Privacy policy

Accounts and sign-in

Sign-in is provided through Neon Auth using email and password. Account information can include your name, email address, profile image and a unique account identifier. We use that identifier to associate saved records with your account.

Authentication services use cookies and session information to keep you signed in and protect access to your records. Please review Neon’s privacy information for its own processing.

Saved timecards and templates

When you save a timecard, OnlineTimecards stores its title, work dates when entered, clock-in and clock-out entries, breaks, calculation settings, notes, report header, and calculated hours or pay estimates. Saved record metadata includes creation and update times and sharing status. Reusable templates retain preset work entries and settings, and may retain notes and report headers, with dates cleared.

Records are stored in a PostgreSQL database hosted by Neon. Vercel hosts this website. These service providers process information needed to operate the website. Avoid entering employee identifiers, confidential workplace information or other details you do not need for your own timekeeping.

Cookies and browser storage

Cookies support authentication and language preferences. Browser storage also remembers display preferences. When you start sign-in from an unfinished timecard, temporary session storage preserves your entries so they can be restored afterward.

Browser-stored information belongs to that browser or device. Clearing site data can remove it. Disabling cookies can prevent sign-in or other account features from working.

Optional public sharing

Timecards are available through your account unless you enable a public share link. Anyone who has an enabled share link can read that record, including its notes, report header, work entries and pay information when present. Share only information you intend other people to see. Reusable templates cannot be publicly shared.

You can stop sharing from your account. A disabled share link no longer opens the record through this website, but disabling it cannot remove copies, downloads or screenshots already made by someone else.

Service operation and contact

Hosting and authentication providers may process technical information, such as request, device and security logs, to operate and protect the service. OnlineTimecards currently loads no advertising or visitor analytics scripts.

The contact page opens your own email app. If you choose to send an email, the recipient receives the address, message and attachments you send. Do not send passwords, authentication codes or sensitive work records.

Managing and deleting information

You can edit your saved records, stop sharing timecards, and delete timecards or templates from the active dashboard. Deleting a record currently marks it as deleted; it does not immediately erase every underlying record or backup.

You can download a JSON copy of your active saved timecards and templates. This download excludes deleted records, account profile and authentication details, sharing links, provider logs and backups. It is an export of active work records, not a complete account-data export.

For help with account information, a broader data request, or permanent deletion, use the email address on the contact page. Identity may need to be verified before account information can be provided or changed. Complete account-data export and permanent account deletion are not currently self-service features.

Security and changes

Account requests are checked against the signed-in user, and connections to managed services use encrypted transport. No internet service can guarantee complete security; keep your sign-in credentials and share links private.

If the information used by this service changes, this policy will be updated. The date above identifies the latest revision.

Privacy questions

Contact us with questions about this policy or your account information. Please include only the information necessary to describe your request.