Privacy Policy
Last Updated: October 2026
1. Current Phase: Local Browser Storage
When you use the TimeCard Web calculator, all shift entries (clock-in, clock-out, break minutes), hourly wage rates, workweek preferences, and timesheet metadata are stored locally on your device in your browser's localStorage.
This local persistence is used strictly so that your work is not lost if you accidentally close or refresh the browser tab. In Phase 1, calculation inputs are processed entirely client-side. We do not transmit, collect, or store your daily hours, wage rates, employee names, or timesheets on our backend servers.
2. Future Data Processing (Planned Phases)
As the platform expands in future phases, the following optional data processing activities are planned:
- Optional User Accounts (Phase 4): If you choose to create an account to save timesheet history across devices, authentication and database records will be protected using Supabase Row-Level Security (RLS) access control policies and industry-standard database encryption in transit and at rest. You will always be able to export or delete your account data.
- Web Analytics (Phase 5): If privacy-respecting analytics (such as Google Analytics 4) are enabled, they will measure aggregate page usage and tool completions without capturing individual wages, shift details, or personal identifiers.
- Advertising (Future Monetization): If compliant advertising networks are integrated in the future, cookie and consent management policies will be updated to allow users to configure their tracking preferences in compliance with regional regulations.
3. Data Control & Deletion
You have complete control over all data saved by TimeCard Web. You can clear your locally saved timesheet at any time by clicking the "Clear" button on the calculator, or by clearing your browser's site data and cookies for this domain.
4. External Links
Our educational articles and references link to official government websites, including the U.S. Department of Labor (DOL). We are not responsible for the privacy practices or content of third-party domains.