← Back to home

Privacy Policy

Last updated: April 2025

1. Introduction

Welcome to Track Your Time (“we”, “our”, “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, why we collect it, and how we use it in accordance with the General Data Protection Regulation (GDPR) and other applicable data-protection laws.

2. What Data We Collect

  • Account information – name, email address, and profile picture provided by your OAuth provider (Google or GitHub) when you sign in.
  • Usage data – time entries, project names, and other content you create while using the service.
  • Technical data – IP address, browser type, operating system, and pages visited, collected automatically for analytics and security purposes.
  • Cookies – small text files placed on your device to keep you signed in and to analyse how the site is used (see Section 5 for details).

3. How We Use Your Data

  • To provide, operate, and improve the service.
  • To authenticate you and keep your account secure.
  • To analyse usage patterns and improve performance.
  • To comply with legal obligations.

4. Legal Basis for Processing

We process your data on the following legal bases under GDPR:

  • Contract – processing is necessary to provide the service you have signed up for.
  • Consent – for non-essential cookies and analytics (you can withdraw consent at any time via the cookie banner).
  • Legitimate interests – for security monitoring and fraud prevention.

5. Cookies

We use the following types of cookies:

  • Strictly necessary cookies – required for authentication and core functionality. These cannot be disabled.
  • Analytics cookies – help us understand how visitors interact with the site (e.g. Vercel Analytics). These are only set if you click “Accept All” in the cookie banner.

You can change your cookie preferences at any time by clearing your browser's local storage for this site or by using the banner that appears on your first visit.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and all associated data at any time by contacting us.

7. Your Rights

Under GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data (“right to be forgotten”).
  • Object to or restrict processing of your data.
  • Data portability – receive your data in a machine-readable format.
  • Withdraw consent at any time without affecting prior processing.

To exercise any of these rights please contact us at the email address listed below.

8. Third-Party Services

We use the following third-party services that may process your data:

  • Google OAuth / GitHub OAuth – for authentication. Their respective privacy policies apply.
  • Vercel – our hosting provider. See Vercel's Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the site. Your continued use of the service after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please open an issue in the GitHub repository.