Security and data

Where data lives

• Database and sign-in: Supabase.
• Screenshots and clock-in photos: Cloudflare R2.
• The web app: Cloudflare (Workers).
• This website: Cloudflare Pages.

Walled off per company

Every table has row-level security. A boss reads only their own company. Nobody reads raw work sessions, time segments, activity samples or screenshots directly, only through checked calls. Plan limits are enforced on the server, not in the browser.

Sign-in

• Workers sign in with a 6-digit code sent to their email.
• Email confirmation is on. An unconfirmed account cannot keep a password.
• Access tokens expire after one hour.
• The tracker keeps its sign-in in Windows Credential Manager, never in a plain file.

Uploads

Each screenshot upload gets a signed link that carries a fixed file size and type. Screenshots are capped at 3 MB and clock-in photos at 2 MB. A clock-in photo key can be used once and expires after 10 minutes.

Honest hours

At clock-out the server will not credit time beyond the last signal it heard from the tracker, plus 60 seconds. A tracker silent for 15 minutes is clocked out at the last moment it was heard from.

Retention and deletion

• Screenshots and clock-in photos are deleted after 90 days.
• Hours are kept for the company's records.
• On request, we delete your data within 30 days.

Blur

On the Premium plan, the boss can blur screenshots on screen.

Report a problem

Write to [email protected].