What we store, and what we do not.

What we store

Your email address, and the data you enter: clients, time entries and invoices. That is the whole set. We do not ask for a name, a phone number or a company until you put one on an invoice, and then it is only used to print that invoice.

How you sign in

Three ways: an emailed link, an email and password, or your Google account. Emailed links are single use, expire in twenty minutes, and only a hash of the link is stored. Passwords are stored as a scrypt hash and never in a form anyone can read back. Signing in with Google tells us your email address and your name, nothing else, and gives us no access to anything in your Google account.

Who else sees it

Five processors, each doing one job: a hosting provider that runs the application, a database provider that stores it, an email provider that delivers your sign-in links, a payment provider that takes the card, and a product analytics provider described below. Nobody else. We do not sell data and we do not share it with advertisers. There are no advertising scripts on this site and there never will be.

What we measure, and what we deliberately do not

We use PostHog to count which pages people read and which buttons they press, so that a one-person company can tell what is worth building next. The data stays in the European Union. There is no advertising network attached to it and it is not sold or shared.

What it records: pages visited, the site you arrived from, clicks on the public pages, your country, and your browser and screen size. It sets a cookie so that two visits by the same person are not counted as two people.

What it never records: anything you type. Client names, hourly rates, descriptions of your work and invoice figures are your commercial data and are excluded at the point of capture, not filtered out afterwards. Inside the signed-in application we record only that a screen was opened and that an action happened, never the content of it.

Turning it off: switch on Global Privacy Control in your browser and this site stops measuring you entirely, with no loss of function. Brave has it on by default. Any content blocker also stops it. We do not act on the older Do Not Track header, which the standards body discontinued in 2018 and which most browsers have removed.

Invoice PDFs

Invoices are generated when you ask for them and streamed to you. The line items are stored so an issued invoice can be reproduced exactly, which is also what tax record keeping requires.

Deleting your data

Ask from the settings screen or by email and the account and everything in it is removed. Export your invoices first, because deletion is not reversible.

Contact

Email privacy@hourtobill.com for anything on this page, including a copy of your data.