TrackTimer Privacy Policy

Last updated: September 25, 2026.

Who we are

TrackTimer is operated by Dawn Patrol, LLC. This policy covers the TrackTimer website, application, API, and agent integrations. Contact hi@tracktimer.app with privacy questions or requests.

When you use a workspace managed by another organization, that organization determines how its work records are used and who can access them. Contact your workspace administrator about its policies. We also process account and service information to operate and protect TrackTimer.

Information we process

• Account and security information: your name, email address, timezone, workspace memberships and roles, passkey public-key credentials, session information, authorization grants, and recovery/security records. Your device handles passkey authentication; TrackTimer does not receive your fingerprint, face scan, or passkey private key.
• Work records: client and project names, assignments, timer start and stop times, durations, billable settings, notes, saved pay and billing rates, earnings calculations, and correction reasons and history. Workspace administrators can access information allowed by their role.
• Mac activity summaries (optional): if you set up the TrackTimer Mac app and allow screen access, it reads the window title and on-screen text of the app in the foreground, removes known secrets, and sends that text to AI models through Vercel AI Gateway to categorize your work. TrackTimer stores the resulting activity blocks (times, titles, summaries, categories, and app names) and the icons of the apps you used. Screenshots stay on your Mac, and only if you turn that on.
• iPhone app: a Live Activity push token so a running timer on your Lock Screen can be updated or ended. The app also keeps a copy of your latest timer and workspace data on your iPhone so it works offline; it is readable only while your iPhone is unlocked, is excluded from backups, and is removed when you sign out or delete your account.
• Connections: the agent or application you authorize, approved permissions, workspace binding, access and refresh credentials needed to provide the connection, and recorded connection verification or time-change activity. Personal API keys and connected invoicing credentials are also handled when you use those features.
• Service usage: requests, errors, security and abuse-prevention records, and hosting/provider diagnostics. The website uses Vercel Web Analytics for usage and referral reporting. Custom discovery events contain an allowlisted public page path; they do not include your names, email addresses, work notes, rates, or time-entry values.
• Public FAQ questions: the text and time of questions accepted by the website FAQ, whether they were answered, declined, or could not be answered, and the public page used to support an answer. Saved question records do not include an account ID or IP address.
• Support: information you choose to send when asking for help.

Do not put passwords, payment-card details, government identifiers, health records, or other unnecessary sensitive information in project names, notes, FAQ questions, or support messages.

How we use information

We use information to authenticate you, provide workspaces and time tracking, calculate reports, maintain correction history, carry out requested integrations, respond to support requests, understand service usage and the product or documentation topics visitors ask about, and prevent abuse. Where applicable data-protection law requires a legal basis, these uses depend on providing the service you request, legitimate interests in operating and securing it, legal obligations, or consent where required.

Agents and connected services

Connecting an agent authorizes the permissions and workspace shown during consent. When that agent calls TrackTimer, we return the information needed for the requested tool: this can include your profile label, clients/projects, personal time entries and notes, rates and earnings, and correction history. Your agent provider receives those results and handles them under its own terms and privacy policy. Review that provider's settings before connecting.

The TrackTimer MCP integration operates on the connected user's own time. Starting a timer stops that user's existing timer even in another workspace; it does not disclose the other workspace's timer details. Installing the plugin or skill does not enable automatic background tracking or computer surveillance.

You can revoke agent access in Connected agents. Revocation prevents subsequent authorized access; it does not erase information already returned to an agent or remove records from that provider's conversation history. Request removal from the provider separately where appropriate.

If a workspace connects Mercury, requested invoicing operations exchange relevant customer, time, and invoice information with Mercury. You control whether to connect an integration; connected providers have their own privacy practices.

Service providers and disclosure

TrackTimer uses providers to host the application and analytics (Vercel), store application data (Neon), and deliver authentication and transactional email (Resend). Information is also shared with services you choose to connect, workspace participants according to their permissions, and support personnel as needed to resolve your request. We may disclose information when required by law, to protect rights and security, or in connection with a business transfer subject to applicable protections.

When you use the public FAQ question field, the question is sent through Vercel AI Gateway to model providers for classification and, when appropriate, an answer based on TrackTimer's public documentation. We save accepted questions to understand what visitors want to know and improve the product and documentation, even when a question is declined or an answer fails.

Cookies and browser storage

Authentication uses cookies and related session mechanisms. Browser storage also supports interface preferences and tools; for example, a Pomodoro session and the most recent public call-to-action page may be stored for the current tab. If you arrive from an OpenAI (ChatGPT) ad, that ad's attribution code is also kept in the tab's browser storage, as described under Advertising measurement. Clearing browser storage can reset those features. Blocking cookies may prevent sign-in. Analytics availability depends on browser and hosting settings.

