HourTrace may require in-app review before you continue using the product.