Privacy for Tracy
Tracy stores account and work records to provide time tracking and synchronization. It does not include advertising, cross-app tracking, or analytics SDKs.
Last updated: 30 September 2026.
Scope and contact
This policy describes Tracy Time Tracking and tracy.malaber.de, operated by Daniel Schaedler. Contact tracy@schaedler.rocks for privacy questions or data requests. If you choose another Tracy server, its operator controls the data sent there and its privacy policy applies.
Account and authentication
The server stores your email address, display name, account identifier, passkey public credentials, and session records. Passkey private keys remain with your device or passkey provider. Native sign-in uses a short-lived one-use code; session credentials are stored in iOS Keychain.
Work records and preferences
Dates, check-in/out times, breaks, notes, days off, time-zone and work preferences are used to save entries, calculate totals, and synchronize your devices. These records are linked to your account. Enter only information you intend to store on your chosen server.
Offline storage
The app caches downloaded entries and calendar information and stores pending edits in its local application storage, separately per server/account. Pending edits are sent over HTTPS when syncing can resume. Appearance preferences remain on the device. iOS device backups may include local app data depending on your Apple settings.
Website and infrastructure
The web app uses essential session cookies for sign-in and account security. Requests expose ordinary network information, such as IP address, to the server and hosting infrastructure; operators may process technical logs for availability and security. Tracy's application does not load advertising or analytics scripts.
Purpose and sharing
Data is processed to provide the service you request and protect account security. It is sent to the server you select and its necessary hosting infrastructure. Tracy does not sell work records or share them for advertising. Support receives only what you send when asking for help. Apple processes App Store and TestFlight use under its own privacy terms.
Retention and your choices
Account and work records remain on your server until removed. Session and temporary authorization records have expiry checks. Removing the iOS app does not remove server data, and unsynced entries may be lost. You may request access, correction, export, or deletion through support; ownership is verified before account actions. Server operators control any infrastructure backup retention.