Privacy policy — browser extension

The clocked browser extension is an optional companion to the open-source clocked desktop time tracker. It does not track time by itself. It only tells the desktop app which website is focused so site attribution is more accurate while you are already clocked in.

While the extension is enabled and you have pasted a sync token, it may send to the desktop app on the same computer:

• The active tab’s hostname (e.g. github.com) — never the full URL path or query string
• A short window title (capped length), when available
• Your sync token (clk_…) in an HTTP Authorization header so only your local bridge accepts the message

These messages go only to http://127.0.0.1 (localhost) on a port you configure (default 19532). The extension does not call clocked.daviddusi.com, Google, or any other remote server for tracking.

• Token, port, and enabled flag are stored in chrome.storage.local on this device only (not Chrome sync across machines).
• A short “last domain” status may be kept in session storage for the popup UI.
• The desktop app may store aggregated app/site time locally (and optionally sync presence hours and project totals to your clocked cloud account if you use cloud sync). That cloud behavior is governed by your clocked account and the main product privacy practices on the website.

• Page content, form fields, passwords, or keystrokes
• Screenshots or screen recordings
• Browsing history history dumps (only the currently active tab’s host, when reporting is on)
• Advertising identifiers or analytics cookies from this extension

• tabs — read the active tab hostname and short title
• storage — save your token and settings on this device
• alarms — keep reporting while you stay on one tab after the worker sleeps
• http://127.0.0.1/* — talk to the desktop bridge only

• Turn off “Report active tab” in extension Options
• Clear the token or uninstall the extension anytime
• Do not install the extension if you only want the desktop app

The extension is not directed at children under 13. Do not use it if you are under the age required by applicable law to consent to data processing.

We may update this policy when the extension changes. The “Last updated” date at the top will change. Continued use after an update means you accept the revised policy.

Questions: open an issue on github.com/DaveDushi/clocked or use Contact sales on https://clocked.daviddusi.com.