Pointly Track

Privacy Policy

Terms of use and data practices

Privacy and data

Privacy matters, even for a small free project. Pointly Track needs an account so your hours are still there tomorrow and on your other device. That is the only reason anything is kept. Here is exactly what happens with it.

What gets collected

  • Your email address. Either the one you type when you register, or the one on the Google account you sign in with. It identifies your account and nothing else.
  • Your password, only if you register with an email and password. It is hashed by Supabase before it is stored. It is never kept as readable text and I cannot see it.
  • A Google account id, only if you choose to sign in with Google. Google is asked for your email address and basic profile, nothing more. No contacts, no calendar, no files.
  • Your projects, capacities and hours, once that part of the app is built. At the time of writing the tracking screens do not exist yet, so there is nothing of yours in the database beyond your account.
  • A sign-in cookie. It keeps you logged in between visits. Without it you would have to sign in on every page.
  • Standard server logs. The hosting providers see things like your IP address and the time of a request as part of running any website.

What does not get collected

  • No analytics and no tracking scripts
  • No advertising and no ad cookies
  • No cookies at all beyond the one that keeps you signed in
  • No profiling and no third party trackers
  • Your data is never sold, rented or shared for marketing

There is no cookie banner because there is nothing to consent to. The only cookie is the one that signs you in, which is strictly necessary and exempt.

Where your data goes

  • Vercel hosts the site. Vercel sees standard server logs such as IP addresses and timestamps.
  • Supabase handles accounts, sign in and the database. Your email address, your hashed password and, in time, your projects and hours live there.
  • Google, only if you pick Google sign in. In that case Google tells this app your email address and account id, and Google knows you signed in here.

These are the only three. Each has its own privacy policy worth reading if you want the full picture of what an infrastructure provider sees.

When your data disappears

  • Ask for your account to be deleted and it goes, along with everything attached to it. Nothing is kept back.
  • There is no delete button in the app yet. Until there is, email david.boissevain@proton.me and it will be done by hand.

Your rights

You can ask for any of the following, and it will be done without fuss:

  • A copy of everything held about you
  • A correction, if something is wrong
  • Deletion of your account and all of its data

If you are in the EU, the GDPR gives you these rights, plus the right to complain to your national data protection authority if you think your data has been misused.

Security

  • Everything travels over an encrypted connection
  • Passwords are hashed by Supabase and never stored as readable text
  • Sign-in tokens are verified on the server on every request, not simply trusted

That said, this is a free project run by one person, not a bank. Use a password you do not use anywhere else, and do not put anything confidential in a project name.

Terms of use

As a free project, this tool

  • Costs nothing and always will
  • Comes with no warranty and no promise about uptime
  • May have bugs and may be down sometimes
  • May change or stop existing without notice, though you would get the chance to take your data with you
  • Should not be relied on for anything critical, such as billing a client

Please do not

  • Try to hack, abuse or disrupt the service
  • Use it for anything illegal or harmful
  • Create accounts in bulk or hammer it with automated requests

Minors

This tool is not aimed at children. If you are under 16, ask a parent before making an account.

Changes

This page will change as the app grows, and the date below moves with it. Anything that meaningfully changes what happens to your data will show up here first.

Last updated: 7 September 2026

Contact

Questions, worries or a deletion request? Send an email and you will get a real reply.

Email: david.boissevain@proton.me

Disclaimer

This tool is provided as is, with no warranty of any kind. No liability is accepted for data loss or for problems arising from using it. It is a free project, so please set your expectations accordingly. By using it you agree to what is written on this page.

Back to home