Privacy

Without an account (the free app)

Everything you track is written to your own browser’s local storage and stays there. Clockflux keeps app for your sessions and days off, appSettings for your holiday allowance and start date, hoursFormat for whether you prefer decimal or h:mm, appVisited to remember that you have seen the landing page, setupCompleted to remember that you have been through (or skipped) the quick setup, and appInstallState to remember whether you have installed the app to your home screen or dismissed that offer. None of it is sent anywhere, and there is no server holding a copy — which also means that clearing your browser data for this site erases your history for good. Consider Clockflux Pro if you would rather not rely on a single browser.

With an account

Signing in uses Google. Google tells us your name, email address and profile picture, and gives us a stable identifier for your account; we never see your Google password. We store those three details, your plan, and — on Pro — your time entries, days off and settings, so they can sync between your devices. Our servers run on Fly.io and the database is MongoDB Atlas, both in the EU.

Like most servers, ours keeps a log of the requests it handles: when each arrived, which part of the API it was for, how it went, and the IP address it came from. We use it only to keep the service secure and to work out what went wrong when something fails, never for analytics.

Signing in also adds local storage entries on the app: appUser for the cached profile the app renders, appAccessToken for the short-lived token it calls the API with, appLastSyncedSnapshot and appDataOwner (plus appDataOwnerBackups) so sync can tell your data apart from another account’s on a shared browser, and appHasSignedInBefore — which is deliberately kept even after you sign out, purely so the app can say “you have signed in here before” instead of looking like it silently downgraded you.

Staying signed in needs one cookie: refresh_token, set by our own API on .clockflux.app. It is HttpOnly, so no script can read it, and it exists only to keep your session alive across page loads. It is not used to track you, here or anywhere else.

Paying for Pro

Payments are handled by Stripe, which is the merchant of record for the sale. Your card details go to Stripe and never touch our servers. We store a Stripe customer and subscription identifier against your account, plus your plan and renewal date, so we know what you are entitled to. Stripe keeps the invoice and tax records the law requires it to.

Analytics

The site uses Vercel Web Analytics to count visits. It records page views and referrers only. It sets no cookies, it does not follow you to other sites, and it never sees the hours you log. To tell repeat visits apart it derives a hash from your IP address and browser details, which Vercel discards and regenerates each day, so it cannot be used to recognise you over time. That processing rests on our legitimate interest in knowing roughly how many people use Clockflux.

The app also uses Vercel Speed Insights to measure how quickly its pages load. It sends load-time measurements along with the page address and your connection type. Like the analytics, it sets no cookies and never sees the hours you log, and it rests on the same legitimate interest, in keeping the app fast.

There is no cookie banner because there is nothing to ask you about. The only cookie we set is the sign-in one described above, which is strictly necessary for a feature you asked for, and analytics sets none at all.

Your data, and getting rid of it

We do not sell your data, we do not use it to build a profile of you, and we do not use it to train anything. You can export your entries from the app at any time. You can delete your account from Settings, which cancels any subscription and erases everything we hold for you — the one exception being the invoice and tax records Stripe and we are legally required to keep. Deleting your account does not touch the copy in your own browser.

While you have an account, we keep your data for as long as the account exists. Sign-in sessions expire on their own within 30 days of last use.

You have the right to access, correct, export or erase your data, and to object to the analytics processing above. Email info@clockflux.app and we will sort it out.