Privacy

Your account: name, email, a hashed password, and when you last signed in.

Your workspace content: tasks, time entries, comments, documents — whatever you put in.

Operational logs: request timing and error traces, kept 30 days, used to find out why something broke.

No third-party advertising or analytics trackers. No session recording. No reading your screen, your keystrokes or your window titles — this product tracks time on tasks you click, and nothing else.

We do not train models on your content.

One: the session cookie that keeps you signed in. It is httpOnly, SameSite=Lax, and goes away when you sign out. There is no consent banner because there is nothing to consent to.

Our hosting and database providers, as processors, under contract. No one else.

We will tell you before any new processor touches your data, not after.

Export everything from the app at any time. Delete your account from the app at any time — content goes immediately, backups age out within 30 days.

Access, correction, portability, erasure and objection under GDPR and UK GDPR all apply. Email privacy@yetrics.app and a person will answer within 30 days, usually the same week.

A signed DPA with standard contractual clauses is available on every paid plan. Ask and we will send it the same day — it is not gated behind a sales call.