When advertising measurement is enabled, a small banner asks whether you accept advertising cookies until you make a choice. I accept allows them; Manage preferences lets you turn advertising measurement off instead. Cookies that keep you signed in and the site working are always on. Your choice is stored in a cookie.

Advertising measurement

When advertising measurement is enabled, the Google Ads tag loads automatically for basic measurement without advertising cookies. Until you allow cookies, we send Google's consent settings as denied, disable advertising personalization, and enable ad-click data redaction. Google may receive limited measurement signals, including consent status, public page visits, successful account signups, and browser and network information, to measure and model ad performance. A random signup-event receipt travels in the email-link redirect, is removed from the browser URL before our Google tag starts, and is used once to avoid duplicate conversion events. This receipt is not an account identifier or authentication token and is not saved in browser storage. This does not provide the same attribution as cookie-based measurement.

If you arrive from an OpenAI (ChatGPT) ad, OpenAI adds an attribution code to the link you open. We keep that code in browser storage for that tab's session, not in a cookie. If you then create an account, the code travels with the random signup receipt in the email-link redirect, and TrackTimer's servers report a signup event with that code and receipt to OpenAI to measure ad performance. The report does not include your email address, name, account ID, or IP address. We do not keep or report the code if you have turned advertising measurement off in the browser where you open the ad or your sign-in link, and turning measurement off removes a kept code.

Use the cookie banner or Cookie settings in the website footer to allow advertising cookies or turn advertising measurement off. A saved refusal prevents advertising tags from loading; turning measurement off reloads the page to stop already loaded tags. Allowing cookies enables Google to use advertising cookies and ad-click identifiers for measurement, and loads OpenAI's measurement pixel, which can use its own cookies and the ad's attribution code to measure signups; personalized advertising remains disabled. Your explicit choice is stored for up to 180 days. If you allow cookies, a temporary random signup measurement receipt expires after one hour or is cleared after being queued for measurement. Our application event payloads, including the server-side signup report to OpenAI, do not include email addresses, account IDs, authentication tokens, or work records. Advertising scripts can access browser page context, so their configuration is reviewed separately from application event payloads. Blocking advertising scripts can prevent browser conversion reporting. Vercel Web Analytics is separate from this advertising preference.

Retention and deletion

Work records and correction history are retained to provide workspace history and reports while needed for that service. Retention also depends on account/workspace status, security and dispute-resolution needs, applicable legal obligations, and backup lifecycles. Stopping a timer, voiding an entry, disconnecting an agent, or removing a member does not by itself erase historical records.

Public FAQ questions are retained while needed to understand product and documentation needs. They are not tied to an account, so a request to find a particular anonymous question may require its text and approximate submission time.

You can delete your account in the TrackTimer iPhone app under Settings > Delete Account, after confirming it's you with Sign in with Apple or a code sent to your email. Deletion takes effect immediately and:

• removes your sign-in methods, sessions, passkeys, recovery codes, API keys, connected agent access, profile, Mac activity summaries, and Live Activity registrations;
• deletes any workspace only you use, together with its clients, projects, time, invoices, and integrations;
• removes you from workspaces you share with others. Time you recorded there stays with that workspace as its records and is shown as from a former member, without your name or email. If you own a workspace with other people, transfer ownership first.

We keep a record that a deleted account and its workspaces existed, without your name, email, or workspace names, so records we must retain, such as billing history, stay consistent. Your email address is released, so you can create a new account with it later; a new account starts with none of the deleted data. If you used Sign in with Apple, TrackTimer asks Apple to revoke its access when you confirm with Apple; you can also remove TrackTimer in your Apple Account settings. Deleted data may remain in backups until they expire on their normal schedule.

Contact hi@tracktimer.app to request access, correction, export, or deletion by email. We may need to verify your identity and coordinate with the workspace administrator. We will explain any records that must be retained and any applicable exceptions. A deletion request does not automatically delete copies held by connected agent providers.

International processing and your rights

Our providers may process information outside your country. Applicable protections and rights depend on your location and the processing involved. Contact us for information about processing locations and safeguards before providing data with specific residency requirements; TrackTimer does not promise storage in your country.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your information; restrict or object to processing; withdraw consent; or complain to your local data-protection authority. Contact us to exercise a right or ask how it applies. Withdrawal of consent does not affect prior lawful processing.

Children and changes

TrackTimer is intended for professional use by adults, not children. If you believe a child has provided personal information, contact us. We may update this policy as the service changes, update the date above, and provide additional notice where required.